Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 24, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
219221 3.5 注意 IBM - IBM WebSphere DataPower XC10 アプライアンスにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-6163 2014-12-15 18:18 2014-12-8 Show GitHub Exploit DB Packet Storm
219222 2.1 注意 IBM - IBM WebSphere DataPower XC10 アプライアンスにおける重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2014-6143 2014-12-15 18:17 2014-12-8 Show GitHub Exploit DB Packet Storm
219223 6 警告 IBM - IBM WebSphere DataPower XC10 アプライアンスにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2014-3058 2014-12-15 18:17 2014-12-8 Show GitHub Exploit DB Packet Storm
219224 10 危険 Node.js Foundation
IBM		 - IBM Rational Application Developer などの製品で使用される Node.js 用 syntax-error パッケージの index.js における Eval インジェクションの脆弱性 CWE-94
コード・インジェクション 		CVE-2014-7192 2014-12-15 18:16 2014-07-15 Show GitHub Exploit DB Packet Storm
219225 5 警告 IBM - 複数の IBM 製品の Rule Execution Server の Hosted Transparent Decision Service における任意のファイルを読まれる脆弱性 CWE-200
情報漏えい 		CVE-2014-6114 2014-12-15 18:16 2014-12-3 Show GitHub Exploit DB Packet Storm
219226 3.5 注意 Chyrp - Chyrp におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-7264 2014-12-15 18:05 2014-12-10 Show GitHub Exploit DB Packet Storm
219227 4.3 警告 ULTRAPOP.JP - i-HTTPD におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-7263 2014-12-15 18:02 2014-12-9 Show GitHub Exploit DB Packet Storm
219228 4.3 警告 Intelliants - Subrion CMS におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-9120 2014-12-15 17:06 2014-12-8 Show GitHub Exploit DB Packet Storm
219229 4.6 警告 Xiph.Org - Icecast における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2014-9091 2014-12-15 17:02 2014-05-6 Show GitHub Exploit DB Packet Storm
219230 7.5 危険 Zoho Corporation - 複数の ZOHO 製品におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2014-7866 2014-12-15 16:33 2014-09-27 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 25, 2026, 4:04 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
345011 - hp jetdirect HP Laserjet printers with JetDirect cards, when configured with TCP/IP, can be configured without a password, which allows remote attackers to connect to the printer and change its IP address or disa… NVD-CWE-Other
CVE-1999-1061 2017-12-19 11:29 1997-10-4 Show GitHub Exploit DB Packet Storm
345012 - hp jetdirect HP Laserjet printers with JetDirect cards, when configured with TCP/IP, allow remote attackers to bypass print filters by directly sending PostScript documents to TCP ports 9099 and 9100. NVD-CWE-Other
CVE-1999-1062 2017-12-19 11:29 1997-10-4 Show GitHub Exploit DB Packet Storm
345013 - cdomain cdomainfree CDomain whois_raw.cgi whois CGI script allows remote attackers to execute arbitrary commands via shell metacharacters in the fqdn parameter. NVD-CWE-Other
CVE-1999-1063 2017-12-19 11:29 1999-06-1 Show GitHub Exploit DB Packet Storm
345014 - icat electronic_commerce_suite Directory traversal vulnerability in carbo.dll in iCat Carbo Server 3.0.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the icatcommand parameter. NVD-CWE-Other
CVE-1999-1069 2017-12-19 11:29 1997-11-8 Show GitHub Exploit DB Packet Storm
345015 - excite ews Excite for Web Servers (EWS) 1.1 installs the Architext.conf authentication file with world-writeable permissions, which allows local users to gain access to Excite accounts by modifying the file. NVD-CWE-Other
CVE-1999-1071 2017-12-19 11:29 1998-11-30 Show GitHub Exploit DB Packet Storm
345016 - novell web_server Vulnerability in files.pl script in Novell WebServer Examples Toolkit 2 allows remote attackers to read arbitrary files. NVD-CWE-Other
CVE-1999-1081 2017-12-19 11:29 2002-01-15 Show GitHub Exploit DB Packet Storm
345017 - rtin
tin 		rtin
tin 		UNIX news readers tin and rtin create the /tmp/.tin_log file with insecure permissions and follow symlinks, which allows attackers to modify the permissions of files writable by the user via a symlin… NVD-CWE-Other
CVE-1999-1091 2017-12-19 11:29 2002-01-15 Show GitHub Exploit DB Packet Storm
345018 - kde kde Buffer overflow in kscreensaver in KDE klock allows local users to gain root privileges via a long HOME environmental variable. NVD-CWE-Other
CVE-1999-1096 2017-12-19 11:29 1998-05-16 Show GitHub Exploit DB Packet Storm
345019 - microsoft netmeeting Microsoft NetMeeting 2.1 allows one client to read the contents of another client's clipboard via a CTRL-C in the chat box when the box is empty. NVD-CWE-Other
CVE-1999-1097 2017-12-19 11:29 1999-05-4 Show GitHub Exploit DB Packet Storm
345020 - kde kde Buffer overflow in kppp in KDE allows local users to gain root access via a long -c (account_name) command line argument. NVD-CWE-Other
CVE-1999-1106 2017-12-19 11:29 1998-04-29 Show GitHub Exploit DB Packet Storm