Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
229911 4.3 警告 Mahara - Mahara におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-1667 2012-09-25 17:38 2010-07-6 Show GitHub Exploit DB Packet Storm
229912 4.3 警告 jcink - PHPQA の acpmoderate.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-1662 2012-09-25 17:38 2010-05-3 Show GitHub Exploit DB Packet Storm
229913 7.5 危険 jcink - PHPQA における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-1661 2012-09-25 17:38 2010-05-3 Show GitHub Exploit DB Packet Storm
229914 7.5 危険 instantrankingseo - Infocus Real Estate の system_member_login.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-1654 2012-09-25 17:38 2010-05-3 Show GitHub Exploit DB Packet Storm
229915 7.5 危険 htmlcoderhelper - Com_graphics の graphics.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2010-1653 2012-09-25 17:38 2010-05-3 Show GitHub Exploit DB Packet Storm
229916 5 警告 helpcenterlive - HCL の HelpCenter モジュールにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2010-1652 2012-09-25 17:38 2010-05-3 Show GitHub Exploit DB Packet Storm
229917 1.9 注意 IBM - IBM WAS における重要な情報を取得される脆弱性 CWE-310
暗号の問題 		CVE-2010-1651 2012-09-25 17:38 2010-05-3 Show GitHub Exploit DB Packet Storm
229918 1.9 注意 IBM - IBM WAS における重要な情報を取得される脆弱性 CWE-310
暗号の問題 		CVE-2010-1650 2012-09-25 17:38 2010-05-3 Show GitHub Exploit DB Packet Storm
229919 4.3 警告 Joomla! - Joomla! のバックエンドにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-1649 2012-09-25 17:38 2010-05-13 Show GitHub Exploit DB Packet Storm
229920 6.8 警告 MediaWiki - MediaWiki のログインインターフェースにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2010-1648 2012-09-25 17:38 2010-05-28 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 20, 2026, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
284401 - microsoft windows_2000
windows_2003_server
windows_xp 		The HTML Help ActiveX control (Hhctrl.ocx) in Microsoft Windows 2000 SP3, XP SP2 and Professional, 2003 SP1 allows remote attackers to execute arbitrary code via unspecified functions, related to uni… NVD-CWE-Other
CVE-2007-0214 2018-10-13 06:42 2007-02-14 Show GitHub Exploit DB Packet Storm
284402 - microsoft office
works 		wkcvqd01.dll in Microsoft Works 6 File Converter, as used in Office 2003 SP2, Works 8.0, and Works Suite 2005, allows remote attackers to execute arbitrary code via a .wps file with crafted section l… CWE-20
 Improper Input Validation  		CVE-2007-0216 2018-10-13 06:42 2008-02-13 Show GitHub Exploit DB Packet Storm
284403 - motive_incorporated self_service_manager
service_activation_manager 		Multiple stack-based buffer overflows in the Motive ActiveEmailTest.EmailData (ActiveUtils EmailData) ActiveX control in ActiveUtils.dll in Motive Service Activation Manager 5.1 and Self Service Mana… NVD-CWE-Other
CVE-2007-0319 2018-10-13 06:42 2007-08-16 Show GitHub Exploit DB Packet Storm
284404 - microsoft office
word
word_viewer
works 		Unspecified vulnerability in Microsoft Word allows user-assisted remote attackers to execute arbitrary code on Word 2000, and cause a denial of service on Word 2003, via unknown attack vectors that t… NVD-CWE-noinfo
CVE-2007-0515 2018-10-13 06:42 2007-01-26 Show GitHub Exploit DB Packet Storm
284405 - microsoft access
excel
excel_viewer
frontpage
infopath
office
onenote
outlook
powerpoint
project
publisher
visio
word
word_viewer 		Unspecified vulnerability in Microsoft Excel 2000, XP, 2003, and 2004 for Mac, and possibly other Office products, allows remote user-assisted attackers to execute arbitrary code via unknown attack v… NVD-CWE-noinfo
CVE-2007-0671 2018-10-13 06:42 2007-02-3 Show GitHub Exploit DB Packet Storm
284406 - microsoft windows_vista A certain ActiveX control in sapi.dll (aka the Speech API) in Speech Components in Microsoft Windows Vista, when the Speech Recognition feature is enabled, allows user-assisted remote attackers to de… CWE-94
Code Injection 		CVE-2007-0675 2018-10-13 06:42 2007-02-3 Show GitHub Exploit DB Packet Storm
284407 - adobe flash_player Unspecified vulnerability in Adobe Flash Player before 9.0.16.0 allows user-assisted remote attackers to bypass the allowScriptAccess protection via unspecified vectors. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2006-4640 2018-10-13 06:41 2006-09-13 Show GitHub Exploit DB Packet Storm
284408 - microsoft office_web_components Unspecified vulnerability in certain COM objects in Microsoft Office Web Components 2000 allows user-assisted remote attackers to execute arbitrary code via a crafted URL, aka "Office Web Components … CWE-94
Code Injection 		CVE-2006-4695 2018-10-13 06:41 2006-12-31 Show GitHub Exploit DB Packet Storm
284409 - microsoft antigen
forefront_security
malware_protection_engine
windows_defender
windows_live_onecare 		Integer overflow in the Microsoft Malware Protection Engine (mpengine.dll), as used by Windows Live OneCare, Antigen, Defender, and Forefront Security, allows user-assisted remote attackers to execut… NVD-CWE-Other
CVE-2006-5270 2018-10-13 06:41 2007-02-14 Show GitHub Exploit DB Packet Storm
284410 - microsoft data_access_components The Execute method in the ADODB.Connection 2.7 and 2.8 ActiveX control objects (ADODB.Connection.2.7 and ADODB.Connection.2.8) in the Microsoft Data Access Components (MDAC) 2.5 SP3, 2.7 SP1, 2.8, an… CWE-20
 Improper Input Validation  		CVE-2006-5559 2018-10-13 06:41 2006-10-28 Show GitHub Exploit DB Packet Storm