Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
229921	4.3	警告	MediaWiki	-	MediaWiki におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-1647	2012-09-25 17:38	2010-05-28	Show	GitHub Exploit DB Packet Storm

229922	5	警告	Horde	-	Horde の IMP プラグインにおけるファイアーウォールの制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-1638	2012-09-25 17:38	2010-06-22	Show	GitHub Exploit DB Packet Storm

229923	2.1	注意	Linux	-	Linux kernel の btrfs 機能における書き込み専用ファイルの記述子から重要な情報を読まれる脆弱性	CWE-200 情報漏えい	CVE-2010-1636	2012-09-25 17:38	2010-05-15	Show	GitHub Exploit DB Packet Storm

229924	4.3	警告	LXR Project	-	LXR Cross Referencer におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-1625	2012-09-25 17:38	2010-06-24	Show	GitHub Exploit DB Packet Storm

229925	4.3	警告	Phorum	-	Phorum におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-1629	2012-09-25 17:38	2009-01-25	Show	GitHub Exploit DB Packet Storm

229926	6.9	警告	Linux	-	Linux kernel の mm/shmem.c におけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2010-1643	2012-09-25 17:38	2008-10-28	Show	GitHub Exploit DB Packet Storm

229927	4.3	警告	Moodle	-	Moodle で使用される KSES HTML テキストクリーニングライブラリにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-1619	2012-09-25 17:38	2010-04-29	Show	GitHub Exploit DB Packet Storm

229928	4.3	警告	Jasig Moodle	-	Moodle で使用される phpCAS クライアントライブラリにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-1618	2012-09-25 17:38	2010-04-29	Show	GitHub Exploit DB Packet Storm

229929	4	警告	Moodle	-	Moodle の user/view.php における他のユーザのフルネームを取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-1617	2012-09-25 17:38	2010-04-29	Show	GitHub Exploit DB Packet Storm

229930	4	警告	Moodle	-	Moodle における新しいアカウントを作成される脆弱性	CWE-nocwe CWE以外	CVE-2010-1616	2012-09-25 17:38	2010-04-29	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:April 20, 2026, 4:09 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
284401	-	microsoft	windows_2000 windows_2003_server windows_xp	The HTML Help ActiveX control (Hhctrl.ocx) in Microsoft Windows 2000 SP3, XP SP2 and Professional, 2003 SP1 allows remote attackers to execute arbitrary code via unspecified functions, related to uni…	NVD-CWE-Other	CVE-2007-0214	2018-10-13 06:42	2007-02-14	Show	GitHub Exploit DB Packet Storm

284402	-	microsoft	office works	wkcvqd01.dll in Microsoft Works 6 File Converter, as used in Office 2003 SP2, Works 8.0, and Works Suite 2005, allows remote attackers to execute arbitrary code via a .wps file with crafted section l…	CWE-20 Improper Input Validation	CVE-2007-0216	2018-10-13 06:42	2008-02-13	Show	GitHub Exploit DB Packet Storm

284403	-	motive_incorporated	self_service_manager service_activation_manager	Multiple stack-based buffer overflows in the Motive ActiveEmailTest.EmailData (ActiveUtils EmailData) ActiveX control in ActiveUtils.dll in Motive Service Activation Manager 5.1 and Self Service Mana…	NVD-CWE-Other	CVE-2007-0319	2018-10-13 06:42	2007-08-16	Show	GitHub Exploit DB Packet Storm

284404	-	microsoft	office word word_viewer works	Unspecified vulnerability in Microsoft Word allows user-assisted remote attackers to execute arbitrary code on Word 2000, and cause a denial of service on Word 2003, via unknown attack vectors that t…	NVD-CWE-noinfo	CVE-2007-0515	2018-10-13 06:42	2007-01-26	Show	GitHub Exploit DB Packet Storm

284405	-	microsoft	access excel excel_viewer frontpage infopath office onenote outlook powerpoint project publisher visio word word_viewer	Unspecified vulnerability in Microsoft Excel 2000, XP, 2003, and 2004 for Mac, and possibly other Office products, allows remote user-assisted attackers to execute arbitrary code via unknown attack v…	NVD-CWE-noinfo	CVE-2007-0671	2018-10-13 06:42	2007-02-3	Show	GitHub Exploit DB Packet Storm

284406	-	microsoft	windows_vista	A certain ActiveX control in sapi.dll (aka the Speech API) in Speech Components in Microsoft Windows Vista, when the Speech Recognition feature is enabled, allows user-assisted remote attackers to de…	CWE-94 Code Injection	CVE-2007-0675	2018-10-13 06:42	2007-02-3	Show	GitHub Exploit DB Packet Storm

284407	-	adobe	flash_player	Unspecified vulnerability in Adobe Flash Player before 9.0.16.0 allows user-assisted remote attackers to bypass the allowScriptAccess protection via unspecified vectors.	CWE-264 Permissions, Privileges, and Access Controls	CVE-2006-4640	2018-10-13 06:41	2006-09-13	Show	GitHub Exploit DB Packet Storm

284408	-	microsoft	office_web_components	Unspecified vulnerability in certain COM objects in Microsoft Office Web Components 2000 allows user-assisted remote attackers to execute arbitrary code via a crafted URL, aka "Office Web Components …	CWE-94 Code Injection	CVE-2006-4695	2018-10-13 06:41	2006-12-31	Show	GitHub Exploit DB Packet Storm

284409	-	microsoft	antigen forefront_security malware_protection_engine windows_defender windows_live_onecare	Integer overflow in the Microsoft Malware Protection Engine (mpengine.dll), as used by Windows Live OneCare, Antigen, Defender, and Forefront Security, allows user-assisted remote attackers to execut…	NVD-CWE-Other	CVE-2006-5270	2018-10-13 06:41	2007-02-14	Show	GitHub Exploit DB Packet Storm

284410	-	microsoft	data_access_components	The Execute method in the ADODB.Connection 2.7 and 2.8 ActiveX control objects (ADODB.Connection.2.7 and ADODB.Connection.2.8) in the Microsoft Data Access Components (MDAC) 2.5 SP3, 2.7 SP1, 2.8, an…	CWE-20 Improper Input Validation	CVE-2006-5559	2018-10-13 06:41	2006-10-28	Show	GitHub Exploit DB Packet Storm