Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 20, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
233301 6.4 警告 shttpd - Windows 上で稼動している shttpd における任意の CGI プログラムをダウンロードされる脆弱性 CWE-200
情報漏えい 		CVE-2007-6405 2012-12-20 18:34 2007-12-17 Show GitHub Exploit DB Packet Storm
233302 5 警告 shttp - Windows 上で稼動している shttpd におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2007-6404 2012-12-20 18:34 2007-12-17 Show GitHub Exploit DB Packet Storm
233303 6.8 警告 Winamp - Nullsoft Winamp におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2007-6403 2012-12-20 18:34 2007-12-17 Show GitHub Exploit DB Packet Storm
233304 5 警告 poldoc - PolDoc CMS の download_file.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2007-6400 2012-12-20 18:34 2007-12-17 Show GitHub Exploit DB Packet Storm
233305 7.5 危険 sh-news - SH-News の patch/comments.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-6391 2012-12-20 18:34 2007-12-17 Show GitHub Exploit DB Packet Storm
233306 4.3 警告 s9y - Serendipity 用の mycalendar プラグインにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2007-6390 2012-12-20 18:34 2007-12-17 Show GitHub Exploit DB Packet Storm
233307 7.2 危険 トレンドマイクロ - Trend Micro AntiVirus などの PccScan.dll におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2007-6386 2012-12-20 18:34 2007-12-14 Show GitHub Exploit DB Packet Storm
233308 6.8 警告 robocode - Robocode の Event Dispatch Thread における任意の Java コードを実行される脆弱性 CWE-DesignError
CVE-2007-6382 2012-12-20 18:34 2007-12-14 Show GitHub Exploit DB Packet Storm
233309 6.5 警告 TYPO3 Association - TYPO3 用の indexed_search システムエクステンションにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-6381 2012-12-20 18:34 2007-12-14 Show GitHub Exploit DB Packet Storm
233310 5 警告 WordPress.org - WordPress 用の PictPress プラグインにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2007-6369 2012-12-20 18:34 2007-12-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 20, 2026, 4:01 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
291581 - phpexcel_project
owncloud 		phpexcel
owncloud 		PHPExcel before 1.8.0, as used in ownCloud Server before 5.0.15 and 6.0.x before 6.0.2, does not disable external entity loading in libxml, which allows remote attackers to read arbitrary files, caus… NVD-CWE-Other
CVE-2014-2054 2024-11-21 11:05 2014-06-4 Show GitHub Exploit DB Packet Storm
291582 - owncloud
getid3 		owncloud
getid3 		getID3() before 1.9.8, as used in ownCloud Server before 5.0.15 and 6.0.x before 6.0.2, allows remote attackers to read arbitrary files, cause a denial of service, or possibly have other impact via a… NVD-CWE-Other
CVE-2014-2053 2024-11-21 11:05 2014-06-4 Show GitHub Exploit DB Packet Storm
291583 - cisco nx-os
nexus_7000
nexus_7000_10-slot
nexus_7000_18-slot
nexus_7000_9-slot
mds_9000
mds_9100 		The Message Transfer Service (MTS) in Cisco NX-OS before 6.2(7) on MDS 9000 devices and 6.0 before 6.0(2) on Nexus 7000 devices allows remote attackers to cause a denial of service (NULL pointer dere… NVD-CWE-Other
CVE-2014-2201 2024-11-21 11:05 2014-05-26 Show GitHub Exploit DB Packet Storm
291584 - cisco nx-os Cisco NX-OS 5.0 before 5.0(5) on Nexus 7000 devices, when local authentication and multiple VDCs are enabled, allows remote authenticated users to gain privileges within an unintended VDC via an SSH … CWE-264
Permissions, Privileges, and Access Controls 		CVE-2014-2200 2024-11-21 11:05 2014-05-26 Show GitHub Exploit DB Packet Storm
291585 - cisco wide_area_application_services Cisco Wide Area Application Services (WAAS) 5.1.1 before 5.1.1e, when SharePoint prefetch optimization is enabled, allows remote SharePoint servers to execute arbitrary code via a malformed response,… CWE-94
Code Injection 		CVE-2014-2196 2024-11-21 11:05 2014-05-26 Show GitHub Exploit DB Packet Storm
291586 - microsoft internet_explorer Use-after-free vulnerability in Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code via crafted JavaScript code that interacts improperly with a CollectGarbage … CWE-399
 Resource Management Errors 		CVE-2014-1770 2024-11-21 11:05 2014-05-22 Show GitHub Exploit DB Packet Storm
291587 - seopanel seo_panel Multiple cross-site scripting (XSS) vulnerabilities in Seo Panel before 3.5.0 allow remote attackers to inject arbitrary web script or HTML via the (1) capcheck parameter to directories.php or (2) ke… CWE-79
Cross-site Scripting 		CVE-2014-1855 2024-11-21 11:05 2014-05-20 Show GitHub Exploit DB Packet Storm
291588 - cisco webex_business_suite
webex_training_center
webex_meeting_center
webex_sales_center
webex_event_center
webex_meetings_server 		meetinginfo.do in Cisco WebEx Event Center, WebEx Meeting Center, WebEx Sales Center, WebEx Training Center, WebEx Meetings Server 1.5(.1.131) and earlier, and WebEx Business Suite (WBS) 27 before 27… CWE-200
Information Exposure 		CVE-2014-2199 2024-11-21 11:05 2014-05-20 Show GitHub Exploit DB Packet Storm
291589 - cisco asyncos
content_security_management_appliance
email_security_appliance_firmware 		Cisco AsyncOS on Email Security Appliance (ESA) and Content Security Management Appliance (SMA) devices, when Active Directory is enabled, does not properly handle group names, which allows remote at… CWE-20
 Improper Input Validation  		CVE-2014-2195 2024-11-21 11:05 2014-05-20 Show GitHub Exploit DB Packet Storm
291590 - cisco unified_web_and_e-mail_interaction_manager system/egain/chat/entrypoint in Cisco Unified Web and E-mail Interaction Manager 9.0(2) allows remote attackers to have an unspecified impact by injecting a spoofed XML external entity. CWE-20
 Improper Input Validation  		CVE-2014-2194 2024-11-21 11:05 2014-05-20 Show GitHub Exploit DB Packet Storm