Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 2, 2026, 4 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
239361 7.2 危険 MIT Kerberos
Todd C. Miller
- sudo における権限を取得される脆弱性 - CVE-2007-3149 2012-09-25 16:47 2007-06-11 Show GitHub Exploit DB Packet Storm
239362 6.4 警告 Mozilla Foundation - Mozilla におけるフィッシング攻撃を実行される脆弱性 - CVE-2007-3144 2012-09-25 16:47 2007-06-11 Show GitHub Exploit DB Packet Storm
239363 6.4 警告 KDE project - Konqueror におけるフィッシング攻撃を実行される脆弱性 - CVE-2007-3143 2012-09-25 16:47 2007-06-11 Show GitHub Exploit DB Packet Storm
239364 5.8 警告 Opera Software ASA - Opera におけるフィッシング攻撃を実行される脆弱性 CWE-DesignError
CVE-2007-3142 2012-09-25 16:47 2007-06-11 Show GitHub Exploit DB Packet Storm
239365 6.8 警告 OpenSolution - Quick.Cart の config/general.php におけるアプリケーションへアクセスされる脆弱性 - CVE-2007-3139 2012-09-25 16:47 2007-06-8 Show GitHub Exploit DB Packet Storm
239366 7.5 危険 OpenSolution - Open Solution Quick.Cart の index.php におけるディレクトリトラバーサルの脆弱性 - CVE-2007-3138 2012-09-25 16:47 2007-06-8 Show GitHub Exploit DB Packet Storm
239367 7.5 危険 newssync - newsSync の inc/nuke_include.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-3136 2012-09-25 16:47 2007-06-8 Show GitHub Exploit DB Packet Storm
239368 6.8 警告 Joomla! - Joomla! 用の OpenWiki コンポーネントにおける PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション
CVE-2007-3130 2012-09-25 16:47 2007-06-8 Show GitHub Exploit DB Packet Storm
239369 6.4 警告 IBM - WSPortal の content.php における SQL インジェクションの脆弱性 - CVE-2007-3128 2012-09-25 16:47 2007-06-19 Show GitHub Exploit DB Packet Storm
239370 5 警告 IBM - WSPortal の content.php における重要な情報を取得される脆弱性 - CVE-2007-3127 2012-09-25 16:47 2007-06-19 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 2, 2026, 4:18 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
286421 - apache solr Cross-site scripting (XSS) vulnerability in the Admin UI Plugin / Stats page in Apache Solr 4.x before 4.10.3 allows remote attackers to inject arbitrary web script or HTML via the fieldvaluecache ob… CWE-79
Cross-site Scripting
CVE-2014-3628 2024-11-21 11:08 2015-01-7 Show GitHub Exploit DB Packet Storm
286422 - f5 nginx The STARTTLS implementation in mail/ngx_mail_smtp_handler.c in the SMTP proxy in nginx 1.5.x and 1.6.x before 1.6.1 and 1.7.x before 1.7.4 does not properly restrict I/O buffering, which allows man-i… CWE-77
Command Injection
CVE-2014-3556 2024-11-21 11:08 2014-12-30 Show GitHub Exploit DB Packet Storm
286423 - openssl openssl The ssl23_get_client_hello function in s23_srvr.c in OpenSSL 0.9.8zc, 1.0.0o, and 1.0.1j does not properly handle attempts to use unsupported protocols, which allows remote attackers to cause a denia… NVD-CWE-Other
CVE-2014-3569 2024-11-21 11:08 2014-12-24 Show GitHub Exploit DB Packet Storm
286424 - cisco adaptive_security_appliance_software The syslog-management subsystem in Cisco Adaptive Security Appliance (ASA) Software allows remote attackers to obtain an administrator password by waiting for an administrator to copy a file, and the… CWE-200
Information Exposure
CVE-2014-3410 2024-11-21 11:08 2014-12-20 Show GitHub Exploit DB Packet Storm
286425 - redhat
apache
debian
apple
enterprise_linux_desktop
enterprise_linux_workstation
enterprise_linux_server_eus
enterprise_linux_server
enterprise_linux_hpc_node
subversion
debian_linux
xcode
The mod_dav_svn Apache HTTPD server module in Apache Subversion 1.x before 1.7.19 and 1.8.x before 1.8.11 allows remote attackers to cause a denial of service (NULL pointer dereference and server cra… NVD-CWE-Other
CVE-2014-3580 2024-11-21 11:08 2014-12-19 Show GitHub Exploit DB Packet Storm
286426 - apple
apache
canonical
mac_os_x
os_x_server
http_server
ubuntu_linux
The handle_headers function in mod_proxy_fcgi.c in the mod_proxy_fcgi module in the Apache HTTP Server 2.4.10 allows remote FastCGI servers to cause a denial of service (buffer over-read and daemon c… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2014-3583 2024-11-21 11:08 2014-12-16 Show GitHub Exploit DB Packet Storm
286427 - vmware vcenter_server_appliance Cross-site scripting (XSS) vulnerability in VMware vCenter Server Appliance (vCSA) 5.1 before Update 3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. CWE-79
Cross-site Scripting
CVE-2014-3797 2024-11-21 11:08 2014-12-8 Show GitHub Exploit DB Packet Storm
286428 - f5
debian
nginx
debian_linux
nginx 0.5.6 through 1.7.4, when using the same shared ssl_session_cache or ssl_session_ticket_key for multiple servers, can reuse a cached SSL session for an unrelated context, which allows remote at… CWE-613
 Insufficient Session Expiration
CVE-2014-3616 2024-11-21 11:08 2014-12-8 Show GitHub Exploit DB Packet Storm
286429 - apache hadoop The YARN NodeManager daemon in Apache Hadoop 0.23.0 through 0.23.11 and 2.x before 2.5.2, when using Kerberos authentication, allows remote cluster users to change the permissions of certain files to… CWE-59
Link Following
CVE-2014-3627 2024-11-21 11:08 2014-12-6 Show GitHub Exploit DB Packet Storm
286430 - redhat enterprise_virtualization The rhevm-log-collector package in Red Hat Enterprise Virtualization 3.4 uses the PostgreSQL database password on the command line when calling sosreport, which allows local users to obtain sensitive… CWE-200
Information Exposure
CVE-2014-3561 2024-11-21 11:08 2014-12-6 Show GitHub Exploit DB Packet Storm