Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 5, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
239401	5	警告	jasmine technologies	-	LetterGrade における重要な情報 (インストールパスまたはアカウントの存在) を取得される脆弱性	CWE-noinfo 情報不足	CVE-2007-4946	2012-09-25 16:59	2007-09-18	Show	GitHub Exploit DB Packet Storm

239402	4.3	警告	jasmine technologies	-	LetterGrade におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2007-4945	2012-09-25 16:59	2007-09-18	Show	GitHub Exploit DB Packet Storm

239403	5	警告	Opera Software ASA	-	Opera の canvas.createPattern 関数における重要な情報を取得される脆弱性	CWE-DesignError	CVE-2007-4944	2012-09-25 16:59	2007-09-18	Show	GitHub Exploit DB Packet Storm

239404	7.1	危険	KDE project	-	KMPlayer におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2007-4941	2012-09-25 16:59	2007-09-18	Show	GitHub Exploit DB Packet Storm

239405	9.3	危険	guliverkli mympc verycd	-	MPC における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2007-4940	2012-09-25 16:59	2007-09-18	Show	GitHub Exploit DB Packet Storm

239406	9.3	危険	guliverkli mympc verycd	-	MPC の mplayerc.exe におけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2007-4939	2012-09-25 16:59	2007-09-18	Show	GitHub Exploit DB Packet Storm

239407	7.6	危険	MPlayer project SGI	-	MPlayer の libmpdemux/aviheader.c におけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2007-4938	2012-09-25 16:59	2007-09-18	Show	GitHub Exploit DB Packet Storm

239408	7.5	危険	office efficiencies	-	Office Efficiencies SafeSquid における脆弱性	CWE-noinfo 情報不足	CVE-2007-4936	2012-09-25 16:59	2007-09-18	Show	GitHub Exploit DB Packet Storm

239409	2.1	注意	ヒューレット・パッカード	-	Windows 用の HP SMH における脆弱性	CWE-DesignError	CVE-2007-4931	2012-09-25 16:59	2007-09-10	Show	GitHub Exploit DB Packet Storm

239410	6.8	警告	Joomla!	-	Joomla! の Joomla Radio 5 コンポーネントにおける PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2007-4923	2012-09-25 16:59	2007-09-17	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 5, 2026, 4:11 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
285811	8.8	HIGH Network	sphider	sphider	A Command Execution vulnerability exists in Sphider before 1.3.6 due to insufficient sanitization of fwrite to conf.php, which could let a remote malicious user execute arbitrary code. CVE-2014-5083 …	CWE-74 Injection	CVE-2014-5083	2024-11-21 11:11	2020-02-11	Show	GitHub Exploit DB Packet Storm

285812	5.3	MEDIUM Network	docker	docker	A vulnerability exists in Docker before 1.2 via container names, which may collide with and override container IDs.	NVD-CWE-noinfo	CVE-2014-5278	2024-11-21 11:11	2020-02-8	Show	GitHub Exploit DB Packet Storm

285813	9.8	CRITICAL Network	status2k	status2k	A vulnerability exits in Status2K 2.5 Server Monitoring Software via the multies parameter to includes/functions.php, which could let a malicious user execute arbitrary PHP code.	CWE-20 Improper Input Validation	CVE-2014-5091	2024-11-21 11:11	2020-02-8	Show	GitHub Exploit DB Packet Storm

285814	9.8	CRITICAL Network	sphider sphider-plus sphiderpro	sphider sphider-plus sphider_pro	A vulnerability exists in Sphider Search Engine prior to 1.3.6 due to exec calls in admin/spiderfuncs.php, which could let a remote malicious user execute arbitrary code.	CWE-20 Improper Input Validation	CVE-2014-5087	2024-11-21 11:11	2020-02-8	Show	GitHub Exploit DB Packet Storm

285815	8.8	HIGH Network	kemptechnologies	load_master	A CSRF Vulnerability exists in Kemp Load Master before 7.0-18a via unspecified vectors in administrative pages.	CWE-352 Origin Validation Error	CVE-2014-5288	2024-11-21 11:11	2020-02-8	Show	GitHub Exploit DB Packet Storm

285816	7.5	HIGH Network	open-xchange	open-xchange_appsuite	Multiple absolute path traversal vulnerabilities in documentconverter in Open-Xchange (OX) AppSuite before 7.4.2-rev10 and 7.6.x before 7.6.0-rev10 allow remote attackers to read application files vi…	CWE-22 Path Traversal	CVE-2014-5236	2024-11-21 11:11	2020-02-1	Show	GitHub Exploit DB Packet Storm

285817	9.6	CRITICAL Network	eucalyptus	eucalyptus_management_console	Cross-site scripting (XSS) vulnerability in Eucalyptus Management Console (EMC) 4.0.x before 4.0.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.	CWE-79 Cross-site Scripting	CVE-2014-5039	2024-11-21 11:11	2020-02-1	Show	GitHub Exploit DB Packet Storm

285818	6.8	MEDIUM Physics	tianocore	edk2	Multiple integer overflows in the Pre-EFI Initialization (PEI) boot phase in the Capsule Update feature in the UEFI implementation in EDK2 allow physically proximate attackers to bypass intended acce…	CWE-190 Integer Overflow or Wraparound	CVE-2014-4860	2024-11-21 11:11	2020-02-1	Show	GitHub Exploit DB Packet Storm

285819	6.8	MEDIUM Physics	tianocore	edk2	Integer overflow in the Drive Execution Environment (DXE) phase in the Capsule Update feature in the UEFI implementation in EDK2 allows physically proximate attackers to bypass intended access restri…	CWE-190 Integer Overflow or Wraparound	CVE-2014-4859	2024-11-21 11:11	2020-02-1	Show	GitHub Exploit DB Packet Storm

285820	9.8	CRITICAL Network	zohocorp	manageengine_desktop_central manageengine_desktop_central_managed_service_providers	Directory traversal vulnerability in the agentLogUploader servlet in ZOHO ManageEngine Desktop Central (DC) and Desktop Central Managed Service Providers (MSP) edition before 9 build 90055 allows rem…	CWE-22 Path Traversal	CVE-2014-5007	2024-11-21 11:11	2020-01-18	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed