Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 14, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
239581	6.8	警告	mm chat	-	MM Chat の chatconfig.php におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2008-2974	2012-09-25 17:17	2008-07-2	Show	GitHub Exploit DB Packet Storm

239582	4.3	警告	mm chat	-	MM Chat の chathead.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-2973	2012-09-25 17:17	2008-07-2	Show	GitHub Exploit DB Packet Storm

239583	7.5	危険	kblance.com	-	KbLance の index.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-2972	2012-09-25 17:17	2008-07-2	Show	GitHub Exploit DB Packet Storm

239584	7.5	危険	jaxultrabb	-	JaxUltraBB の viewprofile.php におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2008-2966	2012-09-25 17:17	2008-07-2	Show	GitHub Exploit DB Packet Storm

239585	4.3	警告	jaxbot	-	JUBB の viewforum.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-2965	2012-09-25 17:17	2008-07-2	Show	GitHub Exploit DB Packet Storm

239586	6.8	警告	myblog	-	MyBlog における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-2963	2012-09-25 17:17	2008-07-2	Show	GitHub Exploit DB Packet Storm

239587	4.3	警告	myblog	-	MyBlog におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-2962	2012-09-25 17:17	2008-07-2	Show	GitHub Exploit DB Packet Storm

239588	9.3	危険	マイクロソフト	-	Microsoft Visual Basic Enterprise Edition 6.0 SP6 におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2008-2959	2012-09-25 17:17	2008-07-2	Show	GitHub Exploit DB Packet Storm

239589	7.8	危険	kernel.org	-	Linux DC++ の client/NmdcHub.cpp におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2008-2954	2012-09-25 17:17	2008-07-1	Show	GitHub Exploit DB Packet Storm

239590	5	警告	kernel.org	-	Linux DC++ におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2008-2953	2012-09-25 17:17	2008-07-1	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 14, 2026, 4:12 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
287201	-	softing	fg-x00_profibus_firmware	Cross-site scripting (XSS) vulnerability in Softing FG-100 PROFIBUS Single Channel (FG-100-PB) with firmware FG-x00-PB_V2.02.0.00 allows remote attackers to inject arbitrary web script or HTML via th…	CWE-79 Cross-site Scripting	CVE-2014-6616	2024-11-21 11:14	2015-09-1	Show	GitHub Exploit DB Packet Storm

287202	-	debian libevent_project	debian_linux libevent	Multiple integer overflows in the evbuffer API in Libevent 1.4.x before 1.4.15, 2.0.x before 2.0.22, and 2.1.x before 2.1.5-beta allow context-dependent attackers to cause a denial of service or poss…	CWE-189 Numeric Errors	CVE-2014-6272	2024-11-21 11:14	2015-08-24	Show	GitHub Exploit DB Packet Storm

287203	-	sybase	adaptive_server_enterprise	SAP Adaptive Server Enterprise (ASE) before 15.7 SP132 and 16.0 before 16.0 SP01 allows remote attackers to bypass the challenge and response mechanism and obtain access to the probe account via a cr…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2014-6284	2024-11-21 11:14	2015-06-8	Show	GitHub Exploit DB Packet Storm

287204	-	arubanetworks	clearpass_policy_manager	Aruba Networks ClearPass Policy Manager (CPPM) before 6.5.0 allows remote administrators to execute arbitrary code via unspecified vectors.	NVD-CWE-noinfo	CVE-2014-6628	2024-11-21 11:14	2015-05-28	Show	GitHub Exploit DB Packet Storm

287205	-	pnmsoft	sequence_kinetics	The Form Controls CSS file in PNMsoft Sequence Kinetics before 7.7 allows remote attackers to obtain sensitive source-code information via unspecified vectors.	CWE-200 Information Exposure	CVE-2014-6304	2024-11-21 11:14	2015-02-19	Show	GitHub Exploit DB Packet Storm

287206	-	pnmsoft	sequence_kinetics	The Monitoring Administration pages in PNMsoft Sequence Kinetics before 7.7 do not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service (resou…	CWE-399 Resource Management Errors	CVE-2014-6303	2024-11-21 11:14	2015-02-19	Show	GitHub Exploit DB Packet Storm

287207	-	pnmsoft	sequence_kinetics	The Monitoring Administration pages in PNMsoft Sequence Kinetics before 7.7 allow remote attackers to read arbitrary files via an XML external entity declaration in conjunction with an entity referen…	NVD-CWE-Other	CVE-2014-6302	2024-11-21 11:14	2015-02-19	Show	GitHub Exploit DB Packet Storm

287208	-	pnmsoft	sequence_kinetics	Multiple cross-site scripting (XSS) vulnerabilities in the tables-management module in PNMsoft Sequence Kinetics before 7.7 allow remote attackers to inject arbitrary web script or HTML via unspecifi…	CWE-79 Cross-site Scripting	CVE-2014-6301	2024-11-21 11:14	2015-02-19	Show	GitHub Exploit DB Packet Storm

287209	-	microsoft	office	Use-after-free vulnerability in Microsoft Office 2007 SP3, 2010 SP2, and 2013 Gold and SP1 allows remote attackers to bypass the ASLR protection mechanism via a crafted document, aka "Microsoft Offic…	NVD-CWE-Other	CVE-2014-6362	2024-11-21 11:14	2015-02-11	Show	GitHub Exploit DB Packet Storm

287210	-	redhat canonical novell debian opensuse oracle	enterprise_linux ubuntu_linux suse_linux_enterprise_server debian_linux suse_linux_enterprise_desktop opensuse jdk jre	Unspecified vulnerability in Oracle Java SE 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot.	NVD-CWE-noinfo	CVE-2014-6601	2024-11-21 11:14	2015-01-22	Show	GitHub Exploit DB Packet Storm