Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 28, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
239591 10 危険 日立 - NNM におけるサービス運用妨害 (DoS) の脆弱性 CWE-94
コード・インジェクション 		CVE-2007-1093 2012-09-25 16:47 2007-02-23 Show GitHub Exploit DB Packet Storm
239592 7.1 危険 マイクロソフト - Microsoft Windows XP および 2003 上で稼働する Explorer におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-1090 2012-09-25 16:47 2007-02-26 Show GitHub Exploit DB Packet Storm
239593 7.2 危険 IBM - IBM DB2 UDB における UPDATE SQL コマンドを不正に実行される脆弱性 - CVE-2007-1089 2012-09-25 16:47 2007-02-23 Show GitHub Exploit DB Packet Storm
239594 7.2 危険 IBM - IBM DB2 におけるスタックベースのバッファオーバーフローの脆弱性 - CVE-2007-1088 2012-09-25 16:47 2007-02-22 Show GitHub Exploit DB Packet Storm
239595 7.2 危険 IBM - IBM DB2 における任意のコードを実行される脆弱性 - CVE-2007-1087 2012-09-25 16:47 2007-02-22 Show GitHub Exploit DB Packet Storm
239596 7.2 危険 IBM - IBM DB2 のバイナリにおける任意のファイルを作成される脆弱性 - CVE-2007-1086 2012-09-25 16:47 2007-02-23 Show GitHub Exploit DB Packet Storm
239597 6.8 警告 Mozilla Foundation - Mozilla Firefox における同一ドメインポリシーを回避される脆弱性 CWE-16
環境設定 		CVE-2007-1084 2012-09-25 16:47 2007-02-21 Show GitHub Exploit DB Packet Storm
239598 10 危険 mcrefer - mcRefer の install.php における任意の PHP コードを実行される脆弱性 - CVE-2007-1073 2012-09-25 16:47 2007-02-22 Show GitHub Exploit DB Packet Storm
239599 6.8 警告 interspire - Interspire SendStudio における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-1060 2012-09-25 16:47 2007-02-21 Show GitHub Exploit DB Packet Storm
239600 7.5 危険 online web building - Online Web Building の user_pages/page.asp における SQL インジェクションの脆弱性 - CVE-2007-1058 2012-09-25 16:47 2007-02-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
286501 - blackberry qnx_neutrino_rtos /sbin/pppoectl in BlackBerry QNX Neutrino RTOS 6.4.x and 6.5.x allows local users to obtain sensitive information by reading "bad parameter" lines in error messages, as demonstrated by reading the ro… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2014-2534 2024-11-21 11:06 2014-03-18 Show GitHub Exploit DB Packet Storm
286502 - blackberry qnx_neutrino_rtos /sbin/ifwatchd in BlackBerry QNX Neutrino RTOS 6.4.x and 6.5.x allows local users to gain privileges by providing an arbitrary program name as a command-line argument. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2014-2533 2024-11-21 11:06 2014-03-18 Show GitHub Exploit DB Packet Storm
286503 4.9 MEDIUM
Network 		oracle
openbsd 		communications_user_data_repository
openssh 		sshd in OpenSSH before 6.6 does not properly support wildcards on AcceptEnv lines in sshd_config, which allows remote attackers to bypass intended environment restrictions by using a substring locate… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2014-2532 2024-11-21 11:06 2014-03-18 Show GitHub Exploit DB Packet Storm
286504 - lighttpd
debian
opensuse
suse
contec 		lighttpd
debian_linux
opensuse
linux_enterprise_software_development_kit
linux_enterprise_high_availability_extension
sv-cpt-mc310_firmware 		Multiple directory traversal vulnerabilities in (1) mod_evhost and (2) mod_simple_vhost in lighttpd before 1.4.35 allow remote attackers to read arbitrary files via a .. (dot dot) in the host name, r… CWE-22
Path Traversal 		CVE-2014-2324 2024-11-21 11:06 2014-03-15 Show GitHub Exploit DB Packet Storm
286505 9.8 CRITICAL
Network 		lighttpd
debian
opensuse
suse 		lighttpd
debian_linux
opensuse
linux_enterprise_software_development_kit
linux_enterprise_high_availability_extension 		SQL injection vulnerability in mod_mysql_vhost.c in lighttpd before 1.4.35 allows remote attackers to execute arbitrary SQL commands via the host name, related to request_check_hostname. CWE-89
SQL Injection 		CVE-2014-2323 2024-11-21 11:06 2014-03-15 Show GitHub Exploit DB Packet Storm
286506 - juniper ive_os Unspecified vulnerability in the Linux Network Connect client in Juniper Junos Pulse Secure Access Service (aka SSL VPN) with IVE OS before 7.1r18, 7.3 before 7.3r10, 7.4 before 7.4r8, and 8.0 before… NVD-CWE-noinfo
CVE-2014-2292 2024-11-21 11:06 2014-03-15 Show GitHub Exploit DB Packet Storm
286507 - juniper ive_os Cross-site scripting (XSS) vulnerability in the Pulse Collaboration (Secure Meeting) user pages in Juniper Junos Pulse Secure Access Service (aka SSL VPN) with IVE OS before 7.1r18, 7.3 before 7.3r10… CWE-79
Cross-site Scripting 		CVE-2014-2291 2024-11-21 11:06 2014-03-15 Show GitHub Exploit DB Packet Storm
286508 - proxmox mail_gateway Multiple cross-site scripting (XSS) vulnerabilities in Proxmox Mail Gateway before 3.1-5829 allow remote attackers to inject arbitrary web script or HTML via the (1) state parameter to objects/who/in… CWE-79
Cross-site Scripting 		CVE-2014-2325 2024-11-21 11:06 2014-03-14 Show GitHub Exploit DB Packet Storm
286509 - powerarchiver powerarchiver The Encrypt Files feature in ConeXware PowerArchiver before 14.02.05 uses legacy ZIP encryption even if the AES 256-bit selection is chosen, which makes it easier for context-dependent attackers to o… CWE-310
Cryptographic Issues 		CVE-2014-2319 2024-11-21 11:06 2014-03-14 Show GitHub Exploit DB Packet Storm
286510 - modx modx_revolution SQL injection vulnerability in modx.class.php in MODX Revolution 2.0.0 before 2.2.13 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. CWE-89
SQL Injection 		CVE-2014-2311 2024-11-21 11:06 2014-03-12 Show GitHub Exploit DB Packet Storm