Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 27, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
239611 4.6 警告 macrovision - Macrovision InstallAnywhere における許可されないインストールを実行される脆弱性 - CVE-2007-1009 2012-09-25 16:47 2007-04-19 Show GitHub Exploit DB Packet Storm
239612 4.3 警告 Mozilla Foundation - Mozilla Firefox におけるフィッシング攻撃などを実行される脆弱性 CWE-DesignError
CVE-2007-1004 2012-09-25 16:47 2007-02-19 Show GitHub Exploit DB Packet Storm
239613 6.9 警告 Linux - Linux kernel の tee システムコールにおける重要な情報を取得される脆弱性 CWE-362
競合状態 		CVE-2007-0997 2012-09-25 16:47 2007-09-18 Show GitHub Exploit DB Packet Storm
239614 7.5 危険 jupiter cms - Jupiter CMS の index.php におけるディレクトリトラバーサルの脆弱性 - CVE-2007-0987 2012-09-25 16:47 2007-02-16 Show GitHub Exploit DB Packet Storm
239615 5.1 警告 jupiter cms - Jupiter CMS の index.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2007-0986 2012-09-25 16:47 2007-02-16 Show GitHub Exploit DB Packet Storm
239616 10 危険 ヒューレット・パッカード - SuSE などの Linux 用の HP Serviceguard における不正にアクセス権を取得される脆弱性 CWE-noinfo
情報不足 		CVE-2007-0980 2012-09-25 16:47 2007-02-12 Show GitHub Exploit DB Packet Storm
239617 5 警告 LifeType - LifeType における重要な情報 (ファイルコンテンツ) を取得される脆弱性 CWE-200
情報漏えい 		CVE-2007-0979 2012-09-25 16:47 2007-02-15 Show GitHub Exploit DB Packet Storm
239618 7.5 危険 ian bezanson - Ian Bezanson の DropBox における脆弱性 - CVE-2007-0974 2012-09-25 16:47 2007-02-15 Show GitHub Exploit DB Packet Storm
239619 6.8 警告 jupiter cms - Jupiter CMS の index.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-0973 2012-09-25 16:47 2007-02-15 Show GitHub Exploit DB Packet Storm
239620 7.5 危険 jupiter cms - Jupiter CMS の modules/emoticons.php における任意のファイルをアップロードされる脆弱性 - CVE-2007-0972 2012-09-25 16:47 2007-02-15 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 27, 2026, 4:52 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
286221 6.5 MEDIUM
Network 		entity_api_project
fedoraproject 		entity_api
fedora 		The entity wrapper access API in the Entity API module 7.x-1.x before 7.x-1.3 for Drupal might allow remote authenticated users to bypass intended access restrictions on referenced entities via unspe… CWE-284
Improper Access Control 		CVE-2014-1399 2024-11-21 11:04 2018-04-11 Show GitHub Exploit DB Packet Storm
286222 6.5 MEDIUM
Network 		entity_api_project
fedoraproject 		entity_api
fedora 		The entity wrapper access API in the Entity API module 7.x-1.x before 7.x-1.3 for Drupal might allow remote authenticated users to bypass intended access restrictions on comment, user and node statis… CWE-284
Improper Access Control 		CVE-2014-1398 2024-11-21 11:04 2018-04-11 Show GitHub Exploit DB Packet Storm
286223 5.4 MEDIUM
Network 		owncloud owncloud Cross-site scripting (XSS) vulnerability in ownCloud before 6.0.1 allows remote authenticated users to inject arbitrary web script or HTML via the filename of an uploaded file. CWE-79
Cross-site Scripting 		CVE-2014-1665 2024-11-21 11:04 2018-03-21 Show GitHub Exploit DB Packet Storm
286224 8.8 HIGH
Network 		openwebanalytics open_web_analytics Open Web Analytics (OWA) before 1.5.6 improperly generates random nonce values, which makes it easier for remote attackers to bypass a CSRF protection mechanism by leveraging knowledge of an OWA user… CWE-352
 Origin Validation Error 		CVE-2014-1457 2024-11-21 11:04 2018-03-21 Show GitHub Exploit DB Packet Storm
286225 8.1 HIGH
Network 		eventum_project eventum htdocs/setup/index.php in Eventum before 2.3.5 allows remote attackers to inject and execute arbitrary PHP code via the hostname parameter. CWE-275
 Permission Issues 		CVE-2014-1632 2024-11-21 11:04 2018-02-1 Show GitHub Exploit DB Packet Storm
286226 7.5 HIGH
Network 		eventum_project eventum Eventum before 2.3.5 allows remote attackers to reinstall the application via direct request to /setup/index.php. CWE-275
 Permission Issues 		CVE-2014-1631 2024-11-21 11:04 2018-02-1 Show GitHub Exploit DB Packet Storm
286227 7.5 HIGH
Network 		technicolor tc7200_firmware Technicolor TC7200 with firmware STD6.01.12 could allow remote attackers to obtain sensitive information. CWE-200
Information Exposure 		CVE-2014-1677 2024-11-21 11:04 2017-04-4 Show GitHub Exploit DB Packet Storm
286228 - nokia_maps_\&_places_project nokia_maps_\&_places Open redirect vulnerability in nokia-mapsplaces.php in the Nokia Maps & Places plugin 1.6.6 for WordPress allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks… NVD-CWE-Other
CVE-2014-1750 2024-11-21 11:04 2015-07-1 Show GitHub Exploit DB Packet Storm
286229 - linuxcontainers
canonical 		cgmanager
ubuntu_linux 		cmanager 0.32 does not properly enforce nesting when modifying cgroup properties, which allows local users to set cgroup values for all cgroups via unspecified vectors. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2014-1425 2024-11-21 11:04 2015-01-8 Show GitHub Exploit DB Packet Storm
286230 - open-xchange open-xchange_appsuite Cross-site scripting (XSS) vulnerability in Open-Xchange (OX) AppSuite before 7.2.2-rev31, 7.4.0 before 7.4.0-rev27, and 7.4.1 before 7.4.1-rev17 allows remote attackers to inject arbitrary web scrip… CWE-79
Cross-site Scripting 		CVE-2014-1679 2024-11-21 11:04 2015-01-6 Show GitHub Exploit DB Packet Storm