Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 23, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
240131 7.5 危険 openwbem - Web Based Enterprise Management の乱数のジェネレータにおける権限を取得される脆弱性 - CVE-2006-5639 2012-09-25 15:36 2006-10-31 Show GitHub Exploit DB Packet Storm
240132 5 警告 Mozilla Foundation - Firefox などにおけるサービス運用妨害 (DoS) の脆弱性 - CVE-2006-5633 2012-09-25 15:36 2006-10-30 Show GitHub Exploit DB Packet Storm
240133 6.8 警告 ig shop - iG Shop の change_pass.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-5632 2012-09-25 15:36 2006-10-31 Show GitHub Exploit DB Packet Storm
240134 6.8 警告 ig shop - iG Shop の change_pass.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-5631 2012-09-25 15:36 2006-10-31 Show GitHub Exploit DB Packet Storm
240135 7.5 危険 hosting controller - Hosting Controller におけるサイトの仮想ディレクトリを削除される脆弱性 - CVE-2006-5630 2012-09-25 15:36 2006-10-31 Show GitHub Exploit DB Packet Storm
240136 7.5 危険 hosting controller - Hosting Controller における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2006-5629 2012-09-25 15:36 2006-10-31 Show GitHub Exploit DB Packet Storm
240137 5.1 警告 nx - N/X 2002 Professional Edition WCMS における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5625 2012-09-25 15:36 2006-10-31 Show GitHub Exploit DB Packet Storm
240138 7.5 危険 mpcs - MPCS における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5624 2012-09-25 15:36 2006-10-31 Show GitHub Exploit DB Packet Storm
240139 7.5 危険 minibill - MiniBILL の include/menu_builder.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5620 2012-09-25 15:36 2006-10-31 Show GitHub Exploit DB Packet Storm
240140 5 警告 netref - Netref の script/cat_for_aff.php におけるディレクトリトラバーサルの脆弱性 - CVE-2006-5618 2012-09-25 15:36 2006-10-30 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 23, 2026, 4:08 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
285611 5.3 MEDIUM
Network
canonical metal_as_a_service A vulnerability in generate_filestorage_key of Ubuntu MAAS allows an attacker to brute-force filenames. This issue affects Ubuntu MAAS versions prior to 1.9.2. CWE-254
 7PK - Security Features
CVE-2014-1428 2024-11-21 11:04 2019-04-23 Show GitHub Exploit DB Packet Storm
285612 6.1 MEDIUM
Network
canonical metal_as_a_service A vulnerability in the REST API of Ubuntu MAAS allows an attacker to cause a logged-in user to execute commands via cross-site scripting. This issue affects MAAS versions prior to 1.9.2. CWE-79
Cross-site Scripting
CVE-2014-1427 2024-11-21 11:04 2019-04-23 Show GitHub Exploit DB Packet Storm
285613 7.5 HIGH
Network
canonical metal_as_a_service A vulnerability in maasserver.api.get_file_by_name of Ubuntu MAAS allows unauthenticated network clients to download any file. This issue affects: Ubuntu MAAS versions prior to 1.9.2. CWE-20
 Improper Input Validation 
CVE-2014-1426 2024-11-21 11:04 2019-04-23 Show GitHub Exploit DB Packet Storm
285614 5.3 MEDIUM
Network
mediawiki mediawiki MediaWiki 1.18.0 allows remote attackers to obtain the installation path via vectors related to thumbnail creation. CWE-200
Information Exposure
CVE-2014-1686 2024-11-21 11:04 2018-04-16 Show GitHub Exploit DB Packet Storm
285615 6.5 MEDIUM
Network
entity_api_project
fedoraproject
entity_api
fedora
The entity_access API in the Entity API module 7.x-1.x before 7.x-1.3 for Drupal might allow remote authenticated users to bypass intended access restrictions and read unpublished comments via unspec… CWE-284
Improper Access Control
CVE-2014-1400 2024-11-21 11:04 2018-04-11 Show GitHub Exploit DB Packet Storm
285616 6.5 MEDIUM
Network
entity_api_project
fedoraproject
entity_api
fedora
The entity wrapper access API in the Entity API module 7.x-1.x before 7.x-1.3 for Drupal might allow remote authenticated users to bypass intended access restrictions on referenced entities via unspe… CWE-284
Improper Access Control
CVE-2014-1399 2024-11-21 11:04 2018-04-11 Show GitHub Exploit DB Packet Storm
285617 6.5 MEDIUM
Network
entity_api_project
fedoraproject
entity_api
fedora
The entity wrapper access API in the Entity API module 7.x-1.x before 7.x-1.3 for Drupal might allow remote authenticated users to bypass intended access restrictions on comment, user and node statis… CWE-284
Improper Access Control
CVE-2014-1398 2024-11-21 11:04 2018-04-11 Show GitHub Exploit DB Packet Storm
285618 5.4 MEDIUM
Network
owncloud owncloud Cross-site scripting (XSS) vulnerability in ownCloud before 6.0.1 allows remote authenticated users to inject arbitrary web script or HTML via the filename of an uploaded file. CWE-79
Cross-site Scripting
CVE-2014-1665 2024-11-21 11:04 2018-03-21 Show GitHub Exploit DB Packet Storm
285619 8.8 HIGH
Network
openwebanalytics open_web_analytics Open Web Analytics (OWA) before 1.5.6 improperly generates random nonce values, which makes it easier for remote attackers to bypass a CSRF protection mechanism by leveraging knowledge of an OWA user… CWE-352
 Origin Validation Error
CVE-2014-1457 2024-11-21 11:04 2018-03-21 Show GitHub Exploit DB Packet Storm
285620 8.1 HIGH
Network
eventum_project eventum htdocs/setup/index.php in Eventum before 2.3.5 allows remote attackers to inject and execute arbitrary PHP code via the hostname parameter. CWE-275
 Permission Issues
CVE-2014-1632 2024-11-21 11:04 2018-02-1 Show GitHub Exploit DB Packet Storm