Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 1, 2026, 2:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
240221	6	警告	オラクル	-	WWV_FLOW_UTILITIES パッケージの wwv_flow_utilities.gen_popup_list における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2006-7138	2012-09-25 15:36	2006-10-17	Show	GitHub Exploit DB Packet Storm

240222	10	危険	jinzora	-	Jinzora の extras/mt.php における PHP リモートファイルインクルージョンの脆弱性	-	CVE-2006-7131	2012-09-25 15:36	2007-03-5	Show	GitHub Exploit DB Packet Storm

240223	7.5	危険	jinzora	-	Jinzora における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2006-7130	2012-09-25 15:36	2007-03-5	Show	GitHub Exploit DB Packet Storm

240224	2.1	注意	インターネットセキュリティシステムズ	-	ISS BlackICE PC Protection におけるスキーム保護を回避される脆弱性	-	CVE-2006-7129	2012-09-25 15:36	2007-03-5	Show	GitHub Exploit DB Packet Storm

240225	6.8	警告	Joomla!	-	Joomla BSQ Sitestats における SQL インジェクションの脆弱性	-	CVE-2006-7126	2012-09-25 15:36	2007-03-5	Show	GitHub Exploit DB Packet Storm

240226	6.8	警告	Joomla!	-	Joomla BSQ Sitestats におけるクロスサイトスクリプティングの脆弱性	-	CVE-2006-7125	2012-09-25 15:36	2007-03-5	Show	GitHub Exploit DB Packet Storm

240227	7.5	危険	Joomla!	-	BSQ Sitestats の external/rssfeeds.php における PHP リモートファイルインクルージョンの脆弱性	-	CVE-2006-7124	2012-09-25 15:36	2007-03-5	Show	GitHub Exploit DB Packet Storm

240228	7.5	危険	Joomla!	-	BSQ Sitestats における SQL インジェクションの脆弱性	-	CVE-2006-7123	2012-09-25 15:36	2007-03-5	Show	GitHub Exploit DB Packet Storm

240229	6.8	警告	Joomla!	-	BSQ Sitestats の IP Address Lookup 機能におけるクロスサイトスクリプティングの脆弱性	-	CVE-2006-7122	2012-09-25 15:36	2007-03-5	Show	GitHub Exploit DB Packet Storm

240230	7.8	危険	シスコシステムズ (Linksys)	-	Linksys SPA-921 VoIP Desktop Phone の HTTP サーバにおけるサービス運用妨害 (DoS) の脆弱性	-	CVE-2006-7121	2012-09-25 15:36	2007-03-5	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 1, 2026, 4:12 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
287021	-		erlang-solutions	mongooseim	Erlang Solutions MongooseIM through 1.3.1 rev. 2 does not properly restrict the processing of compressed XML elements, which allows remote attackers to cause a denial of service (resource consumption…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2014-2829	2024-11-21 11:07	2014-04-11	Show	GitHub Exploit DB Packet Storm

287022	8.8	HIGH Network	fortinet	fortibalancer_400_firmware fortibalancer_1000_firmware fortibalancer_2000_firmware fortibalancer_3000_firmware	In FortiBalancer 400, 1000, 2000 and 3000, a platform-specific remote access vulnerability has been discovered that may allow a remote user to gain privileged access to affected systems using SSH. Th…	CWE-276 Incorrect Default Permissions	CVE-2014-2723	2024-11-21 11:06	2020-03-20	Show	GitHub Exploit DB Packet Storm

287023	8.8	HIGH Network	fortinet	fortibalancer_400_firmware fortibalancer_1000_firmware fortibalancer_2000_firmware fortibalancer_3000_firmware	In FortiBalancer 400, 1000, 2000 and 3000, a platform-specific remote access vulnerability has been discovered that may allow a remote user to gain privileged access to affected systems using SSH. Th…	CWE-276 Incorrect Default Permissions	CVE-2014-2722	2024-11-21 11:06	2020-03-20	Show	GitHub Exploit DB Packet Storm

287024	8.8	HIGH Network	fortinet	fortibalancer_400_firmware fortibalancer_1000_firmware fortibalancer_2000_firmware fortibalancer_3000_firmware	In FortiBalancer 400, 1000, 2000 and 3000, a platform-specific remote access vulnerability has been discovered that may allow a remote user to gain privileged access to affected systems using SSH. Th…	CWE-276 Incorrect Default Permissions	CVE-2014-2721	2024-11-21 11:06	2020-03-20	Show	GitHub Exploit DB Packet Storm

287025	9.8	CRITICAL Network	trustwave	mailmarshal	The STARTTLS implementation in MailMarshal before 7.2 allows plaintext command injection.	CWE-78 OS Command	CVE-2014-2727	2024-11-21 11:06	2020-02-19	Show	GitHub Exploit DB Packet Storm

287026	7.5	HIGH Network	phoner	phonerlite	The PhonerLite phone before 2.15 provides hashed credentials in a response to an invalid authentication challenge, which makes it easier for remote attackers to obtain access via a brute-force attack…	CWE-916 Use of Password Hash With Insufficient Computational Effort	CVE-2014-2560	2024-11-21 11:06	2020-02-12	Show	GitHub Exploit DB Packet Storm

287027	9.8	CRITICAL Network	barracuda	web_application_firewall	Barracuda Web Application Firewall (WAF) 7.8.1.013 allows remote attackers to bypass authentication by leveraging a permanent authentication token obtained from a query string.	CWE-613 Insufficient Session Expiration	CVE-2014-2595	2024-11-21 11:06	2020-02-12	Show	GitHub Exploit DB Packet Storm

287028	7.5	HIGH Network	smb4k_project fedoraproject	smb4k fedora	Smb4K before 1.1.1 allows remote attackers to obtain credentials via vectors related to the cuid option in the "Additional options" line edit.	CWE-522 Insufficiently Protected Credentials	CVE-2014-2581	2024-11-21 11:06	2020-01-29	Show	GitHub Exploit DB Packet Storm

287029	8.1	HIGH Network	xmind	xmind	The update process in Xmind 3.4.1 and earlier allow remote attackers to execute arbitrary code via a man-in-the-middle attack.	NVD-CWE-Other	CVE-2014-2680	2024-11-21 11:06	2020-01-22	Show	GitHub Exploit DB Packet Storm

287030	7.5	HIGH Network	redhat	ansible	Ansible prior to 1.5.4 mishandles the evaluation of some strings.	CWE-670 Always-Incorrect Control Flow Implementation	CVE-2014-2686	2024-11-21 11:06	2020-01-9	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed