Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 12, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
240561	4.3	警告	Novell	-	Novell OpenSUSE SWAMP Workflow Administration などにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2007-5702	2012-09-25 16:59	2007-10-24	Show	GitHub Exploit DB Packet Storm

240562	4.3	警告	Mozilla Foundation	-	Mozilla Firefox の ParseFTPList.cpp におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2007-5691	2012-09-25 16:59	2007-10-29	Show	GitHub Exploit DB Packet Storm

240563	7.5	危険	Invision Power Services, Inc phpBB sebflipper	-	phpBB などの Multi-Forums モジュールの directory.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2007-5688	2012-09-25 16:59	2007-10-29	Show	GitHub Exploit DB Packet Storm

240564	4.3	警告	hackish	-	Hackish の shoutbox/blocco.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2007-5677	2012-09-25 16:59	2007-10-24	Show	GitHub Exploit DB Packet Storm

240565	7.5	危険	multixtpm	-	MultiXTpm Application Server におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2007-5675	2012-09-25 16:59	2007-10-24	Show	GitHub Exploit DB Packet Storm

240566	6.8	警告	instaguide	-	InstaGuide Weather の index.php におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2007-5674	2012-09-25 16:59	2007-10-24	Show	GitHub Exploit DB Packet Storm

240567	4.3	警告	ifnet	-	ifnet の WebIf の cgi-bin/webif.exe におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2007-5673	2012-09-25 16:59	2007-10-24	Show	GitHub Exploit DB Packet Storm

240568	7.2	危険	Novell	-	Novell ZENworks ESM の STEngine.exe における権限を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2007-5665	2012-09-25 16:59	2008-01-8	Show	GitHub Exploit DB Packet Storm

240569	6.9	警告	IBM	-	IBM DB2 Universal Database の db2dasrrm における任意のファイルを上書きされる脆弱性	CWE-59 リンク解釈の問題	CVE-2007-5664	2012-09-25 16:59	2008-04-16	Show	GitHub Exploit DB Packet Storm

240570	9.3	危険	macrovision	-	Macrovision InstallShield InstallScript OCI におけるライブラリコードをダウンロードされる脆弱性	CWE-94 コード・インジェクション	CVE-2007-5661	2012-09-25 16:59	2008-04-3	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 12, 2026, 4:20 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
284511	-	redhat openstack	openstack image_registry_and_delivery_service_\(glance\)	OpenStack Glance 2014.2.x through 2014.2.1, 2014.1.3, and earlier allows remote authenticated users to bypass the storage quota and cause a denial of service (disk consumption) by deleting an image i…	CWE-399 Resource Management Errors	CVE-2014-9623	2024-11-21 11:21	2015-01-24	Show	GitHub Exploit DB Packet Storm

284512	-	gentoo	xdg-utils	Eval injection vulnerability in xdg-utils 1.1.0 RC1, when no supported desktop environment is identified, allows context-dependent attackers to execute arbitrary code via the URL argument to xdg-open.	CWE-77 Command Injection	CVE-2014-9622	2024-11-21 11:21	2015-01-22	Show	GitHub Exploit DB Packet Storm

284513	-	file_project	file	The ELF parser in file 5.16 through 5.21 allows remote attackers to cause a denial of service via a long string.	CWE-399 Resource Management Errors	CVE-2014-9621	2024-11-21 11:21	2015-01-22	Show	GitHub Exploit DB Packet Storm

284514	-	file_project	file	The ELF parser in file 5.08 through 5.21 allows remote attackers to cause a denial of service via a large number of notes.	CWE-399 Resource Management Errors	CVE-2014-9620	2024-11-21 11:21	2015-01-22	Show	GitHub Exploit DB Packet Storm

284515	-	videolan	vlc_media_player	The picture_Release function in misc/picture.c in VideoLAN VLC media player 2.1.5 allows remote attackers to execute arbitrary code or cause a denial of service (write access violation) via a crafted…	CWE-20 Improper Input Validation	CVE-2014-9598	2024-11-21 11:21	2015-01-22	Show	GitHub Exploit DB Packet Storm

284516	-	videolan	vlc_media_player	The picture_pool_Delete function in misc/picture_pool.c in VideoLAN VLC media player 2.1.5 allows remote attackers to execute arbitrary code or cause a denial of service (DEP violation and applicatio…	CWE-20 Improper Input Validation	CVE-2014-9597	2024-11-21 11:21	2015-01-22	Show	GitHub Exploit DB Packet Storm

284517	-	pivotal_software	rabbitmq	RabbitMQ before 3.4.0 allows remote attackers to bypass the loopback_users restriction via a crafted X-Forwareded-For header.	CWE-264 Permissions, Privileges, and Access Controls	CVE-2014-9494	2024-11-21 11:21	2015-01-21	Show	GitHub Exploit DB Packet Storm

284518	-	illumos	illumos	The devzvol_readdir function in illumos does not check the return value of a strchr call, which allows remote attackers to cause a denial of service (NULL pointer dereference and panic) via unspecifi…	NVD-CWE-Other	CVE-2014-9491	2024-11-21 11:21	2015-01-21	Show	GitHub Exploit DB Packet Storm

284519	-	getsentry	raven-ruby	The numtok function in lib/raven/okjson.rb in the raven-ruby gem before 0.12.2 for Ruby allows remote attackers to cause a denial of service via a large exponent value in a scientific number.	CWE-399 Resource Management Errors	CVE-2014-9490	2024-11-21 11:21	2015-01-21	Show	GitHub Exploit DB Packet Storm

284520	-	ffmpeg canonical	ffmpeg ubuntu_linux	libavcodec/utvideodec.c in FFmpeg before 2.5.2 does not check for a zero value of a slice height, which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly h…	CWE-189 Numeric Errors	CVE-2014-9604	2024-11-21 11:21	2015-01-17	Show	GitHub Exploit DB Packet Storm