Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 22, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
240921 6.9 警告 Altova - Altova DiffDog における権限を取得される脆弱性 CWE-Other
その他
CVE-2010-5273 2012-09-11 15:38 2012-09-7 Show GitHub Exploit DB Packet Storm
240922 6.9 警告 Altova - Altova DatabaseSpy における権限を取得される脆弱性 CWE-Other
その他
CVE-2010-5272 2012-09-11 15:37 2012-09-7 Show GitHub Exploit DB Packet Storm
240923 6.9 警告 Altova - Altova MapForce における権限を取得される脆弱性 CWE-Other
その他
CVE-2010-5271 2012-09-11 15:37 2012-09-7 Show GitHub Exploit DB Packet Storm
240924 6.9 警告 アドビシステムズ - Adobe Device Central CS4 における権限を取得される脆弱性 CWE-Other
その他
CVE-2010-5270 2012-09-11 15:36 2012-09-7 Show GitHub Exploit DB Packet Storm
240925 6.9 警告 インテル - Intel Threading Building Blocks の tbb.dll における権限を取得される脆弱性 CWE-Other
その他
CVE-2010-5269 2012-09-11 15:35 2012-09-7 Show GitHub Exploit DB Packet Storm
240926 6.9 警告 Amazon.com, Inc. - Amazon Kindle for PC における権限を取得される脆弱性 CWE-Other
その他
CVE-2010-5268 2012-09-11 15:35 2012-09-7 Show GitHub Exploit DB Packet Storm
240927 6.9 警告 MunSoft - MunSoft Easy Office Recovery における権限を取得される脆弱性 CWE-Other
その他
CVE-2010-5267 2012-09-11 15:34 2012-09-7 Show GitHub Exploit DB Packet Storm
240928 6.9 警告 VideoCharge Software - VideoCharge Studio における権限を取得される脆弱性 CWE-Other
その他
CVE-2010-5266 2012-09-11 15:34 2012-09-7 Show GitHub Exploit DB Packet Storm
240929 6.9 警告 NirSoft - SmartSniff における権限を取得される脆弱性 CWE-Other
その他
CVE-2010-5265 2012-09-11 15:33 2012-09-7 Show GitHub Exploit DB Packet Storm
240930 6.9 警告 Professional UI Solutions - Prof-UIS の ProfUIS290m.dll および ProfUIS290m-RDE.dll における権限を取得される脆弱性 CWE-Other
その他
CVE-2010-5264 2012-09-11 15:33 2010-11-2 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 23, 2026, 4:08 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
285501 - owncloud owncloud Session fixation vulnerability in ownCloud before 6.0.2, when PHP is configured to accept session parameters through a GET request, allows remote attackers to hijack web sessions via unspecified vect… CWE-287
Improper Authentication
CVE-2014-2047 2024-11-21 11:05 2014-03-15 Show GitHub Exploit DB Packet Storm
285502 - file_project
php
debian
canonical
opensuse
file
php
debian_linux
ubuntu_linux
opensuse
softmagic.c in file before 5.17 and libmagic allows context-dependent attackers to cause a denial of service (out-of-bounds memory access and crash) via crafted offsets in the softmagic of a PE execu… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2014-2270 2024-11-21 11:05 2014-03-15 Show GitHub Exploit DB Packet Storm
285503 - openclassifieds open_classifieds_2 Cross-site scripting (XSS) vulnerability in classes/controller/error.php in Open Classifieds 2 before 2.1.3 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to shared-… CWE-79
Cross-site Scripting
CVE-2014-2024 2024-11-21 11:05 2014-03-14 Show GitHub Exploit DB Packet Storm
285504 - rocklobster contact_form_7 Rock Lobster Contact Form 7 before 3.7.2 allows remote attackers to bypass the CAPTCHA protection mechanism and submit arbitrary form data by omitting the _wpcf7_captcha_challenge_captcha-719 paramet… CWE-264
Permissions, Privileges, and Access Controls
CVE-2014-2265 2024-11-21 11:05 2014-03-14 Show GitHub Exploit DB Packet Storm
285505 - procentia intellipen SQL injection vulnerability in Resources/System/Templates/Data.aspx in Procentia IntelliPen before 1.1.18.1658 allows remote authenticated users to execute arbitrary SQL commands via the value parame… CWE-89
SQL Injection
CVE-2014-2043 2024-11-21 11:05 2014-03-13 Show GitHub Exploit DB Packet Storm
285506 - dokeos_project dokeos Multiple cross-site scripting (XSS) vulnerabilities in Dokeos 2.1.1 allow remote attackers to inject arbitrary web script or HTML via the (1) Phone, (2) Street, (3) Address line, (4) Zip code, or (5)… CWE-79
Cross-site Scripting
CVE-2014-1877 2024-11-21 11:05 2014-03-13 Show GitHub Exploit DB Packet Storm
285507 - freetype freetype Stack-based buffer overflow in the cf2_hintmap_build function in cff/cf2hints.c in FreeType before 2.5.3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary co… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2014-2240 2024-11-21 11:05 2014-03-12 Show GitHub Exploit DB Packet Storm
285508 - opensuse
logilab
opensuse
logilab-common
The Execute class in shellutils in logilab-commons before 0.61.0 uses tempfile.mktemp, which allows local users to have an unspecified impact by pre-creating the temporary file. NVD-CWE-noinfo
CVE-2014-1839 2024-11-21 11:05 2014-03-12 Show GitHub Exploit DB Packet Storm
285509 - opensuse
logilab
opensuse
logilab-common
The (1) extract_keys_from_pdf and (2) fill_pdf functions in pdf_ext.py in logilab-commons before 0.61.0 allows local users to overwrite arbitrary files and possibly have other unspecified impact via … CWE-59
Link Following
CVE-2014-1838 2024-11-21 11:05 2014-03-12 Show GitHub Exploit DB Packet Storm
285510 - wireshark wireshark epan/dissectors/packet-rlc in the RLC dissector in Wireshark 1.8.x before 1.8.13 and 1.10.x before 1.10.6 uses inconsistent memory-management approaches, which allows remote attackers to cause a deni… NVD-CWE-Other
CVE-2014-2283 2024-11-21 11:05 2014-03-11 Show GitHub Exploit DB Packet Storm