Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 10, 2026, 4:07 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
241001 6.8 警告 inoutmailinglistmanager - InoutMailingListManager における任意の PHP コードを実行される脆弱性 - CVE-2007-2003 2012-09-25 16:47 2007-04-12 Show GitHub Exploit DB Packet Storm
241002 6.8 警告 inoutmailinglistmanager - InoutMailingListManager における任意の PHP コードを実行される脆弱性 - CVE-2007-2002 2012-09-25 16:47 2007-04-12 Show GitHub Exploit DB Packet Storm
241003 7.5 危険 nazarkin.name - Weatimages の index.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-1999 2012-09-25 16:47 2007-04-12 Show GitHub Exploit DB Packet Storm
241004 7.5 危険 hiox india - HGB における任意の PHP コードを挿入される脆弱性 - CVE-2007-1998 2012-09-25 16:47 2007-04-12 Show GitHub Exploit DB Packet Storm
241005 7.5 危険 mamboxchange - Mambo 用の com_zoom モジュールにおける PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-1992 2012-09-25 16:47 2007-04-12 Show GitHub Exploit DB Packet Storm
241006 7.5 危険 lite-cms - lite-cms の index.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-1984 2012-09-25 16:47 2007-04-11 Show GitHub Exploit DB Packet Storm
241007 7.8 危険 metamod-p - Metamod-P の safevoid_vsnprintf 機能におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-1981 2012-09-25 16:47 2007-04-11 Show GitHub Exploit DB Packet Storm
241008 7.5 危険 nick jones - Topliste モジュールの index.php における SQL インジェクションの脆弱性 - CVE-2007-1980 2012-09-25 16:47 2007-04-11 Show GitHub Exploit DB Packet Storm
241009 7.5 危険 PHP-Fusion - PHP-Fusion 用の Arcade モジュールにおける SQL インジェクションの脆弱性 - CVE-2007-1978 2012-09-25 16:47 2007-04-11 Show GitHub Exploit DB Packet Storm
241010 4.3 警告 holacms - holaCMS の index_cms.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-1977 2012-09-25 16:47 2007-04-11 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 10, 2026, 5 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
287611 - alienvault open_source_security_information_management The av-centerd SOAP service in AlienVault OSSIM before 4.7.0 allows remote attackers to execute arbitrary commands via a crafted (1) remote_task or (2) get_license request, a different vulnerability … CWE-94
Code Injection 		CVE-2014-5210 2024-11-21 11:11 2014-08-21 Show GitHub Exploit DB Packet Storm
287612 - alienvault open_source_security_information_management SQL injection vulnerability in the ossim-framework service in AlienVault OSSIM before 4.6.0 allows remote attackers to execute arbitrary SQL commands via the ws_data parameter. CWE-89
SQL Injection 		CVE-2014-5159 2024-11-21 11:11 2014-08-21 Show GitHub Exploit DB Packet Storm
287613 - alienvault open_source_security_information_management The (1) av-centerd SOAP service and (2) backup command in the ossim-framework service in AlienVault OSSIM before 4.6.0 allows remote attackers to execute arbitrary commands via unspecified vectors. CWE-94
Code Injection 		CVE-2014-5158 2024-11-21 11:11 2014-08-21 Show GitHub Exploit DB Packet Storm
287614 - schrack technik_microcontrol_firmware
technik_microcontrol 		Multiple cross-site scripting (XSS) vulnerabilities in the web interface in Schrack Technik microControl with firmware 1.7.0 (937) allow remote attackers to inject arbitrary web script or HTML via th… CWE-79
Cross-site Scripting 		CVE-2014-5382 2024-11-21 11:11 2014-08-20 Show GitHub Exploit DB Packet Storm
287615 - owncloud owncloud Directory traversal vulnerability in the routing component in ownCloud Server before 5.0.17 and 6.0.x before 6.0.4 allows remote attackers to include and execute arbitrary local files via a .. (dot d… CWE-22
Path Traversal 		CVE-2014-4929 2024-11-21 11:11 2014-08-20 Show GitHub Exploit DB Packet Storm
287616 - bitdefender gravityzone Multiple directory traversal vulnerabilities in Bitdefender GravityZone before 5.1.11.432 allow remote attackers to read arbitrary files via a (1) .. (dot dot) in the id parameter to webservice/CORE/… CWE-22
Path Traversal 		CVE-2014-5350 2024-11-21 11:11 2014-08-20 Show GitHub Exploit DB Packet Storm
287617 - baidu spark_browser Stack-based buffer overflow in Baidu Spark Browser 26.5.9999.3511 allows remote attackers to cause a denial of service (application crash) via nested calls to the window.print JavaScript function. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2014-5349 2024-11-21 11:11 2014-08-20 Show GitHub Exploit DB Packet Storm
287618 - riverbed steelapp_traffic_manager Cross-site scripting (XSS) vulnerability in apps/zxtm/locallog.cgi in Riverbed Stingray (aka SteelApp) Traffic Manager Virtual Appliance 9.6 patchlevel 9620140312 allows remote attackers to inject ar… CWE-79
Cross-site Scripting 		CVE-2014-5348 2024-11-21 11:11 2014-08-20 Show GitHub Exploit DB Packet Storm
287619 - disqus disqus_comment_system Multiple cross-site request forgery (CSRF) vulnerabilities in the Disqus Comment System plugin before 2.76 for WordPress allow remote attackers to hijack the authentication of administrators for requ… CWE-352
 Origin Validation Error 		CVE-2014-5347 2024-11-21 11:11 2014-08-20 Show GitHub Exploit DB Packet Storm
287620 - disqus disqus_comment_system Multiple cross-site request forgery (CSRF) vulnerabilities in the Disqus Comment System plugin 2.77 for WordPress allow remote attackers to hijack the authentication of administrators for requests th… CWE-352
 Origin Validation Error 		CVE-2014-5346 2024-11-21 11:11 2014-08-20 Show GitHub Exploit DB Packet Storm