Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 19, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
242321 10 危険 malbum - mAlbum における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2007-1045 2012-09-25 16:47 2007-02-21 Show GitHub Exploit DB Packet Storm
242322 5 警告 Pearson Education, Inc. - Pearson Education PowerSchool における admin フォルダの内容をリスト化される脆弱性 CWE-200
情報漏えい 		CVE-2007-1044 2012-09-25 16:47 2007-02-21 Show GitHub Exploit DB Packet Storm
242323 10 危険 peanutkb - PeanutKB における脆弱性 - CVE-2007-1039 2012-09-25 16:47 2007-02-21 Show GitHub Exploit DB Packet Storm
242324 7.5 危険 レッドハット - JBoss のディフォルト設定における管理アクセス権を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2007-1036 2012-09-25 16:47 2007-02-21 Show GitHub Exploit DB Packet Storm
242325 7.8 危険 Niels Provos - Niels Provos libevent におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-1030 2012-09-25 16:47 2007-02-21 Show GitHub Exploit DB Packet Storm
242326 4.4 警告 IBM - Linux および Unix 用の IBM DB2 における任意のファイルを上書きされる脆弱性 CWE-59
リンク解釈の問題 		CVE-2007-1027 2012-09-25 16:47 2007-02-21 Show GitHub Exploit DB Packet Storm
242327 10 危険 marcello vitagliano - Meganoide's news の include.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-1024 2012-09-25 16:47 2007-02-21 Show GitHub Exploit DB Packet Storm
242328 4.6 警告 macrovision - Macrovision InstallAnywhere における許可されないインストールを実行される脆弱性 - CVE-2007-1009 2012-09-25 16:47 2007-04-19 Show GitHub Exploit DB Packet Storm
242329 4.3 警告 Mozilla Foundation - Mozilla Firefox におけるフィッシング攻撃などを実行される脆弱性 CWE-DesignError
CVE-2007-1004 2012-09-25 16:47 2007-02-19 Show GitHub Exploit DB Packet Storm
242330 6.9 警告 Linux - Linux kernel の tee システムコールにおける重要な情報を取得される脆弱性 CWE-362
競合状態 		CVE-2007-0997 2012-09-25 16:47 2007-09-18 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 19, 2026, 4:01 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
286661 - redhat libvirt The virDomainGetXMLDesc API in Libvirt before 1.2.11 allows remote read-only users to obtain the VNC password by using the VIR_DOMAIN_XML_MIGRATABLE flag, which triggers the use of the VIR_DOMAIN_XML… CWE-255
Credentials Management 		CVE-2014-7823 2024-11-21 11:18 2014-11-14 Show GitHub Exploit DB Packet Storm
286662 7.8 HIGH
Local 		linux
opensuse
suse 		linux_kernel
evergreen
suse_linux_enterprise_server 		kernel/trace/trace_syscalls.c in the Linux kernel through 3.17.2 does not properly handle private syscall numbers during use of the ftrace subsystem, which allows local users to gain privileges or ca… CWE-476
 NULL Pointer Dereference 		CVE-2014-7826 2024-11-21 11:18 2014-11-10 Show GitHub Exploit DB Packet Storm
286663 7.8 HIGH
Local 		linux linux_kernel kernel/trace/trace_syscalls.c in the Linux kernel through 3.17.2 does not properly handle private syscall numbers during use of the perf subsystem, which allows local users to cause a denial of servi… CWE-125
Out-of-bounds Read 		CVE-2014-7825 2024-11-21 11:18 2014-11-10 Show GitHub Exploit DB Packet Storm
286664 7.8 HIGH
Local 		linux
debian
opensuse
suse 		linux_kernel
debian_linux
evergreen
linux_enterprise_real_time_extension
suse_linux_enterprise_server 		The kvm_iommu_map_pages function in virt/kvm/iommu.c in the Linux kernel through 3.17.2 miscalculates the number of pages during the handling of a mapping failure, which allows guest OS users to caus… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2014-8369 2024-11-21 11:18 2014-11-10 Show GitHub Exploit DB Packet Storm
286665 - sprockets_project sprockets Multiple directory traversal vulnerabilities in server.rb in Sprockets before 2.0.5, 2.1.x before 2.1.4, 2.2.x before 2.2.3, 2.3.x before 2.3.3, 2.4.x before 2.4.6, 2.5.x before 2.5.1, 2.6.x and 2.7.… CWE-22
Path Traversal 		CVE-2014-7819 2024-11-21 11:18 2014-11-8 Show GitHub Exploit DB Packet Storm
286666 - rubyonrails
opensuse 		ruby_on_rails
rails
opensuse 		Directory traversal vulnerability in actionpack/lib/action_dispatch/middleware/static.rb in Action Pack in Ruby on Rails 3.x before 3.2.20, 4.0.x before 4.0.11, 4.1.x before 4.1.7, and 4.2.x before 4… CWE-22
Path Traversal 		CVE-2014-7818 2024-11-21 11:18 2014-11-8 Show GitHub Exploit DB Packet Storm
286667 - cisco ios_xe
air-ct5760
ws-c3850
ws-c3860 		Cisco IOS XE 3.5E and earlier on WS-C3850, WS-C3860, and AIR-CT5760 devices does not properly parse the "request system shell" challenge response, which allows local users to obtain Linux root access… CWE-20
 Improper Input Validation  		CVE-2014-7990 2024-11-21 11:18 2014-11-7 Show GitHub Exploit DB Packet Storm
286668 - cisco b460_m4
b420_m3
b260_m4
b200_m3
b200_m4
b22_m3
b230_m2
b440_m2 		Cisco Unified Computing System on B-Series blade servers allows local users to gain shell privileges via a crafted (1) ping6 or (2) traceroute6 command, aka Bug ID CSCuq38176. CWE-20
 Improper Input Validation  		CVE-2014-7989 2024-11-21 11:18 2014-11-7 Show GitHub Exploit DB Packet Storm
286669 - cisco unity_connection The Unified Messaging Service (UMS) in Cisco Unity Connection 10.5 and earlier allows remote authenticated users to obtain sensitive information by reading log files, aka Bug ID CSCur06493. CWE-200
Information Exposure 		CVE-2014-7988 2024-11-21 11:18 2014-11-7 Show GitHub Exploit DB Packet Storm
286670 - french_national_commission_on_informatics_and_liberty cookieviz Cross-site scripting (XSS) vulnerability in json.php in French National Commission on Informatics and Liberty (aka CNIL) CookieViz allows remote we servers to inject arbitrary web script or HTML via … CWE-79
Cross-site Scripting 		CVE-2014-8352 2024-11-21 11:18 2014-11-7 Show GitHub Exploit DB Packet Storm