Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 23, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
242481 7.5 危険 php director - PHP Director の videos.php における SQL インジェクションの脆弱性 - CVE-2007-3562 2012-09-25 16:47 2007-07-4 Show GitHub Exploit DB Packet Storm
242482 4.3 警告 Moodle - Moodle の index.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-3555 2012-09-25 16:47 2007-07-4 Show GitHub Exploit DB Packet Storm
242483 7.6 危険 ヒューレット・パッカード - HP Instant Support - Driver Check におけるスタックベースのバッファオーバーフローの脆弱性 - CVE-2007-3554 2012-09-25 16:47 2007-06-13 Show GitHub Exploit DB Packet Storm
242484 4.3 警告 オラクル - Oracle Application Server 11i の Rapid Install Web Server におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-3553 2012-09-25 16:47 2007-07-3 Show GitHub Exploit DB Packet Storm
242485 4.3 警告 Tenable, Inc. - Nessus Vulnerability Scanner の Windows GUI におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-3546 2012-09-25 16:47 2007-07-3 Show GitHub Exploit DB Packet Storm
242486 7.8 危険 IBM - iSeries マシン上の IBM OS/400 におけるファイアーウォールルールを回避される脆弱性 - CVE-2007-3537 2012-09-25 16:47 2007-06-28 Show GitHub Exploit DB Packet Storm
242487 7.2 危険 NVIDIA - Gentoo Linux で使用される nvidia-drivers におけるサービス運用妨害 (DoS) の脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2007-3532 2012-09-25 16:47 2007-06-28 Show GitHub Exploit DB Packet Storm
242488 7.5 危険 hispah - youtubeclone の msg.php における SQL インジェクションの脆弱性 - CVE-2007-3518 2012-09-25 16:47 2007-07-3 Show GitHub Exploit DB Packet Storm
242489 7.5 危険 カスペルスキー - Kaspersky Anti-Spam の Web ベース製品における特定のディレクトリへのアクセス権を取得される脆弱性 - CVE-2007-3502 2012-09-25 16:47 2007-06-29 Show GitHub Exploit DB Packet Storm
242490 4.3 警告 htmlpurifier - HTML Purifier の smoketests/configForm.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-3498 2012-09-25 16:47 2007-06-29 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 23, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
286001 7.5 HIGH
Network 		telegram messenger An issue was discovered in Telegram Messenger 2.6 for iOS and 1.8.2 for Android. Secret chat messages are available in cleartext in process memory and a .db file. CWE-200
Information Exposure 		CVE-2014-8688 2024-11-21 11:19 2017-03-14 Show GitHub Exploit DB Packet Storm
286002 8.1 HIGH
Network 		avm fritz\!_os AVM FRITZ!OS before 6.30 extracts the contents of firmware updates before verifying their cryptographic signature, which allows remote attackers to create symlinks or overwrite critical files, and co… CWE-310
Cryptographic Issues 		CVE-2014-8886 2024-11-21 11:19 2016-01-9 Show GitHub Exploit DB Packet Storm
286003 - oracle openjdk A .desktop file in the Debian openjdk-7 package 7u79-2.5.5-1~deb8u1 includes a MIME type registration that is added to /etc/mailcap by mime-support, which allows remote attackers to execute arbitrary… CWE-20
 Improper Input Validation  		CVE-2014-8873 2024-11-21 11:19 2015-11-10 Show GitHub Exploit DB Packet Storm
286004 - ibm websphere_portal IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0.0 through 7.0.0.2 CF29, 8.0.0 through 8.0.0.1 CF18, and 8.5.0 before CF08 improperly restricts resource access, which … CWE-284
Improper Access Control 		CVE-2014-8912 2024-11-21 11:19 2015-10-29 Show GitHub Exploit DB Packet Storm
286005 - ibm openpages_grc_platform Cross-site scripting (XSS) vulnerability in IBM OpenPages GRC Platform 6.2 before IF7, 6.2.1 before 6.2.1.1 IF5, 7.0 before FP4, and 7.1 before FP1 allows remote authenticated users to inject arbitra… CWE-79
Cross-site Scripting 		CVE-2014-8916 2024-11-21 11:19 2015-10-4 Show GitHub Exploit DB Packet Storm
286006 - apple
freebsd 		iphone_os
freebsd
mac_os_x 		The __sflush function in fflush.c in stdio in libc in FreeBSD 10.1 and the kernel in Apple iOS before 9 mishandles failures of the write system call, which allows context-dependent attackers to execu… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2014-8611 2024-11-21 11:19 2015-09-18 Show GitHub Exploit DB Packet Storm
286007 - checkmarx cxsast Checkmarx CxSAST (formerly CxSuite) before 7.1.8 allows remote authenticated users to bypass the CxQL sandbox protection mechanism and execute arbitrary C# code by asserting the (1) System.Security.P… CWE-94
Code Injection 		CVE-2014-8778 2024-11-21 11:19 2015-09-17 Show GitHub Exploit DB Packet Storm
286008 - polarssl polarssl Memory leak in PolarSSL before 1.2.12 and 1.3.x before 1.3.9 allows remote attackers to cause a denial of service (memory consumption) via a large number of crafted X.509 certificates. NOTE: this id… CWE-399
 Resource Management Errors 		CVE-2014-8628 2024-11-21 11:19 2015-08-25 Show GitHub Exploit DB Packet Storm
286009 - ibm db2 IBM DB2 9.7 through FP10, 9.8 through FP5, 10.1 before FP5, and 10.5 through FP5 on Linux, UNIX, and Windows allows remote authenticated users to read arbitrary text files via a crafted XML/XSLT func… CWE-74
Injection 		CVE-2014-8910 2024-11-21 11:19 2015-07-20 Show GitHub Exploit DB Packet Storm
286010 - adobe acrobat
acrobat_dc
acrobat_reader
acrobat_reader_dc 		Adobe Reader and Acrobat 10.x before 10.1.15 and 11.x before 11.0.12, Acrobat and Acrobat Reader DC Classic before 2015.006.30060, and Acrobat and Acrobat Reader DC Continuous before 2015.008.20082 o… CWE-200
Information Exposure 		CVE-2014-8450 2024-11-21 11:19 2015-07-15 Show GitHub Exploit DB Packet Storm