Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 14, 2026, 6:01 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
251881 7.2 危険 マイクロソフト - Windows Server 2003 および 2008 の WINS における権限昇格の脆弱性性 CWE-264
認可・権限・アクセス制御
CVE-2011-1984 2011-10-20 16:19 2011-09-13 Show GitHub Exploit DB Packet Storm
251882 9.3 危険 マイクロソフト - Microsoft Excel 2003 における任意のコードを実行される脆弱性 CWE-399
リソース管理の問題
CVE-2011-1986 2011-10-20 16:18 2011-09-13 Show GitHub Exploit DB Packet Storm
251883 9.3 危険 マイクロソフト - 複数の Microsoft Excel 製品における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2011-1987 2011-10-20 16:18 2011-09-13 Show GitHub Exploit DB Packet Storm
251884 9.3 危険 マイクロソフト - 複数の Microsoft Excel 製品における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2011-1988 2011-10-20 16:18 2011-09-13 Show GitHub Exploit DB Packet Storm
251885 9.3 危険 マイクロソフト - 複数の Microsoft Excel 製品における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認
CVE-2011-1989 2011-10-20 16:17 2011-09-13 Show GitHub Exploit DB Packet Storm
251886 9.3 危険 マイクロソフト - 複数の Microsoft Excel 製品における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2011-1990 2011-10-20 16:17 2011-09-13 Show GitHub Exploit DB Packet Storm
251887 9.3 危険 マイクロソフト - Microsoft Windows における権限昇格の脆弱性 CWE-Other
その他
CVE-2011-1991 2011-10-20 16:17 2011-09-13 Show GitHub Exploit DB Packet Storm
251888 9.3 危険 アドビシステムズ - Adobe Reader および Acrobat における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認
CVE-2011-2442 2011-10-20 16:14 2011-09-13 Show GitHub Exploit DB Packet Storm
251889 9.3 危険 アドビシステムズ - Adobe Reader および Acrobat の CoolType.dll におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2011-2441 2011-10-20 16:14 2011-09-13 Show GitHub Exploit DB Packet Storm
251890 9.3 危険 アドビシステムズ - Adobe Reader および Acrobat における任意のコードを実行される脆弱性 CWE-399
リソース管理の問題
CVE-2011-2440 2011-10-20 16:13 2011-09-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 14, 2026, 4 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
281081 - microsoft windows_xp Microsoft Windows XP SP3 does not validate addresses in certain IRP handler routines, which allows local users to write data to arbitrary memory locations, and consequently gain privileges, via a cra… CWE-20
 Improper Input Validation 
CVE-2014-4971 2024-11-21 11:11 2014-07-27 Show GitHub Exploit DB Packet Storm
281082 - apple quicktime Apple QuickTime allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a malformed version number and flags in an mvhd atom. CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2014-4979 2024-11-21 11:11 2014-07-26 Show GitHub Exploit DB Packet Storm
281083 - sabreairlinesolutions crew_management
crew_services
crew_training
crew_operations
crew_planning
Multiple SQL injection vulnerabilities in CWPLogin.aspx in Sabre AirCentre Crew products 2010.2.12.20008 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) username or (… CWE-89
SQL Injection
CVE-2014-4858 2024-11-21 11:11 2014-07-26 Show GitHub Exploit DB Packet Storm
281084 - zohocorp manageengine_eventlog_analyzer Cross-site scripting (XSS) vulnerability in ZOHO ManageEngine EventLog Analyzer 9 build 9000 allows remote attackers to inject arbitrary web script or HTML via the j_username parameter to event/j_sec… CWE-79
Cross-site Scripting
CVE-2014-5103 2024-11-21 11:11 2014-07-26 Show GitHub Exploit DB Packet Storm
281085 - vbulletin vbulletin SQL injection vulnerability in vBulletin 5.0.4 through 5.1.3 Alpha 5 allows remote attackers to execute arbitrary SQL commands via the criteria[startswith] parameter to ajax/render/memberlist_items. CWE-89
SQL Injection
CVE-2014-5102 2024-11-21 11:11 2014-07-26 Show GitHub Exploit DB Packet Storm
281086 - webidsupport webid Multiple cross-site scripting (XSS) vulnerabilities in WeBid 1.1.1 allow remote attackers to inject arbitrary web script or HTML via the (1) TPL_name, (2) TPL_nick, (3) TPL_email, (4) TPL_year, (5) T… CWE-79
Cross-site Scripting
CVE-2014-5101 2024-11-21 11:11 2014-07-26 Show GitHub Exploit DB Packet Storm
281087 - omeka omeka Multiple cross-site request forgery (CSRF) vulnerabilities in Omeka before 2.2.1 allow remote attackers to hijack the authentication of administrators for requests that (1) add a new super user accou… CWE-352
 Origin Validation Error
CVE-2014-5100 2024-11-21 11:11 2014-07-26 Show GitHub Exploit DB Packet Storm
281088 - reviewboard review_board Cross-site scripting (XSS) vulnerability in Review Board 1.7.x before 1.7.27 and 2.0.x before 2.0.4 allows remote attackers to inject arbitrary web script or HTML via a query parameter to a diff frag… CWE-79
Cross-site Scripting
CVE-2014-5027 2024-11-21 11:11 2014-07-26 Show GitHub Exploit DB Packet Storm
281089 - sonicwall uma_em5000
global_management_system
analyzer
Cross-site scripting (XSS) vulnerability in sgms/panelManager in Dell SonicWALL GMS, Analyzer, and UMA before 7.2 SP1 allows remote attackers to inject arbitrary web script or HTML via the node_id pa… CWE-79
Cross-site Scripting
CVE-2014-5024 2024-11-21 11:11 2014-07-24 Show GitHub Exploit DB Packet Storm
281090 - netbsd
eterna
netbsd
bozohttpd
bozotic HTTP server (aka bozohttpd) before 20140708, as used in NetBSD, truncates paths when checking .htpasswd restrictions, which allows remote attackers to bypass the HTTP authentication scheme an… CWE-264
Permissions, Privileges, and Access Controls
CVE-2014-5015 2024-11-21 11:11 2014-07-24 Show GitHub Exploit DB Packet Storm