Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 26, 2026, noon

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
255901 5 警告 Opera Software ASA - Opera におけるローカルファイル名の有効性を判別される脆弱性 CWE-200
情報漏えい 		CVE-2008-4199 2010-09-27 16:04 2008-09-27 Show GitHub Exploit DB Packet Storm
255902 7.5 危険 Opera Software ASA - Opera における http ページ上で危険な操作を実行させられる脆弱性 CWE-Other
その他 		CVE-2008-4198 2010-09-27 16:03 2008-09-27 Show GitHub Exploit DB Packet Storm
255903 9.3 危険 Opera Software ASA - Opera における任意のコードを実行される脆弱性 CWE-399
リソース管理の問題 		CVE-2008-4197 2010-09-27 16:03 2008-09-27 Show GitHub Exploit DB Packet Storm
255904 4.3 警告 Opera Software ASA - Opera におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-4196 2010-09-27 16:02 2008-09-27 Show GitHub Exploit DB Packet Storm
255905 5 警告 Opera Software ASA - Opera における任意のアドレスの表示を誘発させられる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-4195 2010-09-27 16:02 2008-09-27 Show GitHub Exploit DB Packet Storm
255906 6.8 警告 Opera Software ASA - Opera における HTTP セッションハイジャックの脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-3172 2010-09-27 16:01 2008-07-14 Show GitHub Exploit DB Packet Storm
255907 10 危険 Opera Software ASA - Windows 上で稼働する Opera における任意のコードを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2008-3079 2010-09-27 16:01 2008-07-9 Show GitHub Exploit DB Packet Storm
255908 7.8 危険 Opera Software ASA - Opera における初期化されていないメモリコンテンツを読まれる脆弱性 CWE-200
情報漏えい 		CVE-2008-3078 2010-09-27 16:01 2008-07-9 Show GitHub Exploit DB Packet Storm
255909 5 警告 Opera Software ASA - Opera における信頼されたフレームのコンテンツを偽装される脆弱性 CWE-DesignError
CVE-2008-2716 2010-09-27 16:00 2008-06-16 Show GitHub Exploit DB Packet Storm
255910 5 警告 Opera Software ASA - Opera におけるクロスドメインの脆弱性 CWE-200
情報漏えい 		CVE-2008-2715 2010-09-27 16:00 2008-06-16 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 26, 2026, 4:05 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
283481 9.8 CRITICAL
Network 		mrlg4php_project mrlg4php mrlg-lib.php in mrlg4php before 1.0.8 allows remote attackers to execute arbitrary shell code. CWE-94
Code Injection 		CVE-2014-3927 2024-11-21 11:09 2017-04-4 Show GitHub Exploit DB Packet Storm
283482 6.1 MEDIUM
Network 		lg_project lg Cross-site scripting (XSS) vulnerability in lg.cgi in Cougar LG 1.9 allows remote attackers to inject arbitrary web script or HTML via the "addr" parameter. CWE-79
Cross-site Scripting 		CVE-2014-3926 2024-11-21 11:09 2017-03-14 Show GitHub Exploit DB Packet Storm
283483 - oracle peoplesoft_products Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.53 allows remote authenticated users to affect integrity via vectors related to PIA Core T… NVD-CWE-noinfo
CVE-2014-4279 2024-11-21 11:09 2015-01-21 Show GitHub Exploit DB Packet Storm
283484 - oracle oracle_and_sun_systems_product_suite Unspecified vulnerability in the Solaris Cluster component in Oracle Sun Systems Products Suite 3.3 and 4.1 allows remote authenticated users to affect confidentiality, integrity, and availability vi… NVD-CWE-noinfo
CVE-2014-4259 2024-11-21 11:09 2015-01-21 Show GitHub Exploit DB Packet Storm
283485 - mongodb mongodb The CmdAuthenticate::_authenticateX509 function in db/commands/authentication_commands.cpp in mongod in MongoDB 2.6.x before 2.6.2 allows remote attackers to cause a denial of service (daemon crash) … CWE-20
 Improper Input Validation  		CVE-2014-3971 2024-11-21 11:09 2014-12-25 Show GitHub Exploit DB Packet Storm
283486 - linux linux_kernel drivers/misc/qseecom.c in the QSEECOM driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, does not validate certain… CWE-787
 Out-of-bounds Write 		CVE-2014-4322 2024-11-21 11:09 2014-12-25 Show GitHub Exploit DB Packet Storm
283487 - linux linux_kernel The mdp_lut_hw_update function in drivers/video/msm/mdp.c in the MDP display driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and ot… CWE-20
 Improper Input Validation  		CVE-2014-4323 2024-11-21 11:09 2014-12-12 Show GitHub Exploit DB Packet Storm
283488 - zohocorp manageengine_password_manager_pro
manageengine_it360 		SQL injection vulnerability in the MetadataServlet servlet in ManageEngine Password Manager Pro (PMP) and Password Manager Pro Managed Service Providers (MSP) edition 5 through 7 build 7003, IT360 an… CWE-89
SQL Injection 		CVE-2014-3997 2024-11-21 11:09 2014-12-6 Show GitHub Exploit DB Packet Storm
283489 - manageengine it360
password_manager_pro
desktop_central 		SQL injection vulnerability in the LinkViewFetchServlet servlet in ManageEngine Desktop Central (DC) and Desktop Central Managed Service Providers (MSP) edition before 9 build 90043, Password Manager… CWE-89
SQL Injection 		CVE-2014-3996 2024-11-21 11:09 2014-12-6 Show GitHub Exploit DB Packet Storm
283490 - sunhater kcfinder Cross-site scripting (XSS) vulnerability in index.php in SunHater KCFinder 3.11 and earlier allows remote attackers to inject arbitrary web script or HTML via (1) file or (2) directory (folder) name … CWE-79
Cross-site Scripting 		CVE-2014-3988 2024-11-21 11:09 2014-12-3 Show GitHub Exploit DB Packet Storm