Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 18, 2026, 4 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
201121 7.8 重要
Local
FreeBSD - FreeBSD の Linux 互換レイヤの issetugid システムコールにおける権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2016-1883 2017-03-6 16:27 2016-01-27 Show GitHub Exploit DB Packet Storm
201122 7.8 重要
Local
FreeBSD - FreeBSD のカーネルの Linux 互換レイヤにおけるカーネルメモリの一部を読み込まれる脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2016-1880 2017-03-6 16:27 2016-01-14 Show GitHub Exploit DB Packet Storm
201123 5.5 警告
Local
Artifex Software - MuPDF の fitz/pixmap.c の fz_subsample_pixmap 関数におけるヒープベースのバッファオーバーフローの脆弱性 CWE-125
境界外読み取り
CVE-2017-5896 2017-03-6 15:58 2017-02-10 Show GitHub Exploit DB Packet Storm
201124 5.5 警告
Local
Artifex Software - MuPDF の pdf-object.c の pdf_to_num 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-416
解放済みメモリの使用
CVE-2016-8674 2017-03-6 15:58 2016-09-22 Show GitHub Exploit DB Packet Storm
201125 7.5 重要
Network
GNU Project
Fedora Project
- GNU ed の regex.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-416
解放済みメモリの使用
CVE-2017-5357 2017-03-6 15:43 2017-01-20 Show GitHub Exploit DB Packet Storm
201126 7.5 重要
Network
GNU Project - GNU C Library の libresolv の IPv6 ネームサーバ管理コードの the __res_vinit 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2016-5417 2017-03-6 15:43 2016-08-4 Show GitHub Exploit DB Packet Storm
201127 5.5 警告
Local
AutoTrace project - AutoTrace の output-pstoedit.c の pstoedit_suffix_table_init 関数におけるヒープベースのバッファオーバーフローの脆弱性 CWE-787
境界外書き込み
CVE-2016-7392 2017-03-6 15:36 2016-09-12 Show GitHub Exploit DB Packet Storm
201128 8.2 重要
Local
Python Software Foundation - Openpyxl における XML 外部エンティティ攻撃を実行される脆弱性 CWE-611
XML 外部エンティティ参照の不適切な制限
CVE-2017-5992 2017-03-6 15:25 2017-01-17 Show GitHub Exploit DB Packet Storm
201129 7.8 重要
Local
libming - libming の listswf ツールの parser.c の parseSWF_RGBA 関数におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2016-9831 2017-03-6 15:08 2016-12-1 Show GitHub Exploit DB Packet Storm
201130 7.8 重要
Local
libming - libming の listswf ツールの parser.c の parseSWF_DEFINEFONT 関数におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2016-9829 2017-03-6 15:08 2016-12-1 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 18, 2026, 4 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
289621 - verweise-wordpress-twitter_project verweise-wordpress-twitter Cross-site scripting (XSS) vulnerability in res/fake_twitter/frame.php in the "verwei.se - WordPress - Twitter" (verweise-wordpress-twitter) plugin 1.0.2 and earlier for WordPress allows remote attac… CWE-79
Cross-site Scripting
CVE-2014-4566 2024-11-21 11:10 2014-07-3 Show GitHub Exploit DB Packet Storm
289622 - toolpage_project toolpage Cross-site scripting (XSS) vulnerability in includes/getTipo.php in the ToolPage plugin 1.6.1 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the t parame… CWE-79
Cross-site Scripting
CVE-2014-4560 2024-11-21 11:10 2014-07-3 Show GitHub Exploit DB Packet Storm
289623 - jigoshop swipe_hq_checkout_for_jigoshop Cross-site scripting (XSS) vulnerability in test-plugin.php in the Swipe Checkout for Jigoshop (swipe-hq-checkout-for-jigoshop) plugin 3.1.0 and earlier for WordPress allows remote attackers to injec… CWE-79
Cross-site Scripting
CVE-2014-4557 2024-11-21 11:10 2014-07-3 Show GitHub Exploit DB Packet Storm
289624 - spotlightyour spotlightyour Cross-site scripting (XSS) vulnerability in library/includes/payment/paypalexpress/DoDirectPayment.php in the Spotlight (spotlightyour) plugin 4.7 and earlier for WordPress allows remote attackers to… CWE-79
Cross-site Scripting
CVE-2014-4552 2024-11-21 11:10 2014-07-3 Show GitHub Exploit DB Packet Storm
289625 - social_connect_project social_connect Cross-site scripting (XSS) vulnerability in diagnostics/test.php in the Social Connect plugin 1.0.4 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the te… CWE-79
Cross-site Scripting
CVE-2014-4551 2024-11-21 11:10 2014-07-3 Show GitHub Exploit DB Packet Storm
289626 - rezgo online_booking Multiple cross-site scripting (XSS) vulnerabilities in templates/default/index_ajax.php in the Rezgo Online Booking plugin before 1.8.2 for WordPress allow remote attackers to inject arbitrary web sc… CWE-79
Cross-site Scripting
CVE-2014-4547 2024-11-21 11:10 2014-07-3 Show GitHub Exploit DB Packet Storm
289627 - pay_per_media_player_project pay_per_media_player Multiple cross-site scripting (XSS) vulnerabilities in payper/payper.php in the Pay Per Media Player plugin 1.24 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTM… CWE-79
Cross-site Scripting
CVE-2014-4543 2024-11-21 11:10 2014-07-3 Show GitHub Exploit DB Packet Storm
289628 - ooorl_project ooorl Cross-site scripting (XSS) vulnerability in redirect.php in the Ooorl plugin for WordPress allows remote attackers to inject arbitrary web script or HTML via the url parameter. CWE-79
Cross-site Scripting
CVE-2014-4542 2024-11-21 11:10 2014-07-3 Show GitHub Exploit DB Packet Storm
289629 - omfg_mobile_project omfg_mobile Cross-site scripting (XSS) vulnerability in shortcode-generator/preview-shortcode-external.php in the OMFG Mobile Pro plugin 1.1.26 and earlier for WordPress allows remote attackers to inject arbitra… CWE-79
Cross-site Scripting
CVE-2014-4541 2024-11-21 11:10 2014-07-3 Show GitHub Exploit DB Packet Storm
289630 - oleggo_livestream_project oleggo_livestream Cross-site scripting (XSS) vulnerability in oleggo-twitter/twitter_login_form.php in the Oleggo LiveStream plugin 0.2.6 and earlier for WordPress allows remote attackers to inject arbitrary web scrip… CWE-79
Cross-site Scripting
CVE-2014-4540 2024-11-21 11:10 2014-07-3 Show GitHub Exploit DB Packet Storm