Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 19, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
201161 8.8 重要
Network
ATutor - ATutor の install_modules.php におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2016-2539 2017-03-3 17:05 2016-03-6 Show GitHub Exploit DB Packet Storm
201162 5.9 警告
Network
Debian
Canonical
Exim Development
- Exim における DKIM 署名の秘密鍵を取得される脆弱性 CWE-320
鍵管理のエラー
CVE-2016-9963 2017-03-3 16:59 2016-12-15 Show GitHub Exploit DB Packet Storm
201163 7.5 重要
Network
dhcpcd project - dhcpcd におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2016-1504 2017-03-3 16:58 2016-01-7 Show GitHub Exploit DB Packet Storm
201164 6.1 警告
Network
GOsa project - GOsa の html/index.php の displayLogin 関数におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-9760 2017-03-3 16:46 2014-06-12 Show GitHub Exploit DB Packet Storm
201165 7.8 重要
Local
IBM - IBM BigFix Platform における任意のファイルをアップロードされる脆弱性 CWE-284
不適切なアクセス制御
CVE-2016-0214 2017-03-3 16:42 2016-11-4 Show GitHub Exploit DB Packet Storm
201166 5.3 警告
Network
IBM - IBM Sterling B2B Integrator Standard Edition における HTTP レスポンスの重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2016-0210 2017-03-3 16:27 2016-04-30 Show GitHub Exploit DB Packet Storm
201167 5.5 警告
Local
IBM - IBM Cloud Orchestrator の task API におけるバックグラウンドの情報を表示される脆弱性 CWE-200
情報漏えい
CVE-2016-0203 2017-03-3 15:46 2016-11-18 Show GitHub Exploit DB Packet Storm
201168 9.8 緊急
Network
IBM - IBM dashDB Local における Docker コンテナまたはデータベースへのアクセス権を取得される脆弱性 CWE-798
ハードコードされた認証情報の使用
CVE-2016-8954 2017-03-3 15:46 2016-11-25 Show GitHub Exploit DB Packet Storm
201169 5.9 警告
Network
IBM - IBM Domino における認証キーを取得される脆弱性 CWE-200
情報漏えい
CVE-2016-0270 2017-03-3 15:45 2016-03-28 Show GitHub Exploit DB Packet Storm
201170 5.4 警告
Network
IBM - IBM Rational DOORS Next Generation におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2017-1128 2017-03-3 15:20 2017-02-2 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 20, 2026, 4:01 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
289591 - style_it_project style_it Cross-site scripting (XSS) vulnerability in fonts/font-form.php in the Style It plugin 1.0 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the mode parame… CWE-79
Cross-site Scripting
CVE-2014-4555 2024-11-21 11:10 2014-07-3 Show GitHub Exploit DB Packet Storm
289592 - ss_downloads_project ss_downloads Cross-site scripting (XSS) vulnerability in templates/download.php in the SS Downloads plugin before 1.5 for WordPress allows remote attackers to inject arbitrary web script or HTML via the title par… CWE-79
Cross-site Scripting
CVE-2014-4554 2024-11-21 11:10 2014-07-3 Show GitHub Exploit DB Packet Storm
289593 - woocommerce_sagepay_direct_payment_gateway_project woocommerce_sagepay_direct_payment_gateway Multiple cross-site scripting (XSS) vulnerabilities in pages/3DComplete.php in the WooCommerce SagePay Direct Payment Gateway plugin before 0.1.6.7 for WordPress allow remote attackers to inject arbi… CWE-79
Cross-site Scripting
CVE-2014-4549 2024-11-21 11:10 2014-07-3 Show GitHub Exploit DB Packet Storm
289594 - rezgo_project rezgo Cross-site scripting (XSS) vulnerability in book_ajax.php in the Rezgo plugin 1.4.2 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the response parameter. CWE-79
Cross-site Scripting
CVE-2014-4546 2024-11-21 11:10 2014-07-3 Show GitHub Exploit DB Packet Storm
289595 - html5_video_player_with_playlist_plugin_project html5_video_player_with_playlist_plugin Multiple cross-site scripting (XSS) vulnerabilities in videoplayer/autoplay.php in the HTML5 Video Player with Playlist plugin 2.4.0 and earlier for WordPress allow remote attackers to inject arbitra… CWE-79
Cross-site Scripting
CVE-2014-4534 2024-11-21 11:10 2014-07-3 Show GitHub Exploit DB Packet Storm
289596 - zdstatistics_project zdstatistics Cross-site scripting (XSS) vulnerability in cal/test.php in the ZdStatistics (zdstats) plugin 2.0.1 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the la… CWE-79
Cross-site Scripting
CVE-2014-4605 2024-11-21 11:10 2014-07-3 Show GitHub Exploit DB Packet Storm
289597 - your-text-manager_project your-text-manager Cross-site scripting (XSS) vulnerability in settings/pwsettings.php in the Your Text Manager plugin 0.3.0 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via … CWE-79
Cross-site Scripting
CVE-2014-4604 2024-11-21 11:10 2014-07-3 Show GitHub Exploit DB Packet Storm
289598 - yahoo\!_updates_for_wordpress_plugin_project yahoo\!_updates_for_wordpress_plugin Multiple cross-site scripting (XSS) vulnerabilities in yupdates_application.php in the Yahoo! Updates for WordPress plugin 1.0 and earlier for WordPress allow remote attackers to inject arbitrary web… CWE-79
Cross-site Scripting
CVE-2014-4603 2024-11-21 11:10 2014-07-3 Show GitHub Exploit DB Packet Storm
289599 - wu-rating_project wu-rating Cross-site scripting (XSS) vulnerability in wu-ratepost.php in the Wu-Rating plugin 1.0 12319 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the v parame… CWE-79
Cross-site Scripting
CVE-2014-4601 2024-11-21 11:10 2014-07-3 Show GitHub Exploit DB Packet Storm
289600 - wp_ultimate_email_marketer_project wp_ultimate_email_marketer Multiple cross-site scripting (XSS) vulnerabilities in contact/edit.php in the WP Ultimate Email Marketer plugin 1.1.0 and earlier for WordPress allow remote attackers to inject arbitrary web script … CWE-79
Cross-site Scripting
CVE-2014-4600 2024-11-21 11:10 2014-07-3 Show GitHub Exploit DB Packet Storm