Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 19, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
201731	6.1	警告 Network	MyBB Group	-	MyBB および Merge System の Admin コントロールパネルの Users モジュールにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2016-9421	2017-02-13 15:32	2016-10-17	Show	GitHub Exploit DB Packet Storm

201732	9.8	緊急 Network	MyBB Group	-	MyBB および Merge System における脆弱性	CWE-20 不適切な入力確認	CVE-2016-9420	2017-02-13 15:32	2016-10-17	Show	GitHub Exploit DB Packet Storm

201733	6.1	警告 Network	MyBB Group	-	MyBB および Merge System の Admin コントロールパネルにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2016-9419	2017-02-13 15:32	2016-10-17	Show	GitHub Exploit DB Packet Storm

201734	7.5	重要 Network	MyBB Group	-	Windows 上で稼動する MyBB および Merge System における ACP バックアップから重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2016-9418	2017-02-13 15:32	2016-10-17	Show	GitHub Exploit DB Packet Storm

201735	7.4	重要 Network	MyBB Group	-	MyBB および Merge System の fetch_remote_file 関数におけるサーバサイドのリクエストフォージェリの脆弱性	CWE-918 サーバサイドリクエストフォージェリ	CVE-2016-9417	2017-02-13 15:32	2016-10-17	Show	GitHub Exploit DB Packet Storm

201736	9.8	緊急 Network	MyBB Group	-	MyBB および Merge System のユーザデータハンドラにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2016-9416	2017-02-13 15:32	2016-10-17	Show	GitHub Exploit DB Packet Storm

201737	7.5	重要 Network	MyBB Group	-	Windows 上で稼動する MyBB および Merge System における任意の CSS ファイルを上書きされる脆弱性	CWE-284 不適切なアクセス制御	CVE-2016-9415	2017-02-13 15:32	2016-10-17	Show	GitHub Exploit DB Packet Storm

201738	7.5	重要 Network	MyBB Group	-	MyBB および Merge System における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2016-9414	2017-02-13 15:32	2016-03-11	Show	GitHub Exploit DB Packet Storm

201739	6.5	警告 Network	MyBB Group	-	MyBB および Merge System の Admin コントロールパネルにおけるクリックジャッキング攻撃を実行される脆弱性	CWE-284 不適切なアクセス制御	CVE-2016-9413	2017-02-13 15:32	2016-03-11	Show	GitHub Exploit DB Packet Storm

201740	9.8	緊急 Network	MyBB Group	-	MyBB および Merge System における脆弱性	CWE-284 不適切なアクセス制御	CVE-2016-9412	2017-02-13 15:32	2016-03-11	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 20, 2026, 4:01 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
292791	-	ecava	integraxor	Ecava IntegraXor before 4.1.4393 allows remote attackers to read cleartext credentials for administrative accounts via SELECT statements that leverage the guest role.	CWE-310 Cryptographic Issues	CVE-2014-0786	2024-11-21 11:02	2014-05-1	Show	GitHub Exploit DB Packet Storm

292792	-	debian canonical	dpkg ubuntu_linux	Directory traversal vulnerability in the unpacking functionality in dpkg before 1.15.9, 1.16.x before 1.16.13, and 1.17.x before 1.17.8 allows remote attackers to write arbitrary files via a crafted …	CWE-22 Path Traversal	CVE-2014-0471	2024-11-21 11:02	2014-04-30	Show	GitHub Exploit DB Packet Storm

292793	-	super_project	super	super.c in Super 3.30.0 does not check the return value of the setuid function when the -F flag is set, which allows local users to gain privileges via unspecified vectors, aka an RLIMIT_NPROC attack.	CWE-264 Permissions, Privileges, and Access Controls	CVE-2014-0470	2024-11-21 11:02	2014-04-30	Show	GitHub Exploit DB Packet Storm

292794	-	adobe	flash_player	Buffer overflow in Adobe Flash Player before 11.7.700.279 and 11.8.x through 13.0.x before 13.0.0.206 on Windows and OS X, and before 11.2.202.356 on Linux, allows remote attackers to execute arbitra…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2014-0515	2024-11-21 11:02	2014-04-29	Show	GitHub Exploit DB Packet Storm

292795	-	softmotion3d festo 3s-software	softmotion cecx-x-m1_modular_controller codesys_runtime_system cecx-x-c1_modular_master_controller	The Festo CECX-X-C1 Modular Master Controller with CoDeSys and CECX-X-M1 Modular Controller with CoDeSys and SoftMotion do not require authentication for connections to certain TCP ports, which allow…	CWE-287 Improper Authentication	CVE-2014-0769	2024-11-21 11:02	2014-04-25	Show	GitHub Exploit DB Packet Storm

292796	-	3s-software festo softmotion3d	codesys_runtime_system cecx-x-c1_modular_master_controller softmotion cecx-x-m1_modular_controller	The Festo CECX-X-C1 Modular Master Controller with CoDeSys and CECX-X-M1 Modular Controller with CoDeSys and SoftMotion provide an undocumented access method involving the FTP protocol, which allows …	CWE-287 Improper Authentication	CVE-2014-0760	2024-11-21 11:02	2014-04-25	Show	GitHub Exploit DB Packet Storm

292797	-	ibm	lotus_domino lotus_notes	IBM Notes and Domino 8.5.x before 8.5.3 FP6 IF3 and 9.x before 9.0.1 FP1 on 32-bit Linux platforms use incorrect gcc options, which makes it easier for remote attackers to execute arbitrary code by l…	CWE-200 Information Exposure	CVE-2014-0892	2024-11-21 11:02	2014-04-24	Show	GitHub Exploit DB Packet Storm

292798	-	canonical djangoproject	ubuntu_linux django	The (1) FilePathField, (2) GenericIPAddressField, and (3) IPAddressField model field classes in Django before 1.4.11, 1.5.x before 1.5.6, 1.6.x before 1.6.3, and 1.7.x before 1.7 beta 2 do not proper…	CWE-399 Resource Management Errors	CVE-2014-0474	2024-11-21 11:02	2014-04-24	Show	GitHub Exploit DB Packet Storm

292799	-	djangoproject canonical	django ubuntu_linux	The caching framework in Django before 1.4.11, 1.5.x before 1.5.6, 1.6.x before 1.6.3, and 1.7.x before 1.7 beta 2 reuses a cached CSRF token for all anonymous users, which allows remote attackers to…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2014-0473	2024-11-21 11:02	2014-04-24	Show	GitHub Exploit DB Packet Storm

292800	-	djangoproject canonical	django ubuntu_linux	The django.core.urlresolvers.reverse function in Django before 1.4.11, 1.5.x before 1.5.6, 1.6.x before 1.6.3, and 1.7.x before 1.7 beta 2 allows remote attackers to import and execute arbitrary Pyth…	CWE-94 Code Injection	CVE-2014-0472	2024-11-21 11:02	2014-04-24	Show	GitHub Exploit DB Packet Storm