Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 20, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
202421 5.3 警告
Network
NTP Project - NTP におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
CWE-410
CVE-2016-7426 2017-01-26 11:43 2016-11-21 Show GitHub Exploit DB Packet Storm
202422 7.5 重要
Network
WordPress.org - WordPress のマルチサイト WordPress API の wp-includes/ms-functions.php におけるアクセス制限を回避される脆弱性 CWE-310
暗号の問題
CVE-2017-5493 2017-01-26 10:13 2017-01-11 Show GitHub Exploit DB Packet Storm
202423 8.8 重要
Network
WordPress.org - WordPress のウィジェット編集のアクセシビリティモード機能におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2017-5492 2017-01-26 10:13 2017-01-11 Show GitHub Exploit DB Packet Storm
202424 5.3 警告
Network
WordPress.org - WordPress の wp-mail.php における投稿の制限を回避される脆弱性 CWE-254
セキュリティ機能
CVE-2017-5491 2017-01-26 10:13 2017-01-11 Show GitHub Exploit DB Packet Storm
202425 6.1 警告
Network
WordPress.org - WordPress の wp-includes/class-wp-theme.php のテーマ名のフォールバック機能におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2017-5490 2017-01-26 10:13 2017-01-11 Show GitHub Exploit DB Packet Storm
202426 8.8 重要
Network
WordPress.org - WordPress におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2017-5489 2017-01-26 10:13 2017-01-11 Show GitHub Exploit DB Packet Storm
202427 6.1 警告
Network
WordPress.org - WordPress の wp-admin/update-core.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2017-5488 2017-01-26 10:13 2017-01-11 Show GitHub Exploit DB Packet Storm
202428 5.3 警告
Network
WordPress.org - WordPress の REST API の実装における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2017-5487 2017-01-26 10:13 2017-01-11 Show GitHub Exploit DB Packet Storm
202429 9.8 緊急
Network
MetalGenix - GeniXCMS の Posts.class.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2017-5519 2017-01-26 09:57 2017-01-14 Show GitHub Exploit DB Packet Storm
202430 9.8 緊急
Network
MetalGenix - GeniXCMS の author.control.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2017-5517 2017-01-26 09:57 2017-01-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 20, 2026, 4:01 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
292661 - adobe flash_player
air_sdk
air
air_sdk_\&_compiler
Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe … CWE-94
Code Injection
CVE-2014-0584 2024-11-21 11:02 2014-11-12 Show GitHub Exploit DB Packet Storm
292662 - adobe flash_player
air_sdk
air
air_sdk_\&_compiler
Heap-based buffer overflow in Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2014-0583 2024-11-21 11:02 2014-11-12 Show GitHub Exploit DB Packet Storm
292663 - adobe flash_player
air_sdk
air
air_sdk_\&_compiler
Heap-based buffer overflow in Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2014-0582 2024-11-21 11:02 2014-11-12 Show GitHub Exploit DB Packet Storm
292664 - adobe flash_player
air_sdk
air
air_sdk_\&_compiler
Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe … NVD-CWE-noinfo
CVE-2014-0581 2024-11-21 11:02 2014-11-12 Show GitHub Exploit DB Packet Storm
292665 - adobe flash_player
air_sdk
air
air_sdk_\&_compiler
Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe … CWE-94
Code Injection
CVE-2014-0577 2024-11-21 11:02 2014-11-12 Show GitHub Exploit DB Packet Storm
292666 - adobe flash_player
air_sdk
air
air_sdk_\&_compiler
Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe … NVD-CWE-noinfo
CVE-2014-0576 2024-11-21 11:02 2014-11-12 Show GitHub Exploit DB Packet Storm
292667 - adobe flash_player
air_sdk
air
air_sdk_\&_compiler
Double free vulnerability in Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK … CWE-94
Code Injection
CVE-2014-0574 2024-11-21 11:02 2014-11-12 Show GitHub Exploit DB Packet Storm
292668 - adobe flash_player
air_sdk
air
air_sdk_\&_compiler
Use-after-free vulnerability in Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR S… NVD-CWE-Other
CVE-2014-0573 2024-11-21 11:02 2014-11-12 Show GitHub Exploit DB Packet Storm
292669 - debian advanced_package_tool The apt-get download command in APT before 1.0.9 does not properly validate signatures for packages, which allows remote attackers to execute arbitrary code via a crafted package. CWE-20
 Improper Input Validation 
CVE-2014-0490 2024-11-21 11:02 2014-11-4 Show GitHub Exploit DB Packet Storm
292670 - debian advanced_package_tool APT before 1.0.9, when the Acquire::GzipIndexes option is enabled, does not validate checksums, which allows remote attackers to execute arbitrary code via a crafted package. CWE-20
 Improper Input Validation 
CVE-2014-0489 2024-11-21 11:02 2014-11-4 Show GitHub Exploit DB Packet Storm