Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 20, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
204361 6.1 警告
Network
Benjamin Sterling - WordPress 用 photoxhibit プラグインにおける反射型クロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2016-1000144 2016-10-19 16:54 2016-02-9 Show GitHub Exploit DB Packet Storm
204362 6.1 警告
Network
Benjamin Sterling - WordPress 用 photoxhibit プラグインにおける反射型クロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2016-1000143 2016-10-19 16:54 2016-02-9 Show GitHub Exploit DB Packet Storm
204363 6.1 警告
Network
parsi-font project - WordPress 用 parsi-font プラグインにおける反射型クロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2016-1000142 2016-10-19 16:54 2016-02-9 Show GitHub Exploit DB Packet Storm
204364 6.1 警告
Network
Page Layout Builder project - WordPress 用 page-layout-builder プラグインにおける反射型クロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2016-1000141 2016-10-19 16:54 2016-02-9 Show GitHub Exploit DB Packet Storm
204365 6.1 警告
Network
new-year-firework project - WordPress 用 new-year-firework プラグインにおける反射型クロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2016-1000140 2016-10-19 16:54 2016-02-9 Show GitHub Exploit DB Packet Storm
204366 6.1 警告
Network
Katz Web Services, Inc. - WordPress 用 Infusionsoft Gravity Forms プラグインにおける反射型クロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2016-1000139 2016-10-19 16:54 2016-02-9 Show GitHub Exploit DB Packet Storm
204367 6.1 警告
Network
indexisto project - WordPress 用 indexisto プラグインにおける反射型クロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2016-1000138 2016-10-19 16:54 2016-02-9 Show GitHub Exploit DB Packet Storm
204368 6.1 警告
Network
Hero Plugins - WordPress 用 Hero Maps Pro プラグインにおける反射型クロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2016-1000137 2016-10-19 16:54 2016-02-9 Show GitHub Exploit DB Packet Storm
204369 6.1 警告
Network
heat-trackr project - WordPress 用 heat-trackr プラグインにおける反射型クロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2016-1000136 2016-10-19 16:52 2016-02-9 Show GitHub Exploit DB Packet Storm
204370 6.1 警告
Network
HDW Tube project - WordPress 用 HDW Tube プラグインにおける反射型クロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2016-1000135 2016-10-19 16:52 2016-02-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 21, 2026, 4:01 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
289861 - mit
redhat
debian
fedoraproject
kerberos_5
enterprise_linux_desktop
enterprise_linux_workstation
enterprise_linux_server
enterprise_linux_server_aus
enterprise_linux_server_eus
enterprise_linux_eus
enterprise_l…
MIT Kerberos 5 (aka krb5) before 1.12.2 allows remote attackers to cause a denial of service (buffer over-read and application crash) by injecting invalid tokens into a GSSAPI application session. CWE-125
Out-of-bounds Read
CVE-2014-4341 2024-11-21 11:09 2014-07-20 Show GitHub Exploit DB Packet Storm
289862 - php_kobo multifunctional_mailform_free Cross-site scripting (XSS) vulnerability in PHP Kobo Multifunctional MailForm Free 2014/1/28 and earlier allows remote attackers to inject arbitrary web script or HTML via an HTTP Referer header. CWE-79
Cross-site Scripting
CVE-2014-3894 2024-11-21 11:09 2014-07-20 Show GitHub Exploit DB Packet Storm
289863 - nexatechnologies meridian Cross-site scripting (XSS) vulnerability in Nexa Meridian before 2014 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. CWE-79
Cross-site Scripting
CVE-2014-3892 2024-11-21 11:09 2014-07-20 Show GitHub Exploit DB Packet Storm
289864 - webmin webmin Cross-site scripting (XSS) vulnerability in Webmin before 1.690, when referrer checking is disabled, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: thi… CWE-79
Cross-site Scripting
CVE-2014-3886 2024-11-21 11:09 2014-07-20 Show GitHub Exploit DB Packet Storm
289865 - webmin webmin Cross-site scripting (XSS) vulnerability in Webmin before 1.690 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. NOTE: this might overlap CVE-2014-39… CWE-79
Cross-site Scripting
CVE-2014-3885 2024-11-21 11:09 2014-07-20 Show GitHub Exploit DB Packet Storm
289866 - webmin usermin Cross-site scripting (XSS) vulnerability in Usermin before 1.600 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: this might overlap CVE-2014-3924. CWE-79
Cross-site Scripting
CVE-2014-3884 2024-11-21 11:09 2014-07-20 Show GitHub Exploit DB Packet Storm
289867 - octavocms octavocms Cross-site scripting (XSS) vulnerability in admin/viewer.php in OctavoCMS allows remote attackers to inject arbitrary web script or HTML via the src parameter. CWE-79
Cross-site Scripting
CVE-2014-4331 2024-11-21 11:09 2014-07-20 Show GitHub Exploit DB Packet Storm
289868 - oracle hyperion Unspecified vulnerability in the Hyperion Essbase component in Oracle Hyperion 11.1.2.2 and 11.1.2.3 allows remote attackers to affect availability via unknown vectors related to Agent. NVD-CWE-noinfo
CVE-2014-4271 2024-11-21 11:09 2014-07-17 Show GitHub Exploit DB Packet Storm
289869 - oracle hyperion Unspecified vulnerability in the Hyperion Common Admin component in Oracle Hyperion 11.1.2.2 and 11.1.2.3 allows remote authenticated users to affect confidentiality via unknown vectors related to Us… NVD-CWE-noinfo
CVE-2014-4270 2024-11-21 11:09 2014-07-17 Show GitHub Exploit DB Packet Storm
289870 - oracle hyperion Unspecified vulnerability in the Hyperion Common Admin component in Oracle Hyperion 11.1.2.2 and 11.1.2.3 allows remote authenticated users to affect confidentiality via unknown vectors related to Us… NVD-CWE-noinfo
CVE-2014-4269 2024-11-21 11:09 2014-07-17 Show GitHub Exploit DB Packet Storm