Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
209091 6.8 警告 Mikiurl Wordpress Eklentisi project - WordPress 用 Mikiurl Wordpress Eklentisi プラグインにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2014-9337 2014-12-24 14:34 2014-12-9 Show GitHub Exploit DB Packet Storm
209092 6.8 警告 iTwitter project - WordPress 用 iTwitter プラグインにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2014-9336 2014-12-24 14:34 2014-12-9 Show GitHub Exploit DB Packet Storm
209093 6.8 警告 DandyID Services project - WordPress 用 DandyID Services プラグインにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2014-9335 2014-12-24 14:34 2014-12-9 Show GitHub Exploit DB Packet Storm
209094 6.5 警告 Sergey Romanenko - Morfy CMS の install.php における config.php に任意の PHP コード を挿入される脆弱性 CWE-94
コード・インジェクション 		CVE-2014-9185 2014-12-24 11:58 2014-12-3 Show GitHub Exploit DB Packet Storm
209095 4.3 警告 Huawei - Huawei P7-L10 スマートフォンの PackageInstaller モジュールにおける元のウェブサイトになりすまされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2014-9135 2014-12-24 11:49 2014-11-20 Show GitHub Exploit DB Packet Storm
209096 5.8 警告 株式会社 T-MEDIAホールディングス - Android 版 TSUTAYAアプリにおける任意の Java のメソッドが実行される脆弱性 CWE-DesignError
CVE-2014-7241 2014-12-22 17:51 2014-12-18 Show GitHub Exploit DB Packet Storm
209097 2.6 注意 リックソフト株式会社 - WBS ガントチャート for JIRA におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-7268 2014-12-22 17:50 2014-12-18 Show GitHub Exploit DB Packet Storm
209098 4 警告 リックソフト株式会社 - WBS ガントチャート for JIRA におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-7267 2014-12-22 17:49 2014-12-18 Show GitHub Exploit DB Packet Storm
209099 5 警告 Revive Adserver - Revive Adserver の lib/pear/XML/RPC.php の XML_RPC_cd 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他 		CVE-2014-8875 2014-12-22 17:48 2014-08-8 Show GitHub Exploit DB Packet Storm
209100 4.3 警告 Revive Adserver - Revive Adserver の lib/max/Admin/UI/Field/PublisherIdField.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-8793 2014-12-22 17:44 2014-11-20 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 23, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
251981 6.5 MEDIUM
Adjacent 		- - An Improper Check for Unusual or Exceptional Conditions vulnerability in the flow processing daemon (flowd) of Juniper Networks Junos OS on SRX4600 and SRX5000 Series allows an unauthenticated and lo… CWE-754
 Improper Check for Unusual or Exceptional Conditions 		CVE-2024-47503 2024-10-15 21:58 2024-10-12 Show GitHub Exploit DB Packet Storm
251982 7.5 HIGH
Network 		- - An Allocation of Resources Without Limits or Throttling vulnerability in the kernel of Juniper Networks Junos OS Evolved allows an unauthenticated, network based attacker to cause a Denial of Service… CWE-770
 Allocation of Resources Without Limits or Throttling 		CVE-2024-47502 2024-10-15 21:58 2024-10-12 Show GitHub Exploit DB Packet Storm
251983 5.5 MEDIUM
Local 		- - A NULL Pointer Dereference vulnerability in the packet forwarding engine (pfe) of Juniper Networks Junos OS on MX304, MX with MPC10/11/LC9600, and EX9200 with EX9200-15C allows a locally authentica… CWE-476
 NULL Pointer Dereference 		CVE-2024-47501 2024-10-15 21:58 2024-10-12 Show GitHub Exploit DB Packet Storm
251984 7.5 HIGH
Network 		- - An Improper Check for Unusual or Exceptional Conditions vulnerability in the routing protocol daemon (RPD) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, network based a… CWE-754
 Improper Check for Unusual or Exceptional Conditions 		CVE-2024-47499 2024-10-15 21:58 2024-10-12 Show GitHub Exploit DB Packet Storm
251985 7.8 HIGH
Local 		- - A DLL hijack vulnerability was reported in Lenovo Service Framework that could allow a local attacker to execute code with elevated privileges. - CVE-2024-33582 2024-10-15 21:58 2024-10-12 Show GitHub Exploit DB Packet Storm
251986 7.8 HIGH
Local 		- - A DLL hijack vulnerability was reported in Lenovo PC Manager AI intelligent scenario that could allow a local attacker to execute code with elevated privileges. - CVE-2024-33581 2024-10-15 21:58 2024-10-12 Show GitHub Exploit DB Packet Storm
251987 7.8 HIGH
Local 		- - A DLL hijack vulnerability was reported in Lenovo Personal Cloud that could allow a local attacker to execute code with elevated privileges. - CVE-2024-33580 2024-10-15 21:58 2024-10-12 Show GitHub Exploit DB Packet Storm
251988 7.8 HIGH
Local 		- - A DLL hijack vulnerability was reported in Lenovo Baiying that could allow a local attacker to execute code with elevated privileges. - CVE-2024-33579 2024-10-15 21:58 2024-10-12 Show GitHub Exploit DB Packet Storm
251989 7.8 HIGH
Local 		- - A DLL hijack vulnerability was reported in Lenovo Leyun that could allow a local attacker to execute code with elevated privileges. - CVE-2024-33578 2024-10-15 21:58 2024-10-12 Show GitHub Exploit DB Packet Storm
251990 - - - DOMPurify is a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMpurify was vulnerable to nesting-based mXSS. This vulnerability is fixed in 2.5.0 and 3.1.3. CWE-79
Cross-site Scripting 		CVE-2024-47875 2024-10-15 21:58 2024-10-12 Show GitHub Exploit DB Packet Storm