Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
210681 5 警告 GNU Project - GNU Cpio の process_copy_in 関数におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2014-9112 2014-12-3 16:08 2014-11-27 Show GitHub Exploit DB Packet Storm
210682 4 警告 CSSJockey.com - WordPress 用 SupportEzzy Ticket System プラグインにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-9179 2014-12-3 16:08 2014-10-12 Show GitHub Exploit DB Packet Storm
210683 7.5 危険 Smarty Pants Plugins - WordPress 用 Smarty Pants Plugins SP Client Document Manager プラグインにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2014-9178 2014-12-3 16:07 2014-11-21 Show GitHub Exploit DB Packet Storm
210684 5 警告 SVN Labs Softwares. - WordPress 用 HTML5 MP3 Player with Playlist Free プラグインにおけるインストールパスを取得される脆弱性 CWE-200
情報漏えい
CVE-2014-9177 2014-12-3 16:07 2014-11-26 Show GitHub Exploit DB Packet Storm
210685 4.3 警告 InstaSqueeze.com - WordPress 用 InstaSqueeze Sexy Squeeze Pages プラグインにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-9176 2014-12-3 16:06 2014-11-26 Show GitHub Exploit DB Packet Storm
210686 7.5 危険 wpDataTables - WordPress 用 wpDataTables プラグインの wpdatatables.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2014-9175 2014-12-3 16:05 2014-11-22 Show GitHub Exploit DB Packet Storm
210687 4.3 警告 Team Yoast - WordPress 用 Google Analytics by Yoast プラグインおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-9174 2014-12-3 16:05 2014-11-26 Show GitHub Exploit DB Packet Storm
210688 7.5 危険 Google Doc Embedder - WordPress 用 Google Doc Embedder プラグインの view.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2014-9173 2014-12-3 16:05 2014-11-14 Show GitHub Exploit DB Packet Storm
210689 4.3 警告 Geardev - WordPress 用 Ad-Manager プラグインの track-click.php におけるオープンリダイレクトの脆弱性 CWE-Other
その他
CVE-2014-8754 2014-12-3 16:04 2014-11-26 Show GitHub Exploit DB Packet Storm
210690 5 警告 Kennziffer.com - TYPO3 用 ke_questionnaire エクステンションにおける重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2014-8874 2014-12-3 15:56 2014-12-1 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 26, 2026, 4:08 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1011 8.4 HIGH
Local
- - MAGIX Music Editor 3.1 contains a buffer overflow vulnerability in the FreeDB Proxy Options dialog that allows local attackers to execute arbitrary code by exploiting structured exception handling. A… New CWE-787
 Out-of-bounds Write
CVE-2018-25260 2026-04-23 06:23 2026-04-23 Show GitHub Exploit DB Packet Storm
1012 8.4 HIGH
Local
- - Iperius Backup 5.8.1 contains a local buffer overflow vulnerability in the structured exception handling (SEH) mechanism that allows local attackers to execute arbitrary code by supplying a malicious… New CWE-787
 Out-of-bounds Write
CVE-2018-25261 2026-04-23 06:23 2026-04-23 Show GitHub Exploit DB Packet Storm
1013 6.2 MEDIUM
Local
- - Angry IP Scanner for Linux 3.5.3 contains a denial of service vulnerability that allows local attackers to crash the application by supplying malformed input to the port selection field. Attackers ca… New CWE-787
 Out-of-bounds Write
CVE-2018-25262 2026-04-23 06:23 2026-04-23 Show GitHub Exploit DB Packet Storm
1014 8.4 HIGH
Local
- - LanSpy 2.0.1.159 contains a local buffer overflow vulnerability in the scan section that allows local attackers to execute arbitrary code by exploiting structured exception handling mechanisms. Attac… New CWE-787
 Out-of-bounds Write
CVE-2018-25265 2026-04-23 06:23 2026-04-23 Show GitHub Exploit DB Packet Storm
1015 6.2 MEDIUM
Local
- - Angry IP Scanner 3.5.3 contains a buffer overflow vulnerability in the preferences dialog that allows local attackers to crash the application by supplying an excessively large string. Attackers can … New CWE-787
 Out-of-bounds Write
CVE-2018-25266 2026-04-23 06:23 2026-04-23 Show GitHub Exploit DB Packet Storm
1016 6.2 MEDIUM
Local
- - UltraISO 9.7.1.3519 contains a local buffer overflow vulnerability in the Output FileName field of the Make CD/DVD Image dialog that allows attackers to overwrite SEH and SE handler records. Attacker… New CWE-787
 Out-of-bounds Write
CVE-2018-25267 2026-04-23 06:23 2026-04-23 Show GitHub Exploit DB Packet Storm
1017 8.4 HIGH
Local
- - LanSpy 2.0.1.159 contains a local buffer overflow vulnerability that allows attackers to overwrite the instruction pointer by supplying oversized input to the scan field. Attackers can craft a payloa… New CWE-787
 Out-of-bounds Write
CVE-2018-25268 2026-04-23 06:23 2026-04-23 Show GitHub Exploit DB Packet Storm
1018 6.1 MEDIUM
Network
- - ICEWARP 11.0.0.0 contains a cross-site scripting vulnerability that allows attackers to inject malicious HTML elements into emails by embedding base64-encoded payloads in object and embed tags. Attac… New CWE-79
Cross-site Scripting
CVE-2018-25269 2026-04-23 06:23 2026-04-23 Show GitHub Exploit DB Packet Storm
1019 9.8 CRITICAL
Network
- - ThinkPHP 5.0.23 contains a remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary PHP code by invoking functions through the routing parameter. Attackers can c… New CWE-639
 Authorization Bypass Through User-Controlled Key
CVE-2018-25270 2026-04-23 06:23 2026-04-23 Show GitHub Exploit DB Packet Storm
1020 6.2 MEDIUM
Local
- - Textpad 8.1.2 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long buffer string through the Run command interface. Attacke… New CWE-787
 Out-of-bounds Write
CVE-2018-25271 2026-04-23 06:23 2026-04-23 Show GitHub Exploit DB Packet Storm