Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 27, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
216241	4.3	警告	IBM	-	IBM Security Access Manager for Web および Security Access Manager for Mobile におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2014-6079	2014-11-17 16:54	2014-09-29	Show	GitHub Exploit DB Packet Storm

216242	3.5	注意	IBM	-	IBM FileNet Content Manager および Content Foundation におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2014-4763	2014-11-17 16:53	2014-08-29	Show	GitHub Exploit DB Packet Storm

216243	7.2	危険	Fabrice Bellard Canonical	-	QEMU の vmware-vga ドライバにおける qemu メモリロケーションに書き込まれる脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2014-3689	2014-11-17 16:34	2014-10-15	Show	GitHub Exploit DB Packet Storm

216244	4.3	警告	シスコシステムズ	-	Cisco Unified Communications Manager の Remote Mobile Access Subsystem における VCS core デバイスを偽造される脆弱性	CWE-310 暗号の問題	CVE-2014-7991	2014-11-17 14:37	2014-11-11	Show	GitHub Exploit DB Packet Storm

216245	7.5	危険	Rockwell Automation	-	Rockwell Automation Connected Components Workbench におけるサービス運用妨害 (DoS) の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2014-5424	2014-11-17 14:28	2014-11-11	Show	GitHub Exploit DB Packet Storm

216246	10	危険	ヒューレット・パッカード	-	HP Helion Cloud Development Platform の Application Lifecycle Service における任意のコードを実行される脆弱性	CWE-310 暗号の問題	CVE-2014-7878	2014-11-17 14:24	2014-11-10	Show	GitHub Exploit DB Packet Storm

216247	9	危険	Magmi project	-	Magento Community Edition 用 MAGMI プラグインの magmi/web/magmi.php における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2014-8770	2014-11-17 14:07	2014-10-24	Show	GitHub Exploit DB Packet Storm

216248	5	警告	GNU Project	-	GnuTLS の gnutls_ecc.c 内の _gnutls_ecc_ansi_x963_expor 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-310 暗号の問題	CVE-2014-8564	2014-11-17 13:48	2014-11-10	Show	GitHub Exploit DB Packet Storm

216249	4.3	警告	Jexperts	-	JExperts Channel Platform におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2014-8557	2014-11-17 12:30	2014-10-27	Show	GitHub Exploit DB Packet Storm

216250	7.5	危険	MantisBT Group	-	MantisBT の api/soap/mc_project_api.php の mc_project_get_attachments 関数における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2014-8554	2014-11-17 12:29	2014-10-30	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
292061	-	apache citrix	cloudstack cloudplatform	Apache CloudStack 4.0.0 before 4.0.2 and Citrix CloudPlatform (formerly Citrix CloudStack) 3.0.x before 3.0.6 Patch C allows remote attackers to bypass the console proxy authentication by leveraging …	CWE-287 Improper Authentication	CVE-2013-2756	2024-11-21 10:52	2014-05-23	Show	GitHub Exploit DB Packet Storm

292062	-	krisonav	krisonav	Cross-site request forgery (CSRF) vulnerability in users_maint.html in KrisonAV CMS before 3.0.2 allows remote attackers to hijack the authentication of administrators for requests that create user a…	CWE-352 Origin Validation Error	CVE-2013-2713	2024-11-21 10:52	2014-05-23	Show	GitHub Exploit DB Packet Storm

292063	-	krisonav	krisonav	Cross-site scripting (XSS) vulnerability in services/get_article.php in KrisonAV CMS before 3.0.2 allows remote attackers to inject arbitrary web script or HTML via the content parameter.	CWE-79 Cross-site Scripting	CVE-2013-2712	2024-11-21 10:52	2014-05-23	Show	GitHub Exploit DB Packet Storm

292064	-	webmaster-source	wp125	Cross-site request forgery (CSRF) vulnerability in the Add/Edit page (adminmenus.php) in the WP125 plugin before 1.5.0 for WordPress allows remote attackers to hijack the authentication of administra…	CWE-352 Origin Validation Error	CVE-2013-2700	2024-11-21 10:52	2014-05-15	Show	GitHub Exploit DB Packet Storm

292065	-	tipsandtricks-hq	wordpress_simple_paypal_shopping_cart	Cross-site request forgery (CSRF) vulnerability in the WordPress Simple Paypal Shopping Cart plugin before 3.6 for WordPress allows remote attackers to hijack the authentication of administrators for…	CWE-352 Origin Validation Error	CVE-2013-2705	2024-11-21 10:52	2014-05-13	Show	GitHub Exploit DB Packet Storm

292066	-	openvpn	openvpn_access_server	Cross-site request forgery (CSRF) vulnerability in the Admin web interface in OpenVPN Access Server before 1.8.5 allows remote attackers to hijack the authentication of administrators for requests th…	CWE-352 Origin Validation Error	CVE-2013-2692	2024-11-21 10:52	2014-05-13	Show	GitHub Exploit DB Packet Storm

292067	-	netgear	wndr4700_firmware wndr4700	Multiple cross-site scripting (XSS) vulnerabilities in NETGEAR WNDR4700 with firmware 1.0.0.34 allow remote authenticated users to inject arbitrary web script or HTML via the (1) UserName or (2) Pass…	CWE-79 Cross-site Scripting	CVE-2013-3069	2024-11-21 10:52	2014-04-26	Show	GitHub Exploit DB Packet Storm

292068	-	osisoft	pi_interface	The DNP Master Driver in the OSIsoft PI Interface before 3.1.2.54 for DNP3 allows physically proximate attackers to cause a denial of service (interface shutdown) via crafted input over a serial line.	CWE-20 Improper Input Validation	CVE-2013-2828	2024-11-21 10:52	2014-04-12	Show	GitHub Exploit DB Packet Storm

292069	-	osisoft	pi_interface	The DNP Master Driver in the OSIsoft PI Interface before 3.1.2.54 for DNP3 allows remote attackers to cause a denial of service (interface shutdown) via a crafted TCP packet.	CWE-20 Improper Input Validation	CVE-2013-2809	2024-11-21 10:52	2014-04-12	Show	GitHub Exploit DB Packet Storm

292070	-	snilesh	content_slide	Cross-site request forgery (CSRF) vulnerability in the Content Slide plugin 1.4.2 for WordPress allows remote attackers to hijack the authentication of administrators for requests that change plugin …	CWE-352 Origin Validation Error	CVE-2013-2708	2024-11-21 10:52	2014-04-11	Show	GitHub Exploit DB Packet Storm