Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 8, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
216961 4.3 警告 RobotStats - RobotStats の admin/robots.lib.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-9349 2014-12-10 18:04 2014-11-22 Show GitHub Exploit DB Packet Storm
216962 7.5 危険 RobotStats - RobotStats における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2014-9348 2014-12-10 18:04 2014-11-22 Show GitHub Exploit DB Packet Storm
216963 7.5 危険 Hangzhou Hikvision Digital Technology - Hikvision DVR DS-7204 ファームウェアにおけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2014-4880 2014-12-10 18:03 2014-11-20 Show GitHub Exploit DB Packet Storm
216964 5 警告 DELL EMC (旧 EMC Corporation) - RSA Adaptive Authentication における認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2014-4631 2014-12-10 18:02 2014-12-2 Show GitHub Exploit DB Packet Storm
216965 7.5 危険 Todd Palino - phpMyRecipes の dosearch.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2014-9347 2014-12-10 18:00 2014-11-25 Show GitHub Exploit DB Packet Storm
216966 7.5 危険 Guruperl.net Inc. - Guruperl.net Advertise With Pleasure! Professional における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2014-9345 2014-12-10 17:59 2014-12-2 Show GitHub Exploit DB Packet Storm
216967 5 警告 Eleanor CMS - Eleanor CMS の go.php におけるオープンリダイレクトの脆弱性 CWE-Other
その他 		CVE-2014-9180 2014-12-10 17:29 2014-11-11 Show GitHub Exploit DB Packet Storm
216968 6.4 警告 Squid-cache.org - Squid の pinger における重要な情報を取得される脆弱性 CWE-Other
その他 		CVE-2014-7141 2014-12-10 17:26 2014-09-15 Show GitHub Exploit DB Packet Storm
216969 6.8 警告 Globiz Solutions - SnowFox CMS におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2014-9344 2014-12-10 17:10 2014-11-20 Show GitHub Exploit DB Packet Storm
216970 5 警告 MantisBT Group - MantisBT における CAPTCHA 保護メカニズムを回避される脆弱性 CWE-Other
その他 		CVE-2014-9117 2014-12-10 17:07 2014-11-26 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 9, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
290811 - autodesk autocad Untrusted search path vulnerability in Autodesk AutoCAD before 2014 allows local users to gain privileges via a Trojan horse DLL in the current working directory. CWE-20
 Improper Input Validation  		CVE-2014-0819 2024-11-21 11:02 2014-02-23 Show GitHub Exploit DB Packet Storm
290812 - autodesk autocad Untrusted search path vulnerability in Autodesk AutoCAD before 2014 allows local users to gain privileges and execute arbitrary VBScript code via a Trojan horse FAS file in the FAS file search path. CWE-94
Code Injection 		CVE-2014-0818 2024-11-21 11:02 2014-02-23 Show GitHub Exploit DB Packet Storm
290813 - blackboard vista\/ce Cross-site scripting (XSS) vulnerability in Blackboard Vista/CE 8.0 SP6 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. CWE-79
Cross-site Scripting 		CVE-2014-0811 2024-11-21 11:02 2014-02-23 Show GitHub Exploit DB Packet Storm
290814 - cisco adaptive_security_appliance_software Race condition in the Phone Proxy component in Cisco Adaptive Security Appliance (ASA) Software 9.1(.3) and earlier allows remote attackers to bypass sec_db authentication and provide certain pass-th… CWE-287
Improper Authentication 		CVE-2014-0739 2024-11-21 11:02 2014-02-23 Show GitHub Exploit DB Packet Storm
290815 - cisco adaptive_security_appliance_software The Phone Proxy component in Cisco Adaptive Security Appliance (ASA) Software 9.1(.3) and earlier allows remote attackers to bypass authentication and change trust relationships by injecting a Certif… CWE-287
Improper Authentication 		CVE-2014-0738 2024-11-21 11:02 2014-02-23 Show GitHub Exploit DB Packet Storm
290816 - cisco unified_ip_phone_7960g The Cisco Unified IP Phone 7960G 9.2(1) and earlier allows remote attackers to bypass authentication and change trust relationships by injecting a Certificate Trust List (CTL) file, aka Bug ID CSCuj6… CWE-287
Improper Authentication 		CVE-2014-0737 2024-11-21 11:02 2014-02-23 Show GitHub Exploit DB Packet Storm
290817 - cisco unified_communications_manager The administration interface in Cisco Unified Communications Manager (Unified CM) 10.0(1) and earlier allows remote attackers to bypass authentication and read Java class files via a direct request, … CWE-264
Permissions, Privileges, and Access Controls 		CVE-2014-0731 2024-11-21 11:02 2014-02-23 Show GitHub Exploit DB Packet Storm
290818 - cisco unified_computing_system_central_software Cisco Unified Computing System (UCS) Central Software 1.1 and earlier allows local users to gain privileges via a CLI copy command in a local-mgmt context, aka Bug ID CSCul53128. CWE-20
 Improper Input Validation  		CVE-2014-0730 2024-11-21 11:02 2014-02-23 Show GitHub Exploit DB Packet Storm
290819 - cisco unified_sip_phone_3905 The Cisco Unified SIP Phone 3905 with firmware before 9.4(1) allows remote attackers to obtain root access via a session on the test interface on TCP port 7870, aka Bug ID CSCuh75574. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2014-0721 2024-11-21 11:02 2014-02-23 Show GitHub Exploit DB Packet Storm
290820 - cisco ips_sensor_software Cisco IPS Software 7.1 before 7.1(8)E4 and 7.2 before 7.2(2)E4 allows remote attackers to cause a denial of service (Analysis Engine process outage) via a flood of jumbo frames, aka Bug ID CSCuh94944. CWE-20
 Improper Input Validation  		CVE-2014-0720 2024-11-21 11:02 2014-02-23 Show GitHub Exploit DB Packet Storm