Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":May 27, 2026, noon
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 217071 | 4.3 | 警告 | External links click statistics project | - | TYPO3 用 External links click statistics エクステンションにおけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2014-6294 | 2014-10-7 17:38 | 2014-02-12 | Show | GitHub Exploit DB Packet Storm |
| 217072 | 7.5 | 危険 | Kennziffer.com | - | TYPO3 用 Statistics エクステンションにおける SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2014-6293 | 2014-10-7 17:37 | 2014-02-12 | Show | GitHub Exploit DB Packet Storm |
| 217073 | 6.4 | 警告 | Alex Kellner | - | TYPO3 用 femanager エクステンションにおける他のフロントエンドユーザのレコードを変更または削除される脆弱性 |
CWE-noinfo
情報不足 |
CVE-2014-6292 | 2014-10-7 17:36 | 2014-02-12 | Show | GitHub Exploit DB Packet Storm |
| 217074 | 4.3 | 警告 | Alphabetic Sitemap project | - | TYPO3 用 Alphabetic Sitemap エクステンションにおけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2014-6291 | 2014-10-7 17:34 | 2014-02-12 | Show | GitHub Exploit DB Packet Storm |
| 217075 | 7.5 | 危険 | Rupert Germann | - | TYPO3 用 News エクステンションにおける脆弱性 |
CWE-20
不適切な入力確認 |
CVE-2014-6290 | 2014-10-7 17:33 | 2014-02-12 | Show | GitHub Exploit DB Packet Storm |
| 217076 | 7.5 | 危険 | Daniel Lienert Michael Knoll |
- | TYPO3 用 Yet Another Gallery および Tools for Extbase development エクステンションの Ajax dispatcher for Extbase におけるアクセス制限を回避される脆弱性 |
CWE-264
認可・権限・アクセス制御 |
CVE-2014-6289 | 2014-10-7 17:30 | 2014-02-12 | Show | GitHub Exploit DB Packet Storm |
| 217077 | 7.5 | 危険 | Alex Kellner | - | TYPO3 用 powermail エクステンションにおける CAPTCHA 保護メカニズムを回避される脆弱性 |
CWE-264
認可・権限・アクセス制御 |
CVE-2014-6288 | 2014-10-7 17:29 | 2014-04-10 | Show | GitHub Exploit DB Packet Storm |
| 217078 | 7.5 | 危険 | Alex Kellner | - | TYPO3 用 powermail エクステンションにおける任意のコードを実行される脆弱性 |
CWE-94
コード・インジェクション |
CVE-2014-3947 | 2014-10-7 17:28 | 2014-05-22 | Show | GitHub Exploit DB Packet Storm |
| 217079 | 9.3 | 危険 | TP-LINK Technologies | - | TP-LINK WR1043ND ルータのファームウェアにおけるクロスサイトリクエストフォージェリの脆弱性 |
CWE-352
同一生成元ポリシー違反 |
CVE-2013-2645 | 2014-10-7 16:48 | 2013-04-29 | Show | GitHub Exploit DB Packet Storm |
| 217080 | 10 | 危険 | Schneider Electric | - | Schneider Electric Modicon PLC Ethernet モジュールの SchneiderWEB におけるディレクトリトラバーサルの脆弱性 |
CWE-22
パス・トラバーサル |
CVE-2014-0754 | 2014-10-7 16:00 | 2014-09-16 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:May 27, 2026, 4:52 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 291271 | 9.8 |
CRITICAL
Network |
belkin | f5d8236-4_firmware | An authentication bypass exists in the web management interface in Belkin F5D8236-4 v2. |
CWE-287
Improper Authentication |
CVE-2013-3085 | 2024-11-21 10:52 | 2019-12-27 | Show | GitHub Exploit DB Packet Storm |
| 291272 | 9.8 |
CRITICAL
Network |
minidlna_project debian |
minidlna debian_linux |
An SQL Injection vulnerability exists in MiniDLNA prior to 1.1.0 |
CWE-89
SQL Injection |
CVE-2013-2745 | 2024-11-21 10:52 | 2019-12-5 | Show | GitHub Exploit DB Packet Storm |
| 291273 | 6.5 |
MEDIUM
Network |
otrs debian opensuse |
otrs_help_desk otrs_itsm faq debian_linux opensuse |
An Access Bypass issue exists in OTRS Help Desk before 3.2.4, 3.1.14, and 3.0.19, OTRS ITSM before 3.2.3, 3.1.8, and 3.0.7, and FAQ before 2.2.3, 2.1.4, and 2.0.8. Access rights by the object linking… |
CWE-269
Improper Privilege Management |
CVE-2013-2625 | 2024-11-21 10:52 | 2019-11-28 | Show | GitHub Exploit DB Packet Storm |
| 291274 | 9.8 |
CRITICAL
Network |
netgear | wndr4700_firmware | An Authentication Bypass vulnerability exists in NETGEAR Centria WNDR4700 Firmware 1.0.0.34 in http://<router_ip>/apply.cgi?/hdd_usr_setup.htm that when visited by any user, authenticated or not, cau… |
CWE-287
Improper Authentication |
CVE-2013-3072 | 2024-11-21 10:52 | 2019-11-15 | Show | GitHub Exploit DB Packet Storm |
| 291275 | 7.5 |
HIGH
Network |
netgear | wndr4700_firmware | An Information Disclosure vulnerability exists in Netgear WNDR4700 running firmware 1.0.0.34 in the management web interface, which discloses the PSK of the wireless LAN. |
CWE-200
Information Exposure |
CVE-2013-3070 | 2024-11-21 10:52 | 2019-11-15 | Show | GitHub Exploit DB Packet Storm |
| 291276 | 9.8 |
CRITICAL
Network |
netgear | wndr4700_firmware | A Symlink Traversal vulnerability exists in NETGEAR Centria WNDR4700 Firmware 1.0.0.34. |
CWE-22
Path Traversal |
CVE-2013-3073 | 2024-11-21 10:52 | 2019-11-15 | Show | GitHub Exploit DB Packet Storm |
| 291277 | 9.8 |
CRITICAL
Network |
readymedia_project debian |
readymedia debian_linux |
MiniDLNA has heap-based buffer overflow |
CWE-119 CWE-787 Incorrect Access of Indexable Resource ('Range Error') Out-of-bounds Write |
CVE-2013-2739 | 2024-11-21 10:52 | 2019-11-1 | Show | GitHub Exploit DB Packet Storm |
| 291278 | 9.8 |
CRITICAL
Network |
readymedia_project | readymedia | minidlna has SQL Injection that may allow retrieval of arbitrary files |
CWE-89
SQL Injection |
CVE-2013-2738 | 2024-11-21 10:52 | 2019-11-1 | Show | GitHub Exploit DB Packet Storm |
| 291279 | 7.5 |
HIGH
Network |
miniupnp_project debian |
miniupnpd debian_linux |
MiniUPnPd has information disclosure use of snprintf() |
CWE-200
Information Exposure |
CVE-2013-2600 | 2024-11-21 10:52 | 2019-11-1 | Show | GitHub Exploit DB Packet Storm |
| 291280 | 7.5 |
HIGH
Network |
rockwellautomation | rslinx_enterprise | Rockwell Automation RSLinx Enterprise Software (LogReceiver.exe) CPR9, CPR9-SR1, CPR9-SR2, CPR9-SR3, CPR9-SR4, CPR9-SR5, CPR9-SR5.1, and CPR9-SR6 does not handle input correctly and results in a logi… |
CWE-125
Out-of-bounds Read |
CVE-2013-2805 | 2024-11-21 10:52 | 2019-03-27 | Show | GitHub Exploit DB Packet Storm |