Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 20, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
217791 5 警告 tera-charts project - WordPress 用 Tera Charts プラグインにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2014-4940 2014-07-15 18:22 2014-05-28 Show GitHub Exploit DB Packet Storm
217792 6.5 警告 Darell Sun - WordPress 用 ENL Newsletter プラグインにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2014-4939 2014-07-15 18:21 2014-05-28 Show GitHub Exploit DB Packet Storm
217793 7.5 危険 Darell Sun - WordPress 用 WP Rss Poster プラグインにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2014-4938 2014-07-15 18:19 2014-05-28 Show GitHub Exploit DB Packet Storm
217794 5 警告 BookX plugin project - WordPress 用 includes/bookx_export.php の BookX プラグインにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2014-4937 2014-07-15 18:18 2014-05-28 Show GitHub Exploit DB Packet Storm
217795 4.9 警告 アルバネットワークス株式会社 - Aruba Networks ClearPass の Policy Manager における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2014-4013 2014-07-15 15:34 2014-07-3 Show GitHub Exploit DB Packet Storm
217796 4.3 警告 フォーティネット - FortiGuard FortiWeb におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-4738 2014-07-15 15:27 2014-07-10 Show GitHub Exploit DB Packet Storm
217797 7.5 危険 Dahua Technology Co., Ltd - Dahua DVR における認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2013-6117 2014-07-15 13:54 2013-11-13 Show GitHub Exploit DB Packet Storm
217798 7.5 危険 特定非営利活動法人 Seasar ファウンデーション - S2Struts において ClassLoader が操作可能な脆弱性 CWE-DesignError
CVE-2014-3893 2014-07-15 12:17 2014-07-15 Show GitHub Exploit DB Packet Storm
217799 4.9 警告 シトリックス・システムズ - Citrix XenDesktop における他のユーザのデスクトップへのアクセス権を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2014-4700 2014-07-14 17:31 2014-07-10 Show GitHub Exploit DB Packet Storm
217800 3.5 注意 OpenStack
Canonical		 - OpenStack Neutron の L3-agent におけるサービス運用妨害 (DoS) の脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2014-4167 2014-07-14 17:30 2014-06-7 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 21, 2026, 4:10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
346581 - bizdesign imagefolio Cross-site scripting (XSS) vulnerability in BizDesign ImageFolio 3.01 and earlier allows remote attackers to execute arbitrary web script as other users via (1) the direct parameter in imageFolio.cgi… NVD-CWE-Other
CVE-2002-1334 2017-07-11 10:29 2002-12-11 Show GitHub Exploit DB Packet Storm
346582 - microsoft office_web_components The Load method in the Chart component of Office Web Components (OWC) 9 and 10 generates an exception when a specified file does not exist, which allows remote attackers to determine the existence of… NVD-CWE-Other
CVE-2002-1338 2017-07-11 10:29 2002-12-18 Show GitHub Exploit DB Packet Storm
346583 - squirrelmail squirrelmail Cross-site scripting (XSS) vulnerability in read_body.php for SquirrelMail 1.2.10, 1.2.9, and earlier allows remote attackers to insert script and HTML via the (1) mailbox and (2) passed_id parameter… NVD-CWE-Other
CVE-2002-1341 2017-07-11 10:29 2002-12-18 Show GitHub Exploit DB Packet Storm
346584 - melange melange_chat_system Buffer overflow in Melange Chat System 1.10 allows remote attackers to cause a denial of service (chat server crash) and possibly execute arbitrary code via the msgText buffer in the chat_InterpretDa… NVD-CWE-Other
CVE-2002-1351 2017-07-11 10:29 2002-12-24 Show GitHub Exploit DB Packet Storm
346585 - intranet-server localweb2000 LocalWEB2000 HTTP server 2.1.0 stores passwords in plain text under the web document root in users.lst, which allows remote attackers to obtain the passwords via a direct request to users.lst. NVD-CWE-Other
CVE-2002-1353 2017-07-11 10:29 2002-08-29 Show GitHub Exploit DB Packet Storm
346586 - typsoft typsoft_ftp_server Directory traversal vulnerability in TYPSoft FTP Server 0.99.8 allows local users to list the contents of arbitrary directories via a ... (dot dot dot) in the cd/CWD command. NVD-CWE-Other
CVE-2002-1354 2017-07-11 10:29 2002-12-18 Show GitHub Exploit DB Packet Storm
346587 - easy_software_products
apple 		cups
mac_os_x 		Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code by causing negative arguments to be fed into … NVD-CWE-Other
CVE-2002-1368 2017-07-11 10:29 2002-12-26 Show GitHub Exploit DB Packet Storm
346588 - openldap openldap Multiple buffer overflows in OpenLDAP2 (OpenLDAP 2) 2.2.0 and earlier allow remote attackers to execute arbitrary code via (1) long -t or -r parameters to slurpd, (2) a malicious ldapfilter.conf file… NVD-CWE-Other
CVE-2002-1378 2017-07-11 10:29 2003-01-2 Show GitHub Exploit DB Packet Storm
346589 - postgresql postgresql Vulnerability in the cash_words() function for PostgreSQL 7.2 and earlier allows local users to cause a denial of service and possibly execute arbitrary code via a large negative argument, possibly t… NVD-CWE-Other
CVE-2002-1397 2017-07-11 10:29 2003-01-17 Show GitHub Exploit DB Packet Storm
346590 - khaled_mardam-bey mirc Buffer overflow in mIRC 6.0.2 and earlier allows remote attackers to execute arbitrary code via a long $asctime value. NVD-CWE-Other
CVE-2002-1456 2017-07-11 10:29 2003-06-9 Show GitHub Exploit DB Packet Storm