Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 16, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
218551 5 警告 Maarch - Maarch LetterBox における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2014-8995 2014-11-21 14:07 2014-11-17 Show GitHub Exploit DB Packet Storm
218552 5 警告 ZTE - ZTE ZXHN H108L のファームウェアにおける CWMP 設定を変更される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-8493 2014-11-21 13:37 2014-11-14 Show GitHub Exploit DB Packet Storm
218553 5 警告 Monstra - Monstra における総当たりログイン攻撃を実行される脆弱性 CWE-255
証明書・パスワード管理
CVE-2014-9006 2014-11-21 12:12 2014-11-12 Show GitHub Exploit DB Packet Storm
218554 7.5 危険 VLD Interactive - vldPersonals における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2014-9005 2014-11-21 11:55 2014-11-10 Show GitHub Exploit DB Packet Storm
218555 4.3 警告 VLD Interactive - vldPersonals におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-9004 2014-11-21 11:54 2014-11-10 Show GitHub Exploit DB Packet Storm
218556 6.5 警告 MuleSoft Inc. - Mule Enterprise Management Console における管理者権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-9000 2014-11-21 11:37 2014-10-22 Show GitHub Exploit DB Packet Storm
218557 6.5 警告 XOOPS - XOOPS の htdocs/modules/system/admin.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2014-8999 2014-11-21 11:25 2014-06-16 Show GitHub Exploit DB Packet Storm
218558 6.5 警告 X7 Group - X7 Chat の lib/message.php における任意の PHP コードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2014-8998 2014-11-21 11:18 2014-11-5 Show GitHub Exploit DB Packet Storm
218559 9 危険 アドバンテック株式会社 - Advantech EKI-6340 Wi-Fi Mesh Access Point の cgi/utility.cgi における任意のコマンドを実行される脆弱性 CWE-78
OSコマンド・インジェクション
CVE-2014-8387 2014-11-21 11:09 2014-11-19 Show GitHub Exploit DB Packet Storm
218560 7.2 危険 Faronics - Faronics Deep Freeze Standard および Enterprise の DfDiskLo.sys ドライバにおけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2014-2382 2014-11-21 11:03 2014-11-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 16, 2026, 4:13 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
290411 - hanon faceid_f810_firmware
faceid
faceid_f710_firmware
faceid_fk800_firmware
faceid_fa007_firmware
Hanvon FaceID before 1.007.110 does not require authentication, which allows remote attackers to modify access-control and attendance-tracking data via API commands. CWE-287
Improper Authentication
CVE-2014-2938 2024-11-21 11:07 2014-05-23 Show GitHub Exploit DB Packet Storm
290412 - dotonpaper booking_system SQL injection vulnerability in dopbs-backend-forms.php in the Booking System (Booking Calendar) plugin before 1.3 for WordPress allows remote authenticated users to execute arbitrary SQL commands via… CWE-89
SQL Injection
CVE-2014-3210 2024-11-21 11:07 2014-05-23 Show GitHub Exploit DB Packet Storm
290413 - fedoraproject
google
fedora
v8
chrome
Integer underflow in the LCodeGen::PrepareKeyedOperand function in arm/lithium-codegen-arm.cc in Google V8 before 3.25.28.16, as used in Google Chrome before 35.0.1916.114, allows remote attackers to… CWE-189
Numeric Errors
CVE-2014-3152 2024-11-21 11:07 2014-05-21 Show GitHub Exploit DB Packet Storm
290414 - cisco ios The LLDP implementation in Cisco IOS allows remote attackers to cause a denial of service (device reload) via a malformed packet, aka Bug ID CSCum96282. CWE-20
 Improper Input Validation 
CVE-2014-3273 2024-11-21 11:07 2014-05-20 Show GitHub Exploit DB Packet Storm
290415 - cisco ios_xr The DHCPv6 implementation in Cisco IOS XR allows remote attackers to cause a denial of service (device crash) via a malformed packet, aka Bug IDs CSCum85558, CSCum20949, CSCul61849, and CSCul71149. CWE-20
 Improper Input Validation 
CVE-2014-3271 2024-11-21 11:07 2014-05-20 Show GitHub Exploit DB Packet Storm
290416 - cisco ios_xr The DHCPv6 implementation in Cisco IOS XR allows remote attackers to cause a denial of service (process hang) via a malformed packet, aka Bug ID CSCul80924. CWE-20
 Improper Input Validation 
CVE-2014-3270 2024-11-21 11:07 2014-05-20 Show GitHub Exploit DB Packet Storm
290417 - cisco ios_xe The SNMP module in Cisco IOS XE 3.5E allows remote authenticated users to cause a denial of service (device reload) by polling frequently, aka Bug ID CSCug65204. CWE-20
 Improper Input Validation 
CVE-2014-3269 2024-11-21 11:07 2014-05-20 Show GitHub Exploit DB Packet Storm
290418 - cisco ios
unified_border_element
Cisco IOS 15.2(4)M4 on Cisco Unified Border Element (CUBE) devices allows remote attackers to cause a denial of service (input-queue consumption and traffic-processing outage) via crafted RTCP packet… CWE-20
 Improper Input Validation 
CVE-2014-3268 2024-11-21 11:07 2014-05-20 Show GitHub Exploit DB Packet Storm
290419 - cisco security_manager Cross-site scripting (XSS) vulnerability in the Auto Update Server (AUS) web framework in Cisco Security Manager 4.2 and earlier allows remote attackers to inject arbitrary web script or HTML via an … CWE-79
Cross-site Scripting
CVE-2014-3265 2024-11-21 11:07 2014-05-20 Show GitHub Exploit DB Packet Storm
290420 - cisco adaptive_security_appliance_software Cisco Adaptive Security Appliance (ASA) Software 9.1(.5) and earlier allows remote authenticated users to cause a denial of service (device reload) via crafted attributes in a RADIUS packet, aka Bug … NVD-CWE-noinfo
CVE-2014-3264 2024-11-21 11:07 2014-05-20 Show GitHub Exploit DB Packet Storm