Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":July 1, 2026, 4:01 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
218551 7.5 危険 HumHub - HumHub の protected/modules_core/notification/controllers/ListController.php の actionIndex 関数における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2014-9528 2015-01-9 16:32 2014-11-28 Show GitHub Exploit DB Packet Storm
218552 7.5 危険 Debian - Debian mime-support パッケージの run-mailcap における任意のコマンドを実行される脆弱性 CWE-Other
その他
CVE-2014-7209 2015-01-9 16:25 2014-12-29 Show GitHub Exploit DB Packet Storm
218553 4.3 警告 Palo Alto Networks - Palo Alto Networks PAN-OS の web-based デバイス管理インターフェースにおけるクロスサイトスクリプティングの脆弱性 CWE-89
SQLインジェクション
CVE-2014-3764 2015-01-9 16:19 2014-12-22 Show GitHub Exploit DB Packet Storm
218554 4.3 警告 Apache Software Foundation - Apache Solr の Admin UI Plugin / Stats ページにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-3628 2015-01-9 16:04 2014-12-29 Show GitHub Exploit DB Packet Storm
218555 4.3 警告 コンクリートファイブ - concrete5 におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-9526 2015-01-9 15:58 2014-12-9 Show GitHub Exploit DB Packet Storm
218556 6.8 警告 Timed Popup project - WordPress 用 Timed Popup プラグインにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2014-9525 2015-01-9 15:55 2014-12-12 Show GitHub Exploit DB Packet Storm
218557 6.8 警告 Vinoj Cardoza - WordPress 用 Facebook Like Box プラグインにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2014-9524 2015-01-9 15:54 2014-12-12 Show GitHub Exploit DB Packet Storm
218558 6.8 警告 Smartcat - WordPress 用 Our Team Showcase プラグインにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2014-9523 2015-01-9 15:54 2014-12-12 Show GitHub Exploit DB Packet Storm
218559 4.3 警告 Papoo Software - CMS Papoo Light におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-9522 2015-01-9 15:25 2014-12-15 Show GitHub Exploit DB Packet Storm
218560 7.5 危険 InfiniteWP - InfiniteWP Admin Panel の uploadScript.php における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2014-9521 2015-01-9 14:59 2014-12-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:July 1, 2026, 4:27 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
290541 - oracle database_server Unspecified vulnerability in the Java VM component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows remote authenticated users to affect confidentiality, integrit… NVD-CWE-noinfo
CVE-2014-6560 2024-11-21 11:14 2014-10-16 Show GitHub Exploit DB Packet Storm
290542 - juniper
mariadb
oracle
suse
junos_space
mariadb
solaris
mysql
linux_enterprise_server
linux_enterprise_software_development_kit
linux_enterprise_desktop
linux_enterprise_workstation_extension
Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier, and 5.6.20 and earlier, allows remote attackers to affect confidentiality via vectors related to C API SSL CERTIFICATE HANDLING. NVD-CWE-noinfo
CVE-2014-6559 2024-11-21 11:14 2014-10-16 Show GitHub Exploit DB Packet Storm
290543 - oracle jrockit
jdk
jre
Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20; Java SE Embedded 7u60; and JRockit R27.8.3 and JRockit R28.3.3 allows remote attackers to affect integrity via unknown vector… NVD-CWE-noinfo
CVE-2014-6558 2024-11-21 11:14 2014-10-16 Show GitHub Exploit DB Packet Storm
290544 - oracle enterprise_manager_grid_control Unspecified vulnerability in the Application Performance Management component in Oracle Enterprise Manager Grid Control before 12.1.0.6.2 allows remote authenticated users to affect confidentiality a… NVD-CWE-noinfo
CVE-2014-6557 2024-11-21 11:14 2014-10-16 Show GitHub Exploit DB Packet Storm
290545 - mariadb
oracle
suse
mariadb
mysql
linux_enterprise_workstation_extension
linux_enterprise_server
linux_enterprise_software_development_kit
linux_enterprise_desktop
Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier and 5.6.20 and earlier allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related… NVD-CWE-noinfo
CVE-2014-6555 2024-11-21 11:14 2014-10-16 Show GitHub Exploit DB Packet Storm
290546 - oracle fusion_middleware Unspecified vulnerability in the Oracle Access Manager component in Oracle Fusion Middleware 11.1.2.1 and 11.1.2.2 allows remote authenticated users to affect confidentiality and integrity via unknow… NVD-CWE-noinfo
CVE-2014-6554 2024-11-21 11:14 2014-10-16 Show GitHub Exploit DB Packet Storm
290547 - oracle fusion_middleware Unspecified vulnerability in the Oracle Access Manager component in Oracle Fusion Middleware 11.1.1.5 and 11.1.1.7 allows remote attackers to affect confidentiality and integrity via unknown vectors … NVD-CWE-noinfo
CVE-2014-6553 2024-11-21 11:14 2014-10-16 Show GitHub Exploit DB Packet Storm
290548 - oracle fusion_middleware Unspecified vulnerability in the Oracle Access Manager component in Oracle Fusion Middleware 11.1.1.5, 11.1.1.7, 11.1.2.1, and 11.1.2.2 allows remote attackers to affect integrity via unknown vectors… NVD-CWE-noinfo
CVE-2014-6552 2024-11-21 11:14 2014-10-16 Show GitHub Exploit DB Packet Storm
290549 - oracle
mariadb
suse
solaris
mysql
mariadb
linux_enterprise_server
linux_enterprise_software_development_kit
linux_enterprise_desktop
linux_enterprise_workstation_extension
Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier and 5.6.19 and earlier allows local users to affect confidentiality via vectors related to CLIENT:MYSQLADMIN. NVD-CWE-noinfo
CVE-2014-6551 2024-11-21 11:14 2014-10-16 Show GitHub Exploit DB Packet Storm
290550 - oracle e-business_suite Unspecified vulnerability in the Oracle Applications Object Library component in Oracle E-Business Suite 11.5.10.2 allows remote attackers to affect integrity via unknown vectors related to iHelp. NVD-CWE-noinfo
CVE-2014-6550 2024-11-21 11:14 2014-10-16 Show GitHub Exploit DB Packet Storm