Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 28, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
218671 5 警告 アップル - Apple Safari などで使用される WebKit における postMessage の origin を偽装される脆弱性 CWE-20
不適切な入力確認
CVE-2014-1346 2014-07-9 15:55 2014-05-21 Show GitHub Exploit DB Packet Storm
218672 10 危険 AVG Technologies - AVG Safeguard および AVG Secure Search の ActiveX コントロールに任意のコードを実行される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-2956 2014-07-9 15:26 2014-07-7 Show GitHub Exploit DB Packet Storm
218673 5 警告 Caldera - Caldera の dirmng/index.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2014-2933 2014-07-9 15:01 2014-05-7 Show GitHub Exploit DB Packet Storm
218674 4.3 警告 OCS Inventory Team - OCS Inventory NG の OCS Reports Web インターフェースにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-4722 2014-07-9 14:53 2014-07-1 Show GitHub Exploit DB Packet Storm
218675 6.8 警告 Foxit Software Inc - Foxit PDF SDK DLL の FPDFBookmark_GetTitle メソッドにおけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2014-4646 2014-07-9 14:42 2014-05-9 Show GitHub Exploit DB Packet Storm
218676 8.2 危険 DELL EMC (旧 EMC Corporation) - EMC Documentum Content Server におけるスーパーユーザ権限で RPC コマンドを保存実行される脆弱性 CWE-20
不適切な入力確認
CVE-2014-2514 2014-07-9 14:08 2014-07-7 Show GitHub Exploit DB Packet Storm
218677 8.2 危険 DELL EMC (旧 EMC Corporation) - EMC Documentum Content Server におけるスーパーユーザ権限で任意のコードを実行される脆弱性 CWE-20
不適切な入力確認
CVE-2014-2513 2014-07-9 14:07 2014-07-7 Show GitHub Exploit DB Packet Storm
218678 6.8 警告 DELL EMC (旧 EMC Corporation) - 複数の EMC 製品で使用される EMC Documentum Foundation Services の JAXB XML パーサにおける任意のファイルを読まれる脆弱性 CWE-200
情報漏えい
CVE-2014-2510 2014-07-9 14:07 2014-07-7 Show GitHub Exploit DB Packet Storm
218679 4.3 警告 D-Link Systems, Inc. - D-Link DIR-645 ルータのファームウェアにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-7389 2014-07-9 13:40 2013-12-19 Show GitHub Exploit DB Packet Storm
218680 4.3 警告 Custom Banners plugin project - WordPress 用 Custom Banners プラグインにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-4724 2014-07-9 12:12 2014-06-29 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 29, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1411 8.8 HIGH
Network
- - Incorrect Privilege Assignment vulnerability in StoreApps Smart Manager allows Privilege Escalation. This issue affects Smart Manager: from n/a through 8.85.0. New CWE-266
 Incorrect Privilege Assignment
CVE-2026-45216 2026-05-27 04:31 2026-05-26 Show GitHub Exploit DB Packet Storm
1412 6.5 MEDIUM
Network
- - Authentication Bypass Using an Alternate Path or Channel vulnerability in ThemeHigh Stripe Payment Gateway for WooCommerce allows Password Recovery Exploitation. This issue affects Stripe Payment Ga… New CWE-288
Authentication Bypass Using an Alternate Path or Channel
CVE-2026-45217 2026-05-27 04:31 2026-05-26 Show GitHub Exploit DB Packet Storm
1413 6.5 MEDIUM
Network
- - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Melapress WP Activity Log allows DOM-Based XSS. This issue affects WP Activity Log: from n/a thr… New CWE-79
Cross-site Scripting
CVE-2026-45435 2026-05-27 04:31 2026-05-26 Show GitHub Exploit DB Packet Storm
1414 7.5 HIGH
Network
- - Missing Authorization vulnerability in WebToffee Smart Coupons for WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Smart Coupons for WooCommer… New CWE-862
 Missing Authorization
CVE-2026-45438 2026-05-27 04:31 2026-05-26 Show GitHub Exploit DB Packet Storm
1415 8.5 HIGH
Network
- - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Unlimited Elements For Elementor allows Blind SQL Injection. This issue affects Unlimited Elemen… New CWE-89
SQL Injection
CVE-2026-48837 2026-05-27 04:31 2026-05-26 Show GitHub Exploit DB Packet Storm
1416 6.3 MEDIUM
Network
- - A vulnerability was found in SourceCodester Indian Invoicing System 1.0. This issue affects some unknown processing of the file /Invoicing/IGST_Invoice.php of the component Invoice Generation Handler… New CWE-74
CWE-89
Injection
SQL Injection
CVE-2026-9411 2026-05-27 04:26 2026-05-25 Show GitHub Exploit DB Packet Storm
1417 6.3 MEDIUM
Network
- - A vulnerability was determined in SourceCodester Indian Invoicing System 1.0. Impacted is an unknown function of the component Backend Endpoint. Executing a manipulation can lead to improper access c… New CWE-266
CWE-284
 Incorrect Privilege Assignment
Improper Access Control
CVE-2026-9412 2026-05-27 04:26 2026-05-25 Show GitHub Exploit DB Packet Storm
1418 4.3 MEDIUM
Network
- - A vulnerability was identified in SourceCodester Indian Invoicing System 1.0. The affected element is an unknown function of the file /Invoicing/category.php. The manipulation of the argument msg lea… New CWE-79
CWE-94
Cross-site Scripting
Code Injection
CVE-2026-9413 2026-05-27 04:26 2026-05-25 Show GitHub Exploit DB Packet Storm
1419 3.5 LOW
Network
- - A security flaw has been discovered in SourceCodester Indian Invoicing System up to 0.x/1.0. The impacted element is an unknown function of the file /Invoicing/add_order.php of the component Invoice … New CWE-79
CWE-94
Cross-site Scripting
Code Injection
CVE-2026-9414 2026-05-27 04:26 2026-05-25 Show GitHub Exploit DB Packet Storm
1420 4.7 MEDIUM
Network
- - A vulnerability was detected in SourceCodester Simple POS and Inventory System 1.0. This issue affects the function delete of the file /admin/deleteproduct.php of the component GET Parameter Handler.… New CWE-74
CWE-89
Injection
SQL Injection
CVE-2026-9444 2026-05-27 04:26 2026-05-25 Show GitHub Exploit DB Packet Storm