Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 11, 2026, 12:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
219281 6.5 警告 XRMS CRM Project - XRMS CRM の plugins/useradmin/fingeruser.php における任意のコードを実行される脆弱性 CWE-89
SQLインジェクション 		CVE-2014-5521 2014-09-4 13:56 2014-08-27 Show GitHub Exploit DB Packet Storm
219282 5 警告 Innovative Interfaces Inc. - Innovative Interfaces Sierra Library Services Platform におけるアカウント名を列挙される脆弱性 CWE-200
情報漏えい 		CVE-2014-5137 2014-09-4 13:54 2014-08-26 Show GitHub Exploit DB Packet Storm
219283 4.3 警告 Innovative Interfaces Inc. - Innovative Interfaces Sierra Library Services Platform におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-5136 2014-09-4 13:54 2014-08-26 Show GitHub Exploit DB Packet Storm
219284 7.5 危険 S3QL project - S3QL における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2014-0485 2014-09-4 13:53 2014-08-19 Show GitHub Exploit DB Packet Storm
219285 4.3 警告 La Banque Postale - La Banque Postale の Android 用アプリケーションにおけるキャッシュされた重要な銀行情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2014-5076 2014-09-4 12:16 2014-07-28 Show GitHub Exploit DB Packet Storm
219286 4.3 警告 HL7 - HL7 C-CDA の CDA.xsl におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-5452 2014-09-3 18:25 2013-04-14 Show GitHub Exploit DB Packet Storm
219287 4.3 警告 HL7 - HL7 C-CDA の CDA.xsl における重要な URL を取得される脆弱性 CWE-200
情報漏えい 		CVE-2014-3862 2014-09-3 18:25 2014-04-14 Show GitHub Exploit DB Packet Storm
219288 4.3 警告 HL7 - HL7 C-CDA の CDA.xsl におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-3861 2014-09-3 18:24 2014-04-14 Show GitHub Exploit DB Packet Storm
219289 4 警告 Amazon.com, Inc. - Android 版アプリ Kindle における SSL サーバ証明書の検証不備の脆弱性 CWE-Other
その他 		CVE-2014-3908 2014-09-3 18:07 2014-08-29 Show GitHub Exploit DB Packet Storm
219290 3.3 注意 Android for MSM - Code Aurora Forum リリースの Android 用の Qualcomm Innovation Center (QuIC) init スクリプトにおけるファイルのメタデータを変更される脆弱性 CWE-59
リンク解釈の問題 		CVE-2013-6124 2014-09-3 17:17 2013-10-15 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 11, 2026, 5:13 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
290641 - ffmpeg ffmpeg libavcodec/wmalosslessdec.c in FFmpeg before 2.1.4 uses an incorrect data-structure size for certain coefficients, which allows remote attackers to cause a denial of service (memory corruption) or po… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2014-2098 2024-11-21 11:05 2014-03-2 Show GitHub Exploit DB Packet Storm
290642 - ffmpeg ffmpeg The tak_decode_frame function in libavcodec/takdec.c in FFmpeg before 2.1.4 does not properly validate a certain bits-per-sample value, which allows remote attackers to cause a denial of service (out… CWE-20
 Improper Input Validation  		CVE-2014-2097 2024-11-21 11:05 2014-03-2 Show GitHub Exploit DB Packet Storm
290643 - ffmpeg ffmpeg The mpegts_write_pmt function in the MPEG2 transport stream (aka DVB) muxer (libavformat/mpegtsenc.c) in FFmpeg, possibly 2.1 and earlier, allows remote attackers to have unspecified impact and vecto… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2014-2263 2024-11-21 11:05 2014-03-1 Show GitHub Exploit DB Packet Storm
290644 - sas base_sas Buffer overflow in the client application in Base SAS 9.2 TS2M3, SAS 9.3 TS1M1 and TS1M2, and SAS 9.4 TS1M0 allows user-assisted remote attackers to execute arbitrary code via a crafted SAS program. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2014-2262 2024-11-21 11:05 2014-03-1 Show GitHub Exploit DB Packet Storm
290645 - python
apple 		python
mac_os_x 		Buffer overflow in the socket.recvfrom_into function in Modules/socketmodule.c in Python 2.5 before 2.7.7, 3.x before 3.3.4, and 3.4.x before 3.4rc1 allows remote attackers to execute arbitrary code … CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2014-1912 2024-11-21 11:05 2014-03-1 Show GitHub Exploit DB Packet Storm
290646 - modx modx_revolution Cross-site scripting (XSS) vulnerability in manager/templates/default/header.tpl in ModX Revolution before 2.2.11 allows remote attackers to inject arbitrary web script or HTML via the "a" parameter. CWE-79
Cross-site Scripting 		CVE-2014-2080 2024-11-21 11:05 2014-03-1 Show GitHub Exploit DB Packet Storm
290647 - jenkins jenkins Cross-site scripting (XSS) vulnerability in java/hudson/model/Cause.java in Jenkins before 1.551 and LTS before 1.532.2 allows remote authenticated users to inject arbitrary web script or HTML via a … CWE-79
Cross-site Scripting 		CVE-2014-2067 2024-11-21 11:05 2014-03-1 Show GitHub Exploit DB Packet Storm
290648 - jenkins jenkins Directory traversal vulnerability in the CLI job creation (hudson/cli/CreateJobCommand.java) in Jenkins before 1.551 and LTS before 1.532.2 allows remote authenticated users to overwrite arbitrary fi… CWE-22
Path Traversal 		CVE-2014-2059 2024-11-21 11:05 2014-03-1 Show GitHub Exploit DB Packet Storm
290649 - buddypress buddypress Cross-site scripting (XSS) vulnerability in the BuddyPress plugin before 1.9.2 for WordPress allows remote authenticated users to inject arbitrary web script or HTML via the name field to groups/crea… CWE-79
Cross-site Scripting 		CVE-2014-1888 2024-11-21 11:05 2014-03-1 Show GitHub Exploit DB Packet Storm
290650 - icinga
nagios 		icinga
nagios 		Stack-based buffer overflow in the cmd_submitf function in cgi/cmd.c in Nagios Core, possibly 4.0.3rc1 and earlier, and Icinga before 1.8.6, 1.9 before 1.9.5, and 1.10 before 1.10.3 allows remote att… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2014-1878 2024-11-21 11:05 2014-03-1 Show GitHub Exploit DB Packet Storm