Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 8, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
219501 3.5 注意 オラクル - Oracle Siebel CRM の Siebel Core - Server OM Frwks における Object Manager に関する脆弱性 CWE-noinfo
情報不足 		CVE-2014-4250 2014-07-18 11:03 2014-07-15 Show GitHub Exploit DB Packet Storm
219502 4.3 警告 オラクル - Oracle Siebel CRM の Siebel Travel & Transportation における Diary に関する脆弱性 CWE-noinfo
情報不足 		CVE-2014-4231 2014-07-18 11:03 2014-07-15 Show GitHub Exploit DB Packet Storm
219503 4.3 警告 オラクル - Oracle Siebel CRM の Siebel UI Framework における Open_UI に関する脆弱性 CWE-noinfo
情報不足 		CVE-2014-4230 2014-07-18 11:02 2014-07-15 Show GitHub Exploit DB Packet Storm
219504 4.3 警告 オラクル - Oracle Siebel CRM の Siebel UI Framework における Portal Framework に関する脆弱性 CWE-noinfo
情報不足 		CVE-2014-4205 2014-07-18 11:02 2014-07-15 Show GitHub Exploit DB Packet Storm
219505 4.3 警告 オラクル - Oracle Siebel CRM の Siebel UI Framework における Portal Framework に関する脆弱性 CWE-noinfo
情報不足 		CVE-2014-2491 2014-07-18 11:01 2014-07-15 Show GitHub Exploit DB Packet Storm
219506 1.4 注意 オラクル - Oracle Siebel CRM の Siebel Core - EAI における Integration Business Services に関する脆弱性 CWE-noinfo
情報不足 		CVE-2014-2485 2014-07-18 11:01 2014-07-15 Show GitHub Exploit DB Packet Storm
219507 4.3 警告 shopizer-ecommerce - Shopizer におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-4965 2014-07-17 17:41 2014-07-10 Show GitHub Exploit DB Packet Storm
219508 6.8 警告 shopizer-ecommerce - Shopizer におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2014-4964 2014-07-17 17:40 2014-07-10 Show GitHub Exploit DB Packet Storm
219509 6.8 警告 shopizer-ecommerce - Shopizer における任意のユーザのアカウント設定を変更される脆弱性 CWE-noinfo
情報不足 		CVE-2014-4963 2014-07-17 17:39 2014-07-10 Show GitHub Exploit DB Packet Storm
219510 6.4 警告 shopizer-ecommerce - Shopizer におけるショッピングカートの総コストを減らされる脆弱性 CWE-189
数値処理の問題 		CVE-2014-4962 2014-07-17 17:39 2014-07-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 8, 2026, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
291031 - wordpress wordpress The wp_validate_auth_cookie function in wp-includes/pluggable.php in WordPress before 3.7.2 and 3.8.x before 3.8.2 does not properly determine the validity of authentication cookies, which makes it e… CWE-287
Improper Authentication 		CVE-2014-0166 2024-11-21 11:01 2014-04-10 Show GitHub Exploit DB Packet Storm
291032 - wordpress wordpress WordPress before 3.7.2 and 3.8.x before 3.8.2 allows remote authenticated users to publish posts by leveraging the Contributor role, related to wp-admin/includes/post.php and wp-admin/includes/class-… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2014-0165 2024-11-21 11:01 2014-04-10 Show GitHub Exploit DB Packet Storm
291033 - microsoft windows_xp
windows_server_2008
windows_server_2012
windows_rt
windows_8.1
windows_7
windows_rt_8.1
windows_vista
windows_8
windows_server_2003 		Untrusted search path vulnerability in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows… CWE-426
 Untrusted Search Path 		CVE-2014-0315 2024-11-21 11:01 2014-04-9 Show GitHub Exploit DB Packet Storm
291034 - huawei echo_life_hg8247_firmware
echo_life 		Cross-site scripting (XSS) vulnerability in the web interface on Huawei Echo Life HG8247 routers with software before V100R006C00SPC127 allows remote attackers to inject arbitrary web script or HTML … CWE-79
Cross-site Scripting 		CVE-2014-0337 2024-11-21 11:01 2014-04-5 Show GitHub Exploit DB Packet Storm
291035 - redhat jboss_enterprise_application_platform Red Hat JBoss Enterprise Application Platform (JBEAP) 6.2.2, when using a Java Security Manager (JSM), does not properly apply permissions defined by a policy file, which causes applications to be gr… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2014-0093 2024-11-21 11:01 2014-04-4 Show GitHub Exploit DB Packet Storm
291036 - oracle
apache 		retail_applications
tomcat
commons_fileupload 		MultipartStream.java in Apache Commons FileUpload before 1.3.1, as used in Apache Tomcat, JBoss Web, and other products, allows remote attackers to cause a denial of service (infinite loop and CPU co… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2014-0050 2024-11-21 11:01 2014-04-1 Show GitHub Exploit DB Packet Storm
291037 - redhat richfaces
jboss_web_framework_kit 		The doFilter function in webapp/PushHandlerFilter.java in JBoss RichFaces 4.3.4, 4.3.5, and 5.x allows remote attackers to cause a denial of service (memory consumption and out-of-memory error) via a… CWE-20
 Improper Input Validation  		CVE-2014-0086 2024-11-21 11:01 2014-03-31 Show GitHub Exploit DB Packet Storm
291038 - apple
postgresql 		mac_os_x
mac_os_x_server
postgresql 		The "make check" command for the test suites in PostgreSQL 9.3.3 and earlier does not properly invoke initdb to specify the authentication requirements for a database cluster to be used for the tests… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2014-0067 2024-11-21 11:01 2014-03-31 Show GitHub Exploit DB Packet Storm
291039 - postgresql postgresql The chkpass extension in PostgreSQL before 8.4.20, 9.0.x before 9.0.16, 9.1.x before 9.1.12, 9.2.x before 9.2.7, and 9.3.x before 9.3.3 does not properly check the return value of the crypt library f… CWE-20
 Improper Input Validation  		CVE-2014-0066 2024-11-21 11:01 2014-03-31 Show GitHub Exploit DB Packet Storm
291040 - postgresql postgresql Multiple buffer overflows in PostgreSQL before 8.4.20, 9.0.x before 9.0.16, 9.1.x before 9.1.12, 9.2.x before 9.2.7, and 9.3.x before 9.3.3 allow remote authenticated users to have unspecified impact… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2014-0065 2024-11-21 11:01 2014-03-31 Show GitHub Exploit DB Packet Storm