Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 15, 2026, 12:08 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
220641	4.3	警告	Horde	-	Horde Groupware Webmail Edition で使用される Horde Internet Mail Program におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2014-4946	2014-07-15 18:28	2014-07-7	Show	GitHub Exploit DB Packet Storm

220642	4.3	警告	Horde	-	Horde Groupware Webmail Edition で使用される Horde Internet Mail Program におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2014-4945	2014-07-15 18:27	2014-07-7	Show	GitHub Exploit DB Packet Storm

220643	6.5	警告	BannerSky	-	WordPress 用 BSK PDF Manager プラグインの inc/bsk-pdf-dashboard.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2014-4944	2014-07-15 18:26	2014-07-9	Show	GitHub Exploit DB Packet Storm

220644	5	警告	Level Four Development	-	WordPress 用 EasyCart プラグインにおける設定情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2014-4942	2014-07-15 18:24	2014-05-28	Show	GitHub Exploit DB Packet Storm

220645	5	警告	Cross-RSS plugin project	-	WordPress 用 Cross-RSS プラグインにおける絶対パストラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2014-4941	2014-07-15 18:23	2014-05-29	Show	GitHub Exploit DB Packet Storm

220646	5	警告	tera-charts project	-	WordPress 用 Tera Charts プラグインにおけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2014-4940	2014-07-15 18:22	2014-05-28	Show	GitHub Exploit DB Packet Storm

220647	6.5	警告	Darell Sun	-	WordPress 用 ENL Newsletter プラグインにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2014-4939	2014-07-15 18:21	2014-05-28	Show	GitHub Exploit DB Packet Storm

220648	7.5	危険	Darell Sun	-	WordPress 用 WP Rss Poster プラグインにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2014-4938	2014-07-15 18:19	2014-05-28	Show	GitHub Exploit DB Packet Storm

220649	5	警告	BookX plugin project	-	WordPress 用 includes/bookx_export.php の BookX プラグインにおけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2014-4937	2014-07-15 18:18	2014-05-28	Show	GitHub Exploit DB Packet Storm

220650	4.9	警告	アルバネットワークス株式会社	-	Aruba Networks ClearPass の Policy Manager における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2014-4013	2014-07-15 15:34	2014-07-3	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 15, 2026, 4:10 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
295981	-	cisco	prime_central_for_hosted_collaboration_solution_assurance	The web framework in Cisco Prime Central for Hosted Collaboration Solution (HCS) Assurance before 9.1.1 does not properly determine the existence of an authenticated session, which allows remote atta…	CWE-287 Improper Authentication	CVE-2013-3473	2024-11-21 10:53	2013-09-21	Show	GitHub Exploit DB Packet Storm

295982	-	dahuasecurity	dvr2104h dvr0404hd-a dvr1604hd-l dvr2104hc dvr5216a dvr5104he dvr3204lf-al dvr5204a dvr3204hf-s dvr0404hd-s dvr0804 dvr5104h dvr5804 dvr2116h dvr2404lf-al	Dahua DVR appliances use a password-hash algorithm with a short hash length, which makes it easier for context-dependent attackers to discover cleartext passwords via a brute-force attack.	CWE-255 Credentials Management	CVE-2013-3615	2024-11-21 10:53	2013-09-17	Show	GitHub Exploit DB Packet Storm

295983	-	dahuasecurity	dvr2104h dvr0404hd-a dvr1604hd-l dvr2104hc dvr5216a dvr5104he dvr3204lf-al dvr5204a dvr3204hf-s dvr0404hd-s dvr0804 dvr5104h dvr5804 dvr2116h dvr2404lf-al	Dahua DVR appliances do not properly restrict UPnP requests, which makes it easier for remote attackers to obtain access via vectors involving a replay attack against the TELNET port.	CWE-287 Improper Authentication	CVE-2013-3613	2024-11-21 10:53	2013-09-17	Show	GitHub Exploit DB Packet Storm

295984	-	dahuasecurity	dvr2104h dvr0404hd-a dvr1604hd-l dvr2104hc dvr5216a dvr5104he dvr3204lf-al dvr5204a dvr3204hf-s dvr0404hd-s dvr0804 dvr5104h dvr5804 dvr2116h dvr2404lf-al	Dahua DVR appliances have a small value for the maximum password length, which makes it easier for remote attackers to obtain access via a brute-force attack.	CWE-264 Permissions, Privileges, and Access Controls	CVE-2013-3614	2024-11-21 10:53	2013-09-17	Show	GitHub Exploit DB Packet Storm

295985	-	dahuasecurity	dvr2104h dvr0404hd-a dvr1604hd-l dvr2104hc dvr5216a dvr5104he dvr3204lf-al dvr5204a dvr3204hf-s dvr0404hd-s dvr0804 dvr5104h dvr5804 dvr2116h dvr2404lf-al	Dahua DVR appliances have a hardcoded password for (1) the root account and (2) an unspecified "backdoor" account, which makes it easier for remote attackers to obtain administrative access via autho…	CWE-255 Credentials Management	CVE-2013-3612	2024-11-21 10:53	2013-09-17	Show	GitHub Exploit DB Packet Storm

295986	-	cisco	digital_media_manager	Open redirect vulnerability in the login page in Cisco Digital Media Manager (DMM) allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vector…	CWE-20 Improper Input Validation	CVE-2013-3446	2024-11-21 10:53	2013-09-12	Show	GitHub Exploit DB Packet Storm

295987	-	adobe	flash_player air air_sdk	Adobe Flash Player before 11.7.700.242 and 11.8.x before 11.8.800.168 on Windows and Mac OS X, before 11.2.202.310 on Linux, before 11.1.111.73 on Android 2.x and 3.x, and before 11.1.115.81 on Andro…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2013-3363	2024-11-21 10:53	2013-09-12	Show	GitHub Exploit DB Packet Storm

295988	-	adobe	flash_player air air_sdk	Adobe Flash Player before 11.7.700.242 and 11.8.x before 11.8.800.168 on Windows and Mac OS X, before 11.2.202.310 on Linux, before 11.1.111.73 on Android 2.x and 3.x, and before 11.1.115.81 on Andro…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2013-3362	2024-11-21 10:53	2013-09-12	Show	GitHub Exploit DB Packet Storm

295989	-	adobe	flash_player air air_sdk	Adobe Flash Player before 11.7.700.242 and 11.8.x before 11.8.800.168 on Windows and Mac OS X, before 11.2.202.310 on Linux, before 11.1.111.73 on Android 2.x and 3.x, and before 11.1.115.81 on Andro…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2013-3361	2024-11-21 10:53	2013-09-12	Show	GitHub Exploit DB Packet Storm

295990	-	adobe	shockwave_player	Adobe Shockwave Player before 12.0.4.144 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-3…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2013-3360	2024-11-21 10:53	2013-09-12	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed