Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 19, 2026, 12:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
220681	7.5	危険	Ariel Sanders	-	WordPress 用 Lead Octopus プラグインの lib/optin/optin_page.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2014-5189	2014-08-8 18:54	2014-07-28	Show	GitHub Exploit DB Packet Storm

220682	5	警告	Tom M8te project	-	WordPress 用 Tom M8te プラグインにおけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2014-5187	2014-08-8 18:48	2014-05-28	Show	GitHub Exploit DB Packet Storm

220683	6.5	警告	Vinoth Kumar	-	WordPress 用 All Video Gallery プラグインにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2014-5186	2014-08-8 18:46	2014-05-28	Show	GitHub Exploit DB Packet Storm

220684	6	警告	Quartz plugin project	-	WordPress 用 Quartz プラグインにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2014-5185	2014-08-8 18:45	2014-05-28	Show	GitHub Exploit DB Packet Storm

220685	6.5	警告	Brad Hawkins	-	WordPress 用 stripShow プラグインの stripshow-storylines ページにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2014-5184	2014-08-8 18:44	2014-05-28	Show	GitHub Exploit DB Packet Storm

220686	6.5	警告	Jesse Cortez	-	WordPress 用 Simple Retail Menus プラグインの includes/mode-edit.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2014-5183	2014-08-8 18:43	2014-02-19	Show	GitHub Exploit DB Packet Storm

220687	6	警告	ostenta	-	WordPress 用 yawpp プラグインにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2014-5182	2014-08-8 18:42	2014-01-7	Show	GitHub Exploit DB Packet Storm

220688	5	警告	Last.fm Rotation plugin project	-	WordPress 用 Last.fm Rotation プラグインの lastfm-proxy.php におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2014-5181	2014-08-8 18:40	2014-05-28	Show	GitHub Exploit DB Packet Storm

220689	6.5	警告	HDW Player	-	WordPress 用 HDW Player プラグインのビデオページにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2014-5180	2014-08-8 18:39	2014-05-28	Show	GitHub Exploit DB Packet Storm

220690	7.5	危険	Vinoth Kumar	-	WordPress 用 All Video Gallery プラグインにおける脆弱性	CWE-noinfo 情報不足	CVE-2012-6653	2014-08-8 18:36	2012-11-7	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 19, 2026, 4:01 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
292791	-	ecava	integraxor	Ecava IntegraXor before 4.1.4393 allows remote attackers to read cleartext credentials for administrative accounts via SELECT statements that leverage the guest role.	CWE-310 Cryptographic Issues	CVE-2014-0786	2024-11-21 11:02	2014-05-1	Show	GitHub Exploit DB Packet Storm

292792	-	debian canonical	dpkg ubuntu_linux	Directory traversal vulnerability in the unpacking functionality in dpkg before 1.15.9, 1.16.x before 1.16.13, and 1.17.x before 1.17.8 allows remote attackers to write arbitrary files via a crafted …	CWE-22 Path Traversal	CVE-2014-0471	2024-11-21 11:02	2014-04-30	Show	GitHub Exploit DB Packet Storm

292793	-	super_project	super	super.c in Super 3.30.0 does not check the return value of the setuid function when the -F flag is set, which allows local users to gain privileges via unspecified vectors, aka an RLIMIT_NPROC attack.	CWE-264 Permissions, Privileges, and Access Controls	CVE-2014-0470	2024-11-21 11:02	2014-04-30	Show	GitHub Exploit DB Packet Storm

292794	-	adobe	flash_player	Buffer overflow in Adobe Flash Player before 11.7.700.279 and 11.8.x through 13.0.x before 13.0.0.206 on Windows and OS X, and before 11.2.202.356 on Linux, allows remote attackers to execute arbitra…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2014-0515	2024-11-21 11:02	2014-04-29	Show	GitHub Exploit DB Packet Storm

292795	-	softmotion3d festo 3s-software	softmotion cecx-x-m1_modular_controller codesys_runtime_system cecx-x-c1_modular_master_controller	The Festo CECX-X-C1 Modular Master Controller with CoDeSys and CECX-X-M1 Modular Controller with CoDeSys and SoftMotion do not require authentication for connections to certain TCP ports, which allow…	CWE-287 Improper Authentication	CVE-2014-0769	2024-11-21 11:02	2014-04-25	Show	GitHub Exploit DB Packet Storm

292796	-	3s-software festo softmotion3d	codesys_runtime_system cecx-x-c1_modular_master_controller softmotion cecx-x-m1_modular_controller	The Festo CECX-X-C1 Modular Master Controller with CoDeSys and CECX-X-M1 Modular Controller with CoDeSys and SoftMotion provide an undocumented access method involving the FTP protocol, which allows …	CWE-287 Improper Authentication	CVE-2014-0760	2024-11-21 11:02	2014-04-25	Show	GitHub Exploit DB Packet Storm

292797	-	ibm	lotus_domino lotus_notes	IBM Notes and Domino 8.5.x before 8.5.3 FP6 IF3 and 9.x before 9.0.1 FP1 on 32-bit Linux platforms use incorrect gcc options, which makes it easier for remote attackers to execute arbitrary code by l…	CWE-200 Information Exposure	CVE-2014-0892	2024-11-21 11:02	2014-04-24	Show	GitHub Exploit DB Packet Storm

292798	-	canonical djangoproject	ubuntu_linux django	The (1) FilePathField, (2) GenericIPAddressField, and (3) IPAddressField model field classes in Django before 1.4.11, 1.5.x before 1.5.6, 1.6.x before 1.6.3, and 1.7.x before 1.7 beta 2 do not proper…	CWE-399 Resource Management Errors	CVE-2014-0474	2024-11-21 11:02	2014-04-24	Show	GitHub Exploit DB Packet Storm

292799	-	djangoproject canonical	django ubuntu_linux	The caching framework in Django before 1.4.11, 1.5.x before 1.5.6, 1.6.x before 1.6.3, and 1.7.x before 1.7 beta 2 reuses a cached CSRF token for all anonymous users, which allows remote attackers to…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2014-0473	2024-11-21 11:02	2014-04-24	Show	GitHub Exploit DB Packet Storm

292800	-	djangoproject canonical	django ubuntu_linux	The django.core.urlresolvers.reverse function in Django before 1.4.11, 1.5.x before 1.5.6, 1.6.x before 1.6.3, and 1.7.x before 1.7 beta 2 allows remote attackers to import and execute arbitrary Pyth…	CWE-94 Code Injection	CVE-2014-0472	2024-11-21 11:02	2014-04-24	Show	GitHub Exploit DB Packet Storm