Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":July 1, 2026, 4:01 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
222881 7.8 危険 ジュニパーネットワークス - Juniper Networks SRX シリーズデバイス上で稼働する Junos におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2014-3817 2014-07-15 19:28 2014-07-9 Show GitHub Exploit DB Packet Storm
222882 9 危険 ジュニパーネットワークス - Juniper Junos における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-3816 2014-07-15 19:27 2014-07-9 Show GitHub Exploit DB Packet Storm
222883 7.8 危険 ジュニパーネットワークス - Juniper Networks SRX シリーズデバイス上で稼働する Junos におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2014-3815 2014-07-15 19:27 2014-07-9 Show GitHub Exploit DB Packet Storm
222884 4.3 警告 Horde - Horde Groupware Webmail Edition で使用される Horde Internet Mail Program におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-4946 2014-07-15 18:28 2014-07-7 Show GitHub Exploit DB Packet Storm
222885 4.3 警告 Horde - Horde Groupware Webmail Edition で使用される Horde Internet Mail Program におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-4945 2014-07-15 18:27 2014-07-7 Show GitHub Exploit DB Packet Storm
222886 6.5 警告 BannerSky - WordPress 用 BSK PDF Manager プラグインの inc/bsk-pdf-dashboard.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2014-4944 2014-07-15 18:26 2014-07-9 Show GitHub Exploit DB Packet Storm
222887 5 警告 Level Four Development - WordPress 用 EasyCart プラグインにおける設定情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2014-4942 2014-07-15 18:24 2014-05-28 Show GitHub Exploit DB Packet Storm
222888 5 警告 Cross-RSS plugin project - WordPress 用 Cross-RSS プラグインにおける絶対パストラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2014-4941 2014-07-15 18:23 2014-05-29 Show GitHub Exploit DB Packet Storm
222889 5 警告 tera-charts project - WordPress 用 Tera Charts プラグインにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2014-4940 2014-07-15 18:22 2014-05-28 Show GitHub Exploit DB Packet Storm
222890 6.5 警告 Darell Sun - WordPress 用 ENL Newsletter プラグインにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2014-4939 2014-07-15 18:21 2014-05-28 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:July 1, 2026, 4:27 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2211 7.5 HIGH
Network
- - An issue in the sqlo_try_in_loop component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements. CWE-89
SQL Injection
CVE-2025-61024 2026-06-24 04:26 2026-06-24 Show GitHub Exploit DB Packet Storm
2212 7.5 HIGH
Network
- - An issue in the sqlo_untry component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements. CWE-89
SQL Injection
CVE-2025-61029 2026-06-24 04:26 2026-06-24 Show GitHub Exploit DB Packet Storm
2213 5.3 MEDIUM
Network
apache nifi Apache NiFi 0.0.1 through 2.9.0 support building qualified URLs from one of several HTTP request headers that provide an alternative to the standard Host header without validating the values provided… CWE-346
 Origin Validation Error
CVE-2026-54665 2026-06-24 04:19 2026-06-22 Show GitHub Exploit DB Packet Storm
2214 8.1 HIGH
Network
- - picklescan before 0.0.30 (affected versions 0.0.26 and earlier) fails to detect the ensurepip._run_pip built-in function when scanning pickle files, allowing attackers to execute arbitrary code. Mali… CWE-502
 Deserialization of Untrusted Data
CVE-2025-71344 2026-06-24 04:17 2026-06-23 Show GitHub Exploit DB Packet Storm
2215 5.4 MEDIUM
Network
- - NanoClaw before 2.1.0 contains a privilege escalation vulnerability in the channel-registration approval flow where handleChannelApprovalResponse fails to validate admin privileges over target agent … CWE-863
 Incorrect Authorization
CVE-2026-56694 2026-06-24 03:18 2026-06-24 Show GitHub Exploit DB Packet Storm
2216 6.5 MEDIUM
Network
- - NanoClaw before 2.1.17 contains a privilege escalation vulnerability in the handleApprovalsResponse function that fails to verify responder role authorization. Attackers with a valid questionId can a… CWE-862
 Missing Authorization
CVE-2026-56402 2026-06-24 03:18 2026-06-24 Show GitHub Exploit DB Packet Storm
2217 8.8 HIGH
Network
- - A missing validation of user input exists when saving delivery limitations in Revive Adserver 6.0.6 and earlier. A low‑privileged user could add an unexpected component parameter and inject malicious… CWE-94
Code Injection
CVE-2026-44959 2026-06-24 03:17 2026-06-24 Show GitHub Exploit DB Packet Storm
2218 5.4 MEDIUM
Network
- - An access control bypass allows an advertiser‑level user to activate or deactivate a banner in Revive Adserver 6.0.6 and earlier, even when such permissions were not granted. The banner-edit.php scri… CWE-284
Improper Access Control
CVE-2026-44958 2026-06-24 03:17 2026-06-24 Show GitHub Exploit DB Packet Storm
2219 4.3 MEDIUM
Network
- - A missing access control check when invoking various modify methods in the XML‑RPC API of Revive Adserver 6.0.6 and earlier. The API allowed entities to be reassigned to different parent entities, le… CWE-284
Improper Access Control
CVE-2026-44957 2026-06-24 03:17 2026-06-24 Show GitHub Exploit DB Packet Storm
2220 8.8 HIGH
Network
- - A missing validation of user input when saving delivery limitations in Revive Adserver 6.0.6 and earlier could allow a low‑privileged user to use the logical parameter to inject malicious PHP code in… CWE-94
Code Injection
CVE-2026-34916 2026-06-24 03:17 2026-06-24 Show GitHub Exploit DB Packet Storm