Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 28, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
223251 10 危険 アドビシステムズ - Windows および Mac OS X 上で稼働する Adobe Reader および Acrobat の API における任意のコードを実行される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2014-0525 2014-05-15 15:33 2014-05-13 Show GitHub Exploit DB Packet Storm
223252 10 危険 アドビシステムズ - Windows および Mac OS X 上で稼働する Adobe Reader および Acrobat における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2014-0524 2014-05-15 15:27 2014-05-13 Show GitHub Exploit DB Packet Storm
223253 10 危険 アドビシステムズ - Windows および Mac OS X 上で稼働する Adobe Reader および Acrobat における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2014-0523 2014-05-15 15:25 2014-05-13 Show GitHub Exploit DB Packet Storm
223254 10 危険 アドビシステムズ - Windows および Mac OS X 上で稼働する Adobe Reader および Acrobat における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2014-0522 2014-05-15 15:24 2014-05-13 Show GitHub Exploit DB Packet Storm
223255 4.3 警告 アドビシステムズ - Windows および Mac OS X 上で稼働する Adobe Reader および Acrobat における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2014-0521 2014-05-15 15:22 2014-05-13 Show GitHub Exploit DB Packet Storm
223256 10 危険 アドビシステムズ - Adobe Illustrator CS6 におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2014-0513 2014-05-15 15:02 2014-05-13 Show GitHub Exploit DB Packet Storm
223257 9.3 危険 マイクロソフト - Microsoft Internet Explorer 6 から 11 における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2014-0310 2014-05-15 14:30 2014-05-13 Show GitHub Exploit DB Packet Storm
223258 5 警告 マイクロソフト - Microsoft Windows Server 2008 および Windows Server 2012 におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2014-0256 2014-05-15 14:28 2014-05-13 Show GitHub Exploit DB Packet Storm
223259 5 警告 マイクロソフト - Microsoft Windows Server 2008 および Windows Server 2012 におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2014-0255 2014-05-15 14:28 2014-05-13 Show GitHub Exploit DB Packet Storm
223260 7.2 危険 マイクロソフト - 複数の Microsoft Windows 製品の ShellExecute API における権限昇格の脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2014-1807 2014-05-15 14:27 2014-05-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 29, 2026, 4:19 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
3041 6.5 MEDIUM
Network 		- - Missing Authorization vulnerability in StylemixThemes MasterStudy LMS Pro allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects MasterStudy LMS Pro: from n/a before 4.7… CWE-862
 Missing Authorization 		CVE-2025-64215 2026-06-15 23:16 2026-06-15 Show GitHub Exploit DB Packet Storm
3042 7.1 HIGH
Network 		- - WordPress Sliced Invoices 3.8.2 contains an authenticated SQL injection vulnerability that allows authenticated attackers to manipulate database queries by injecting SQL code through the 'post' param… CWE-89
SQL Injection 		CVE-2019-25746 2026-06-15 23:16 2026-06-15 Show GitHub Exploit DB Packet Storm
3043 7.5 HIGH
Network 		- - WordPress CherryFramework Themes 3.1.4 contains an information disclosure vulnerability that allows unauthenticated attackers to download sensitive backup files by accessing the download_backup.php e… CWE-306
Missing Authentication for Critical Function 		CVE-2018-25437 2026-06-15 23:16 2026-06-15 Show GitHub Exploit DB Packet Storm
3044 9.8 CRITICAL
Network 		- - WordPress Plugin Baggage Freight Shipping Australia 0.1.0 contains an unrestricted file upload vulnerability that allows unauthenticated attackers to upload arbitrary files by exploiting the upload-p… CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2018-25436 2026-06-15 23:16 2026-06-15 Show GitHub Exploit DB Packet Storm
3045 7.2 HIGH
Network 		- - WordPress appointment-booking-calendar 1.1.24 contains multiple privilege escalation vulnerabilities that allow unauthenticated attackers to modify calendar settings and inject persistent cross-site … CWE-79
Cross-site Scripting 		CVE-2016-20084 2026-06-15 23:16 2026-06-15 Show GitHub Exploit DB Packet Storm
3046 5.3 MEDIUM
Network 		- - WordPress More Fields Plugin 2.1 contains a cross-site request forgery vulnerability that allows attackers to perform unauthorized actions by disabling CSRF token validation. Attackers can craft mali… CWE-352
 Origin Validation Error 		CVE-2016-20083 2026-06-15 23:16 2026-06-15 Show GitHub Exploit DB Packet Storm
3047 6.2 MEDIUM
Local 		- - WordPress Plugin Abtest contains a local file inclusion vulnerability that allows unauthenticated attackers to include arbitrary files by manipulating the action parameter. Attackers can send GET req… CWE-98
 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') 		CVE-2016-20082 2026-06-15 23:16 2026-06-15 Show GitHub Exploit DB Packet Storm
3048 7.5 HIGH
Network 		- - WordPress Plugin HB Audio Gallery Lite 1.0.0 contains a path traversal vulnerability that allows unauthenticated attackers to download arbitrary files by manipulating the file_path parameter. Attacke… CWE-22
Path Traversal 		CVE-2016-20081 2026-06-15 23:16 2026-06-15 Show GitHub Exploit DB Packet Storm
3049 6.2 MEDIUM
Local 		- - WordPress Brandfolder plugin version 3.0 and earlier contains a local file inclusion vulnerability in callback.php that allows unauthenticated attackers to include arbitrary files by manipulating the… CWE-98
 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') 		CVE-2016-20080 2026-06-15 23:16 2026-06-15 Show GitHub Exploit DB Packet Storm
3050 6.2 MEDIUM
Local 		- - WordPress Dharma Booking 2.28.3 and earlier contains a local file inclusion vulnerability that allows unauthenticated attackers to include arbitrary files by manipulating the gateway parameter. Attac… CWE-98
 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') 		CVE-2016-20079 2026-06-15 23:16 2026-06-15 Show GitHub Exploit DB Packet Storm