Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":July 1, 2026, 6 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 223291 | 5 | 警告 | WebTitan | - | WebTitan の logs-x.php におけるディレクトリトラバーサルの脆弱性 |
CWE-22
パス・トラバーサル |
CVE-2014-4306 | 2014-06-20 11:34 | 2014-04-7 | Show | GitHub Exploit DB Packet Storm |
| 223292 | 4.3 | 警告 | SQL Buddy | - | SQL Buddy の browse.php におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2014-4304 | 2014-06-20 11:24 | 2014-06-5 | Show | GitHub Exploit DB Packet Storm |
| 223293 | 2.1 | 注意 | Drupac | - | Drupal 用 Touch テーマにおけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2014-4303 | 2014-06-20 11:08 | 2014-05-17 | Show | GitHub Exploit DB Packet Storm |
| 223294 | 4.3 | 警告 | Eugene Pankov | - | Eugene Pankov Ajenti の routing.py 内の respond_error 関数におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2014-4301 | 2014-06-20 10:58 | 2014-06-8 | Show | GitHub Exploit DB Packet Storm |
| 223295 | 5 | 警告 | Powerpc-utils project | - | powerpc-utils の snap における重要な情報を取得される脆弱性 |
CWE-310
暗号の問題 |
CVE-2014-4040 | 2014-06-19 15:56 | 2014-06-17 | Show | GitHub Exploit DB Packet Storm |
| 223296 | 4.3 | 警告 | Ulli Horlacher | - | Frams' Fast File EXchange におけるクロスサイトスクリプティングの脆弱性 |
CWE-Other
その他 |
CVE-2014-3877 | 2014-06-19 13:54 | 2014-05-26 | Show | GitHub Exploit DB Packet Storm |
| 223297 | 4.3 | 警告 | Ulli Horlacher | - | Frams' Fast File EXchange におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2014-3876 | 2014-06-19 13:54 | 2014-05-26 | Show | GitHub Exploit DB Packet Storm |
| 223298 | 7.8 | 危険 | Huawei | - | Huawei Campus シリーズスイッチのソフトウェアにおけるヒープベースのバッファオーバーフローの脆弱性 |
CWE-119
バッファエラー |
CVE-2014-4190 | 2014-06-19 12:01 | 2014-06-4 | Show | GitHub Exploit DB Packet Storm |
| 223299 | 4.3 | 警告 | ClipBucket | - | ClipBucket の signup.php におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2014-4187 | 2014-06-19 11:49 | 2014-06-14 | Show | GitHub Exploit DB Packet Storm |
| 223300 | 5 | 警告 | OpenAFS | - | OpenAFS におけるサービス運用妨害 (DoS) の脆弱性 |
CWE-119
バッファエラー |
CVE-2014-4044 | 2014-06-19 11:46 | 2014-06-12 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:July 1, 2026, 4:27 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 277881 | 6.1 |
MEDIUM
Network |
google_doc_embedder_project | google_doc_embedder | The google-document-embedder plugin before 2.6.2 for WordPress has XSS. |
CWE-79
Cross-site Scripting |
CVE-2016-10881 | 2024-11-21 11:44 | 2019-08-15 | Show | GitHub Exploit DB Packet Storm |
| 277882 | 6.1 |
MEDIUM
Network |
google_doc_embedder_project | google_doc_embedder | The google-document-embedder plugin before 2.6.1 for WordPress has XSS. |
CWE-79
Cross-site Scripting |
CVE-2016-10880 | 2024-11-21 11:44 | 2019-08-15 | Show | GitHub Exploit DB Packet Storm |
| 277883 | 9.8 |
CRITICAL
Network |
imagely | nextgen_gallery | The nextgen-gallery plugin before 2.1.57 for WordPress has SQL injection via a gallery name. |
CWE-89
SQL Injection |
CVE-2016-10889 | 2024-11-21 11:44 | 2019-08-15 | Show | GitHub Exploit DB Packet Storm |
| 277884 | 6.1 |
MEDIUM
Network |
tipsandtricks-hq | all_in_one_wp_security_\&_firewall | The all-in-one-wp-security-and-firewall plugin before 4.0.6 for WordPress has XSS in settings pages. |
CWE-79
Cross-site Scripting |
CVE-2016-10867 | 2024-11-21 11:44 | 2019-08-14 | Show | GitHub Exploit DB Packet Storm |
| 277885 | 6.1 |
MEDIUM
Network |
tipsandtricks-hq | all_in_one_wp_security_\&_firewall | The all-in-one-wp-security-and-firewall plugin before 4.2.0 for WordPress has multiple XSS issues. |
CWE-79
Cross-site Scripting |
CVE-2016-10866 | 2024-11-21 11:44 | 2019-08-14 | Show | GitHub Exploit DB Packet Storm |
| 277886 | 6.1 |
MEDIUM
Network |
ibericode | mailchimp | The mailchimp-for-wp plugin before 4.0.11 for WordPress has XSS on the integration settings page. |
CWE-79
Cross-site Scripting |
CVE-2016-10871 | 2024-11-21 11:44 | 2019-08-14 | Show | GitHub Exploit DB Packet Storm |
| 277887 | 6.1 |
MEDIUM
Network |
gtranslate | google_language_translator | The google-language-translator plugin before 5.0.06 for WordPress has XSS. |
CWE-79
Cross-site Scripting |
CVE-2016-10870 | 2024-11-21 11:44 | 2019-08-14 | Show | GitHub Exploit DB Packet Storm |
| 277888 | 6.1 |
MEDIUM
Network |
bestwebsoft | contact_form | The contact-form-plugin plugin before 4.0.2 for WordPress has XSS. |
CWE-79
Cross-site Scripting |
CVE-2016-10869 | 2024-11-21 11:44 | 2019-08-14 | Show | GitHub Exploit DB Packet Storm |
| 277889 | 6.1 |
MEDIUM
Network |
tipsandtricks-hq | all_in_one_wp_security_\&_firewall | The all-in-one-wp-security-and-firewall plugin before 4.0.5 for WordPress has XSS in the blacklist, file system, and file change detection settings pages. |
CWE-79
Cross-site Scripting |
CVE-2016-10868 | 2024-11-21 11:44 | 2019-08-14 | Show | GitHub Exploit DB Packet Storm |
| 277890 | 6.1 |
MEDIUM
Network |
ultimatemember | ultimate_member | The ultimate-member plugin before 1.3.40 for WordPress has XSS on the login form. |
CWE-79
Cross-site Scripting |
CVE-2016-10872 | 2024-11-21 11:44 | 2019-08-13 | Show | GitHub Exploit DB Packet Storm |