Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 17, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
224591 6.4 警告 Apache Software Foundation - Apache ActiveMQ の Web コンソールにおける重要な情報を取得される脆弱性 CWE-287
不適切な認証
CVE-2013-3060 2013-04-23 17:20 2012-11-2 Show GitHub Exploit DB Packet Storm
224592 9 危険 Puppet
Canonical
- Puppet における任意のコードを実行される脆弱性 CWE-noinfo
情報不足
CVE-2013-1640 2013-04-23 17:19 2013-03-12 Show GitHub Exploit DB Packet Storm
224593 7.1 危険 Puppet
Canonical
- Puppet における任意のコードを実行される脆弱性 CWE-noinfo
情報不足
CVE-2013-1653 2013-04-23 17:14 2013-03-12 Show GitHub Exploit DB Packet Storm
224594 7.8 危険 シスコシステムズ - Cisco IOS の VRF-aware NAT 機能におけるサービス運用妨害 (メモリ消費) の脆弱性 CWE-362
競合状態
CVE-2013-1142 2013-04-23 17:13 2013-03-27 Show GitHub Exploit DB Packet Storm
224595 6.4 警告 Ruby on Rails project - Ruby on Rails の Active Record コンポーネントにおけるデータ型インジェクション攻撃を実行される脆弱性 CWE-20
不適切な入力確認
CVE-2013-3221 2013-04-23 17:12 2013-04-22 Show GitHub Exploit DB Packet Storm
224596 4.9 警告 Linux - Linux Kernel の net/vmw_vsock/af_vsock.c における重要な情報を取得される脆弱性 CWE-200
CWE-DesignError
CVE-2013-3237 2013-04-23 16:32 2013-04-7 Show GitHub Exploit DB Packet Storm
224597 4.9 警告 Linux - Linux Kernel の net/vmw_vsock/vmci_transport.c における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2013-3236 2013-04-23 16:32 2013-04-7 Show GitHub Exploit DB Packet Storm
224598 10 危険 日立 - Hitachi IT Operations Director におけるバッファオーバーフローの脆弱性 CWE-noinfo
情報不足
- 2013-04-23 15:12 2013-04-19 Show GitHub Exploit DB Packet Storm
224599 10 危険 Opera Software ASA - Opera における脆弱性 CWE-noinfo
情報不足
CVE-2013-3211 2013-04-23 15:08 2013-04-4 Show GitHub Exploit DB Packet Storm
224600 5 警告 Opera Software ASA - Opera における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2013-3210 2013-04-23 15:07 2013-04-4 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 18, 2026, 4:12 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
278751 - yurl_retwitt_project yurl_retwitt Multiple cross-site request forgery (CSRF) vulnerabilities in the yURL ReTwitt plugin 1.4 and earlier for WordPress allow remote attackers to hijack the authentication of administrators for requests … CWE-352
 Origin Validation Error
CVE-2014-9341 2024-11-21 11:20 2014-12-20 Show GitHub Exploit DB Packet Storm
278752 - wpcommenttwit_project wpcommenttwit Multiple cross-site request forgery (CSRF) vulnerabilities in the wpCommentTwit plugin 0.5 and earlier for WordPress allow remote attackers to hijack the authentication of administrators for requests… CWE-352
 Origin Validation Error
CVE-2014-9340 2024-11-21 11:20 2014-12-20 Show GitHub Exploit DB Packet Storm
278753 - jayde_online spnbabble Multiple cross-site request forgery (CSRF) vulnerabilities in the SPNbabble plugin 1.4.1 and earlier for WordPress allow remote attackers to hijack the authentication of administrators for requests t… CWE-352
 Origin Validation Error
CVE-2014-9339 2024-11-21 11:20 2014-12-20 Show GitHub Exploit DB Packet Storm
278754 - o2tweet_project o2tweet Multiple cross-site request forgery (CSRF) vulnerabilities in the O2Tweet plugin 0.0.4 and earlier for WordPress allow remote attackers to hijack the authentication of administrators for requests tha… CWE-352
 Origin Validation Error
CVE-2014-9338 2024-11-21 11:20 2014-12-20 Show GitHub Exploit DB Packet Storm
278755 - mikiurl_wordpress_eklentisi_project mikiurl_wordpress_eklentisi Multiple cross-site request forgery (CSRF) vulnerabilities in the Mikiurl Wordpress Eklentisi plugin 2.0 and earlier for WordPress allow remote attackers to hijack the authentication of administrator… CWE-352
 Origin Validation Error
CVE-2014-9337 2024-11-21 11:20 2014-12-20 Show GitHub Exploit DB Packet Storm
278756 - itwitter_project itwitter Multiple cross-site request forgery (CSRF) vulnerabilities in the iTwitter plugin 0.04 and earlier for WordPress allow remote attackers to hijack the authentication of administrators for requests tha… CWE-352
 Origin Validation Error
CVE-2014-9336 2024-11-21 11:20 2014-12-20 Show GitHub Exploit DB Packet Storm
278757 - dandyid_services_project dandyid_services Multiple cross-site request forgery (CSRF) vulnerabilities in the DandyID Services plugin 1.5.9 and earlier for WordPress allow remote attackers to hijack the authentication of administrators for req… CWE-352
 Origin Validation Error
CVE-2014-9335 2024-11-21 11:20 2014-12-20 Show GitHub Exploit DB Packet Storm
278758 - otrs otrs_help_desk The GenericInterface in OTRS Help Desk 3.2.x before 3.2.17, 3.3.x before 3.3.11, and 4.0.x before 4.0.3 allows remote authenticated users to access and modify arbitrary tickets via unspecified vector… CWE-264
Permissions, Privileges, and Access Controls
CVE-2014-9324 2024-11-21 11:20 2014-12-20 Show GitHub Exploit DB Packet Storm
278759 - glpi-project glpi SQL injection vulnerability in ajax/getDropdownValue.php in GLPI before 0.85.1 allows remote authenticated users to execute arbitrary SQL commands via the condition parameter. CWE-89
SQL Injection
CVE-2014-9258 2024-11-21 11:20 2014-12-20 Show GitHub Exploit DB Packet Storm
278760 - morfy_cms_project morfy_cms Static code injection vulnerability in install.php in Morfy CMS 1.05 allows remote authenticated users to inject arbitrary PHP code into config.php via the site_url parameter. CWE-94
Code Injection
CVE-2014-9185 2024-11-21 11:20 2014-12-20 Show GitHub Exploit DB Packet Storm