Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 26, 2026, 2 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
239781 7.5 危険 mint - MiNT Haber Sistemi の duyuru.asp における SQL インジェクションの脆弱性 - CVE-2007-0304 2012-09-25 16:47 2007-01-17 Show GitHub Exploit DB Packet Storm
239782 10 危険 pancake.org - Zina における脆弱性 - CVE-2007-0303 2012-09-25 16:47 2007-01-17 Show GitHub Exploit DB Packet Storm
239783 6.8 警告 InstantASP Ltd. - InstantASP におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-0302 2012-09-25 16:47 2007-01-17 Show GitHub Exploit DB Packet Storm
239784 4 警告 オラクル - Oracle PeopleSoft Enterprise および JD Edwards EnterpriseOne における脆弱性 - CVE-2007-0297 2012-09-25 16:47 2007-01-16 Show GitHub Exploit DB Packet Storm
239785 2.1 注意 オラクル - Oracle PeopleSoft Enterprise および JD Edwards EnterpriseOne における脆弱性 - CVE-2007-0296 2012-09-25 16:47 2007-01-16 Show GitHub Exploit DB Packet Storm
239786 7.8 危険 オラクル - Oracle PeopleSoft Enterprise および JD Edwards EnterpriseOne における脆弱性 - CVE-2007-0295 2012-09-25 16:47 2007-01-16 Show GitHub Exploit DB Packet Storm
239787 1.7 注意 オラクル - Oracle Enterprise Manager における脆弱性 - CVE-2007-0294 2012-09-25 16:47 2007-01-16 Show GitHub Exploit DB Packet Storm
239788 6.4 警告 オラクル - Oracle Enterprise Manager における脆弱性 CWE-noinfo
情報不足
CVE-2007-0293 2012-09-25 16:47 2007-01-16 Show GitHub Exploit DB Packet Storm
239789 7.5 危険 オラクル - Oracle Enterprise Manager における脆弱性 CWE-noinfo
情報不足
CVE-2007-0292 2012-09-25 16:47 2007-01-16 Show GitHub Exploit DB Packet Storm
239790 4 警告 オラクル - Oracle E-Business Suite and Applications における脆弱性 - CVE-2007-0291 2012-09-25 16:47 2007-01-16 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 26, 2026, 4:05 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
286131 9.8 CRITICAL
Network
wpsupportplus wp_support_plus_responsive_ticket_system The wp-support-plus-responsive-ticket-system plugin before 4.2 for WordPress has incorrect authentication. CWE-287
Improper Authentication
CVE-2014-10389 2024-11-21 11:03 2019-08-23 Show GitHub Exploit DB Packet Storm
286132 5.3 MEDIUM
Network
wpsupportplus wp_support_plus_responsive_ticket_system The wp-support-plus-responsive-ticket-system plugin before 4.2 for WordPress has full path disclosure. CWE-200
Information Exposure
CVE-2014-10388 2024-11-21 11:03 2019-08-23 Show GitHub Exploit DB Packet Storm
286133 9.8 CRITICAL
Network
wpsupportplus wp_support_plus_responsive_ticket_system The wp-support-plus-responsive-ticket-system plugin before 4.2 for WordPress has SQL injection. CWE-89
SQL Injection
CVE-2014-10387 2024-11-21 11:03 2019-08-23 Show GitHub Exploit DB Packet Storm
286134 6.1 MEDIUM
Network
memphis_documents_library_project memphis_documents_library The memphis-documents-library plugin before 3.0 for WordPress has XSS via $_REQUEST. CWE-79
Cross-site Scripting
CVE-2014-10385 2024-11-21 11:03 2019-08-22 Show GitHub Exploit DB Packet Storm
286135 9.8 CRITICAL
Network
memphis_documents_library_project memphis_documents_library The memphis-documents-library plugin before 3.0 for WordPress has Local File Inclusion. CWE-20
 Improper Input Validation 
CVE-2014-10384 2024-11-21 11:03 2019-08-22 Show GitHub Exploit DB Packet Storm
286136 9.8 CRITICAL
Network
memphis_documents_library_project memphis_documents_library The memphis-documents-library plugin before 3.0 for WordPress has Remote File Inclusion. CWE-20
 Improper Input Validation 
CVE-2014-10383 2024-11-21 11:03 2019-08-22 Show GitHub Exploit DB Packet Storm
286137 9.8 CRITICAL
Network
duplicate_post_project duplicate_post The duplicate-post plugin before 2.6 for WordPress has SQL injection. CWE-89
SQL Injection
CVE-2014-10379 2024-11-21 11:03 2019-08-22 Show GitHub Exploit DB Packet Storm
286138 6.1 MEDIUM
Network
duplicate_post_project duplicate_post The duplicate-post plugin before 2.6 for WordPress has XSS. CWE-79
Cross-site Scripting
CVE-2014-10378 2024-11-21 11:03 2019-08-22 Show GitHub Exploit DB Packet Storm
286139 6.1 MEDIUM
Network
cformsii_project cformsii The cforms2 plugin before 13.2 for WordPress has XSS in lib_ajax.php. CWE-79
Cross-site Scripting
CVE-2014-10377 2024-11-21 11:03 2019-08-22 Show GitHub Exploit DB Packet Storm
286140 6.1 MEDIUM
Network
cozmoslabs profile_builder The profile-builder plugin before 1.1.66 for WordPress has multiple XSS issues in forms. CWE-79
Cross-site Scripting
CVE-2014-10380 2024-11-21 11:03 2019-08-22 Show GitHub Exploit DB Packet Storm