Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 31, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
240021 6.8 警告 mentiss acgv - ACGVannu における SQL インジェクションの脆弱性 - CVE-2007-0698 2012-09-25 16:47 2007-02-3 Show GitHub Exploit DB Packet Storm
240022 6.4 警告 mentiss acgv - ACGVannu の index2.php におけるパスワードなどを変更される脆弱性 - CVE-2007-0697 2012-09-25 16:47 2007-02-3 Show GitHub Exploit DB Packet Storm
240023 5 警告 myevent - myEvent における重要な情報を取得される脆弱性 - CVE-2007-0690 2012-09-25 16:47 2007-05-30 Show GitHub Exploit DB Packet Storm
240024 5 警告 MyBB Group - MyBB における重要な情報を取得される脆弱性 - CVE-2007-0689 2012-09-25 16:47 2007-05-14 Show GitHub Exploit DB Packet Storm
240025 7.5 危険 hunkaray duyuru - Hunkaray Duyuru Scripti における SQL インジェクションの脆弱性 - CVE-2007-0688 2012-09-25 16:47 2007-02-2 Show GitHub Exploit DB Packet Storm
240026 6.5 警告 michelle - Michelle's L2J Dropcalc の i-search.php における SQL インジェクションの脆弱性 - CVE-2007-0687 2012-09-25 16:47 2007-02-2 Show GitHub Exploit DB Packet Storm
240027 7.1 危険 インテル - w29n51.sys におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-0686 2012-09-25 16:47 2007-02-2 Show GitHub Exploit DB Packet Storm
240028 2.6 注意 マイクロソフト - Windows Mobile 5.0 などで稼働する Internet Explorer におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-0685 2012-09-25 16:47 2007-02-2 Show GitHub Exploit DB Packet Storm
240029 7.5 危険 omegaboard - Omegaboard の includes/functions.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-0683 2012-09-25 16:47 2007-02-2 Show GitHub Exploit DB Packet Storm
240030 7.5 危険 jv2 - JV2 Folder Gallery における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-0682 2012-09-25 16:47 2007-02-2 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 31, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
285261 8.8 HIGH
Network
libav libav Integer overflow in the get_len function in libavutil/lzo.c in Libav before 0.8.13, 9.x before 9.14, and 10.x before 10.2 allows remote attackers to execute arbitrary code via a crafted Literal Run. CWE-190
 Integer Overflow or Wraparound
CVE-2014-4609 2024-11-21 11:10 2020-01-15 Show GitHub Exploit DB Packet Storm
285262 6.1 MEDIUM
Network
ultimate-weather_project ultimate-weather The ultimate-weather plugin 1.0 for WordPress has XSS CWE-79
Cross-site Scripting
CVE-2014-4561 2024-11-21 11:10 2020-01-10 Show GitHub Exploit DB Packet Storm
285263 6.1 MEDIUM
Network
flog_project flog flog plugin 0.1 for WordPress has XSS CWE-79
Cross-site Scripting
CVE-2014-4530 2024-11-21 11:10 2020-01-10 Show GitHub Exploit DB Packet Storm
285264 6.1 MEDIUM
Network
spreadshirt-rss-3d-cube-flash-gallery_project spreadshirt-rss-3d-cube-flash-gallery Cross-site Scripting (XSS) in the spreadshirt-rss-3d-cube-flash-gallery plugin 2014 for WordPress allows remote attackers to execute arbitrary web script or HTML via unspecified parameters. CWE-79
Cross-site Scripting
CVE-2014-4553 2024-11-21 11:10 2020-01-3 Show GitHub Exploit DB Packet Storm
285265 6.1 MEDIUM
Network
visualshortcodes ninja Cross-site scripting (XSS) vulnerability in preview-shortcode-external.php in the Shortcode Ninja plugin 1.4 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML v… CWE-79
Cross-site Scripting
CVE-2014-4550 2024-11-21 11:10 2019-12-28 Show GitHub Exploit DB Packet Storm
285266 6.1 MEDIUM
Network
katz infusionsoft_gravity_forms Multiple cross-site scripting (XSS) vulnerabilities in tests/notAuto_test_ContactService_pauseCampaign.php in the Infusionsoft Gravity Forms plugin before 1.5.6 for WordPress allow remote attackers t… CWE-79
Cross-site Scripting
CVE-2014-4536 2024-11-21 11:10 2019-12-28 Show GitHub Exploit DB Packet Storm
285267 6.1 MEDIUM
Network
import_legacy_media_project import_legacy_media Cross-site scripting (XSS) vulnerability in the Import Legacy Media plugin 0.1 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the filename parameter to g… CWE-79
Cross-site Scripting
CVE-2014-4535 2024-11-21 11:10 2019-12-28 Show GitHub Exploit DB Packet Storm
285268 6.1 MEDIUM
Network
videowhisper video_comments_webcam_recorder Cross-site scripting (XSS) vulnerability in comments/videowhisper2/r_logout.php in the Video Comments Webcam Recorder plugin 1.55, as downloaded before 20140116 for WordPress allows remote attackers … CWE-79
Cross-site Scripting
CVE-2014-4567 2024-11-21 11:10 2019-12-28 Show GitHub Exploit DB Packet Storm
285269 6.1 MEDIUM
Network
cybercompany swipehq-payment-gateway-woocommerce Cross-site scripting (XSS) vulnerability in test-plugin.php in the Swipe Checkout for WooCommerce plugin 2.7.1 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML… CWE-79
Cross-site Scripting
CVE-2014-4558 2024-11-21 11:10 2019-12-28 Show GitHub Exploit DB Packet Storm
285270 6.1 MEDIUM
Network
ruven-toolkit_project ruven-toolkit Cross-site scripting (XSS) vulnerability in tinymce/popup.php in the Ruven Toolkit plugin 1.1 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the popup pa… CWE-79
Cross-site Scripting
CVE-2014-4548 2024-11-21 11:10 2019-12-28 Show GitHub Exploit DB Packet Storm