Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 9, 2026, 2:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
241601	7.5	危険	justin white	-	FreeWPS 用の upload.php における任意の PHP プログラムをアップロードされる脆弱性	-	CVE-2006-5411	2012-09-25 15:36	2006-10-20	Show	GitHub Exploit DB Packet Storm

241602	7.5	危険	mobilesecure inc	-	Highwall Enterprise 用などのワイヤレス IDS 管理インターフェースにおける SQL インジェクションの脆弱性	-	CVE-2006-5409	2012-09-25 15:36	2006-10-20	Show	GitHub Exploit DB Packet Storm

241603	5.1	警告	mobilesecure inc	-	Highwall Enterprise 用などのワイヤレス IDS 管理インターフェースにおけるクロスサイトスクリプティングの脆弱性	-	CVE-2006-5408	2012-09-25 15:36	2006-10-20	Show	GitHub Exploit DB Packet Storm

241604	7.5	危険	osTicket	-	osTicket の open_form.php における PHP リモートファイルインクルージョンの脆弱性	-	CVE-2006-5407	2012-09-25 15:36	2006-10-18	Show	GitHub Exploit DB Packet Storm

241605	3.6	注意	passgo	-	Passgo Defender における重要なファイルを変更される脆弱性	-	CVE-2006-5406	2012-09-25 15:36	2006-10-18	Show	GitHub Exploit DB Packet Storm

241606	7.5	危険	マイクロソフト	-	Microsoft Class Package Export Tool におけるバッファオーバーフローの脆弱性	-	CVE-2006-5395	2012-09-25 15:36	2006-10-18	Show	GitHub Exploit DB Packet Storm

241607	7.5	危険	opendoc	-	OpenDock FullCore における PHP リモートファイルインクルージョンの脆弱性	-	CVE-2006-5392	2012-09-25 15:36	2006-10-18	Show	GitHub Exploit DB Packet Storm

241608	7.5	危険	nuralstorm	-	NuralStorm Webmail の process.php における PHP リモートファイルインクルージョンの脆弱性	-	CVE-2006-5386	2012-09-25 15:36	2006-10-18	Show	GitHub Exploit DB Packet Storm

241609	9	危険	オラクル	-	JD Edwards EnterpriseOne の JD Edwards HTML Server における脆弱性	-	CVE-2006-5378	2012-09-25 15:36	2006-10-17	Show	GitHub Exploit DB Packet Storm

241610	9	危険	オラクル	-	Oracle PeopleSoft Enterprise の PeopleSoft コンポーネントにおける脆弱性	-	CVE-2006-5377	2012-09-25 15:36	2006-10-17	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 9, 2026, 4:16 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
286991	-	disqus	disqus_comment_system	Multiple cross-site request forgery (CSRF) vulnerabilities in the Disqus Comment System plugin 2.77 for WordPress allow remote attackers to hijack the authentication of administrators for requests th…	CWE-352 Origin Validation Error	CVE-2014-5346	2024-11-21 11:11	2014-08-20	Show	GitHub Exploit DB Packet Storm

286992	-	disqus	disqus_comment_system	Cross-site scripting (XSS) vulnerability in upgrade.php in the Disqus Comment System plugin before 2.76 for WordPress allows remote attackers to inject arbitrary web script or HTML via the step param…	CWE-79 Cross-site Scripting	CVE-2014-5345	2024-11-21 11:11	2014-08-20	Show	GitHub Exploit DB Packet Storm

286993	-	mobiloud	mobiloud	Multiple cross-site scripting (XSS) vulnerabilities in the Mobiloud (mobiloud-mobile-app-plugin) plugin before 2.3.8 for WordPress allow remote attackers to inject arbitrary web script or HTML via un…	CWE-79 Cross-site Scripting	CVE-2014-5344	2024-11-21 11:11	2014-08-20	Show	GitHub Exploit DB Packet Storm

286994	-	fengoffice	feng_office	Cross-site scripting (XSS) vulnerability in Feng Office allows remote attackers to inject arbitrary web script or HTML via a client Name field.	CWE-79 Cross-site Scripting	CVE-2014-5343	2024-11-21 11:11	2014-08-20	Show	GitHub Exploit DB Packet Storm

286995	-	debian canonical kde	kde4libs ubuntu_linux kdelibs kauth	KDE kdelibs before 4.14 and kauth before 5.1 does not properly use D-Bus for communication with a polkit authority, which allows local users to bypass intended access restrictions by leveraging a Pol…	CWE-362 Race Condition	CVE-2014-5033	2024-11-21 11:11	2014-08-20	Show	GitHub Exploit DB Packet Storm

286996	-	adobe	adobe_air flash_player adobe_air_sdk	Adobe Flash Player before 13.0.0.241 and 14.x before 14.0.0.176 on Windows and OS X and before 11.2.202.400 on Linux, Adobe AIR before 14.0.0.178 on Windows and OS X and before 14.0.0.179 on Android,…	CWE-352 Origin Validation Error	CVE-2014-5333	2024-11-21 11:11	2014-08-19	Show	GitHub Exploit DB Packet Storm

286997	-	wordpress drupal debian	wordpress drupal debian_linux	The Incutio XML-RPC (IXR) Library, as used in WordPress before 3.9.2 and Drupal 6.x before 6.33 and 7.x before 7.31, does not limit the number of elements in an XML document, which allows remote atta…	CWE-399 Resource Management Errors	CVE-2014-5266	2024-11-21 11:11	2014-08-18	Show	GitHub Exploit DB Packet Storm

286998	-	wordpress drupal debian	wordpress drupal debian_linux	The Incutio XML-RPC (IXR) Library, as used in WordPress before 3.9.2 and Drupal 6.x before 6.33 and 7.x before 7.31, permits entity declarations without considering recursion during entity expansion,…	CWE-399 Resource Management Errors	CVE-2014-5265	2024-11-21 11:11	2014-08-18	Show	GitHub Exploit DB Packet Storm

286999	-	wordpress debian	wordpress debian_linux	Cross-site scripting (XSS) vulnerability in wp-includes/pluggable.php in WordPress before 3.9.2, when Multisite is enabled, allows remote authenticated administrators to inject arbitrary web script o…	CWE-79 Cross-site Scripting	CVE-2014-5240	2024-11-21 11:11	2014-08-18	Show	GitHub Exploit DB Packet Storm

287000	-	linux canonical	linux_kernel ubuntu_linux	fs/namespace.c in the Linux kernel through 3.16.1 does not properly restrict clearing MNT_NODEV, MNT_NOSUID, and MNT_NOEXEC and changing MNT_ATIME_MASK during a remount of a bind mount, which allows …	CWE-269 Improper Privilege Management	CVE-2014-5207	2024-11-21 11:11	2014-08-18	Show	GitHub Exploit DB Packet Storm