Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 25, 2026, 10:01 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
242541 7.5 危険 NetArt Media - Pharmacy System の index.php における SQL インジェクションの脆弱性 - CVE-2007-3433 2012-09-25 16:47 2007-06-26 Show GitHub Exploit DB Packet Storm
242542 4.3 警告 マイクロソフト - Windows XP SP2 の Microsoft Internet Explorer 6 における絶対パストラバーサルの脆弱性 - CVE-2007-3406 2012-09-25 16:47 2007-06-26 Show GitHub Exploit DB Packet Storm
242543 4.3 警告 lebisoft - Lebisoft zdefter の defter_yaz.asp におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-3405 2012-09-25 16:47 2007-06-26 Show GitHub Exploit DB Packet Storm
242544 7.5 危険 pagetool - pagetool の index.php における SQL インジェクションの脆弱性 - CVE-2007-3402 2012-09-25 16:47 2007-06-26 Show GitHub Exploit DB Packet Storm
242545 9.3 危険 nctsoft products - NCTAudioEditor などの製品で使用される NCTWMAFile2.dll の NCTAudioEditor2 ActiveX コントロールにおける任意のファイルを上書きされる脆弱性 CWE-20
不適切な入力確認 		CVE-2007-3400 2012-09-25 16:47 2007-06-26 Show GitHub Exploit DB Packet Storm
242546 5 警告 perception - LiteWeb におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-3398 2012-09-25 16:47 2007-06-26 Show GitHub Exploit DB Packet Storm
242547 4.3 警告 key focus - KF Web サーバの index.wkf におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-3396 2012-09-25 16:47 2007-06-26 Show GitHub Exploit DB Packet Storm
242548 7.5 危険 kim kyoung min - Sun Board における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-3370 2012-09-25 16:47 2007-06-22 Show GitHub Exploit DB Packet Storm
242549 7.8 危険 myserver - MyServer における重要な情報を取得される脆弱性 - CVE-2007-3365 2012-09-25 16:47 2007-06-22 Show GitHub Exploit DB Packet Storm
242550 4.3 警告 myserver - MyServer の cgi-bin/post.mscgi サンプルページにおけるクロスサイトスクリプティングの脆弱性 - CVE-2007-3364 2012-09-25 16:47 2007-06-22 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 25, 2026, 4:04 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
285711 - ip_ban_project ip_ban Multiple cross-site request forgery (CSRF) vulnerabilities in the IP Ban (simple-ip-ban) plugin 1.2.3 for WordPress allow remote attackers to hijack the authentication of administrators for requests … CWE-352
 Origin Validation Error 		CVE-2014-9413 2024-11-21 11:20 2014-12-25 Show GitHub Exploit DB Packet Storm
285712 - bird_feeder_project bird_feeder Multiple cross-site request forgery (CSRF) vulnerabilities in the Bird Feeder plugin 1.2.3 for WordPress allow remote attackers to hijack the authentication of administrators for requests that conduc… CWE-352
 Origin Validation Error 		CVE-2014-9334 2024-11-21 11:20 2014-12-25 Show GitHub Exploit DB Packet Storm
285713 - allegrosoft rompager Multiple buffer overflows in AllegroSoft RomPager, as used in Huawei Home Gateway products and other vendors and products, allow remote attackers to cause a denial of service or possibly execute arbi… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2014-9223 2024-11-21 11:20 2014-12-25 Show GitHub Exploit DB Packet Storm
285714 - allegrosoft rompager AllegroSoft RomPager 4.34 and earlier, as used in Huawei Home Gateway products and other vendors and products, allows remote attackers to gain privileges via a crafted cookie that triggers memory cor… CWE-17
Code 		CVE-2014-9222 2024-11-21 11:20 2014-12-25 Show GitHub Exploit DB Packet Storm
285715 - microfocus access_manager Multiple cross-site scripting (XSS) vulnerabilities in NetIQ Access Manager (NAM) 4.x before 4.1 allow remote attackers to inject arbitrary web script or HTML via (1) an arbitrary parameter to roma/j… CWE-79
Cross-site Scripting 		CVE-2014-9412 2024-11-21 11:20 2014-12-23 Show GitHub Exploit DB Packet Storm
285716 - piwigo piwigo SQL injection vulnerability in the rate_picture function in include/functions_rate.inc.php in Piwigo before 2.5.5, 2.6.x before 2.6.4, and 2.7.x before 2.7.2 allows remote attackers to execute arbitr… CWE-89
SQL Injection 		CVE-2014-9115 2024-11-21 11:20 2014-12-23 Show GitHub Exploit DB Packet Storm
285717 - modx modx_revolution Cross-site scripting (XSS) vulnerability in manager/assets/fileapi/FileAPI.flash.image.swf in MODX Revolution 2.3.2-pl allows remote attackers to inject arbitrary web script or HTML via the callback … CWE-79
Cross-site Scripting 		CVE-2014-8992 2024-11-21 11:20 2014-12-23 Show GitHub Exploit DB Packet Storm
285718 - ntp ntp The receive function in ntp_proto.c in ntpd in NTP before 4.2.8 continues to execute after detecting a certain authentication error, which might allow remote attackers to trigger an unintended associ… CWE-17
Code 		CVE-2014-9296 2024-11-21 11:20 2014-12-20 Show GitHub Exploit DB Packet Storm
285719 - ntp ntp Multiple stack-based buffer overflows in ntpd in NTP before 4.2.8 allow remote attackers to execute arbitrary code via a crafted packet, related to (1) the crypto_recv function when the Autokey Authe… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2014-9295 2024-11-21 11:20 2014-12-20 Show GitHub Exploit DB Packet Storm
285720 - ntp ntp util/ntp-keygen.c in ntp-keygen in NTP before 4.2.7p230 uses a weak RNG seed, which makes it easier for remote attackers to defeat cryptographic protection mechanisms via a brute-force attack. NVD-CWE-Other
CVE-2014-9294 2024-11-21 11:20 2014-12-20 Show GitHub Exploit DB Packet Storm