Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 4, 2026, 12:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
250881	7.5	危険	Wafer	-	Webmatic の index.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4808	2012-03-27 18:42	2011-07-8	Show	GitHub Exploit DB Packet Storm

250882	3.5	注意	IBM	-	IBM WCM におけるサービス運用妨害 (DoS) の脆弱性	CWE-362 競合状態	CVE-2010-4807	2012-03-27 18:42	2011-04-3	Show	GitHub Exploit DB Packet Storm

250883	10	危険	mojolicious	-	Mojolicious における詳細不明な脆弱性	CWE-20 不適切な入力確認	CVE-2010-4803	2012-03-27 18:42	2011-05-2	Show	GitHub Exploit DB Packet Storm

250884	10	危険	mojolicious	-	Mojolicious の Commands.pm における詳細不明な脆弱性	CWE-20 不適切な入力確認	CVE-2010-4802	2012-03-27 18:42	2011-05-2	Show	GitHub Exploit DB Packet Storm

250885	6	警告	baconmap	-	BaconMap の admin/updatelist.php におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2010-4801	2012-03-27 18:42	2011-04-26	Show	GitHub Exploit DB Packet Storm

250886	7.5	危険	baconmap	-	BaconMap の doadd.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4800	2012-03-27 18:42	2011-04-26	Show	GitHub Exploit DB Packet Storm

250887	6.8	警告	Chipmunk Scripts	-	Chipmunk Pwngame における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4799	2012-03-27 18:42	2011-04-26	Show	GitHub Exploit DB Packet Storm

250888	6.8	警告	OrangeHRM	-	OrangeHRM におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2010-4798	2012-03-27 18:42	2011-04-26	Show	GitHub Exploit DB Packet Storm

250889	7.5	危険	truworthit	-	Truworth Flex Timesheet のログインフォームにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4797	2012-03-27 18:42	2011-04-26	Show	GitHub Exploit DB Packet Storm

250890	7.5	危険	phpyun	-	PHPYun における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4796	2012-03-27 18:42	2011-04-26	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 4, 2026, 4:17 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
287041	-	redhat	enterprise_virtualization_manager	The oVirt Engine backend module, as used in Red Hat Enterprise Virtualization Manager before 3.4.2, uses an "insecure DocumentBuilderFactory," which allows remote attackers to read arbitrary files or…	CWE-20 Improper Input Validation	CVE-2014-3573	2024-11-21 11:08	2014-10-18	Show	GitHub Exploit DB Packet Storm

287042	-	jenkins redhat	jenkins openshift	Jenkins before 1.583 and LTS before 1.565.3 allows remote authenticated users with the Job/READ permission to obtain the default value for the password field of a parameterized job by reading the DOM.	CWE-200 Information Exposure	CVE-2014-3680	2024-11-21 11:08	2014-10-17	Show	GitHub Exploit DB Packet Storm

287043	-	jenkins-ci	monitoring_plugin	The Monitoring plugin before 1.53.0 for Jenkins allows remote attackers to obtain sensitive information by accessing unspecified pages.	NVD-CWE-noinfo	CVE-2014-3679	2024-11-21 11:08	2014-10-17	Show	GitHub Exploit DB Packet Storm

287044	-	redhat jenkins	openshift jenkins	Jenkins before 1.583 and LTS before 1.565.3 does not properly prevent downloading of plugins, which allows remote authenticated users with the Overall/READ permission to obtain sensitive information …	CWE-200 Information Exposure	CVE-2014-3667	2024-11-21 11:08	2014-10-17	Show	GitHub Exploit DB Packet Storm

287045	-	redhat jenkins	openshift jenkins	Jenkins before 1.583 and LTS before 1.565.3 allows remote attackers to execute arbitrary code via a crafted packet to the CLI channel.	CWE-94 Code Injection	CVE-2014-3666	2024-11-21 11:08	2014-10-17	Show	GitHub Exploit DB Packet Storm

287046	-	jenkins redhat	jenkins openshift	Jenkins before 1.583 and LTS before 1.565.3 allows remote authenticated users with the Job/CONFIGURE permission to bypass intended restrictions and create or destroy arbitrary jobs via unspecified ve…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2014-3663	2024-11-21 11:08	2014-10-17	Show	GitHub Exploit DB Packet Storm

287047	-	jenkins redhat	jenkins openshift	Jenkins before 1.583 and LTS before 1.565.3 allows remote attackers to enumerate user names via vectors related to login attempts.	CWE-200 Information Exposure	CVE-2014-3662	2024-11-21 11:08	2014-10-17	Show	GitHub Exploit DB Packet Storm

287048	-	redhat jenkins	openshift jenkins	Jenkins before 1.583 and LTS before 1.565.3 allows remote attackers to cause a denial of service (thread consumption) via vectors related to a CLI handshake.	CWE-399 Resource Management Errors	CVE-2014-3661	2024-11-21 11:08	2014-10-17	Show	GitHub Exploit DB Packet Storm

287049	-	drupal debian	drupal debian_linux	The expandArguments function in the database abstraction API in Drupal core 7.x before 7.32 does not properly construct prepared statements, which allows remote attackers to conduct SQL injection att…	CWE-89 SQL Injection	CVE-2014-3704	2024-11-21 11:08	2014-10-16	Show	GitHub Exploit DB Packet Storm

287050	-	w1.fi debian canonical	hostapd wpa_supplicant debian_linux ubuntu_linux	wpa_supplicant and hostapd 0.7.2 through 2.2, when running with certain configurations and using wpa_cli or hostapd_cli with action scripts, allows remote attackers to execute arbitrary commands via …	CWE-20 Improper Input Validation	CVE-2014-3686	2024-11-21 11:08	2014-10-16	Show	GitHub Exploit DB Packet Storm