Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 23, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
222341 4.3 警告 bestsoftinc - BSI Advance Hotel Booking System の booking_details.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-4035 2014-06-16 16:29 2014-06-4 Show GitHub Exploit DB Packet Storm
222342 7.5 危険 SENKAS - Kolibri におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2010-5301 2014-06-16 15:59 2010-12-24 Show GitHub Exploit DB Packet Storm
222343 4.3 警告 Castor Project - Castor の Xerces SAX パーサのデフォルト設定における XML 外部エンティティ攻撃を実行される脆弱性 CWE-16
環境設定
CVE-2014-3004 2014-06-16 15:45 2014-05-27 Show GitHub Exploit DB Packet Storm
222344 7.5 危険 Another Awesome Stuff - ZeroCMS の zero_view_article.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2014-4034 2014-06-16 14:22 2014-06-9 Show GitHub Exploit DB Packet Storm
222345 4.3 警告 eFront Learning - Epignosis eFront の libraries/includes/personal/profile.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-4033 2014-06-16 14:21 2014-05-26 Show GitHub Exploit DB Packet Storm
222346 4.3 警告 Fiyo CMS - Fiyo CMS の apps/app_comment/form_comment.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-4032 2014-06-16 14:21 2014-05-30 Show GitHub Exploit DB Packet Storm
222347 3.3 注意 Fedora Project
レッドハット
- System Security Services Daemon におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-0249 2014-06-16 14:06 2014-05-13 Show GitHub Exploit DB Packet Storm
222348 9.3 危険 Ricardo Villalba
mplayer2 project
- SMPlayer で使用される MPlayer2 の subreader.c におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2011-3625 2014-06-16 13:59 2011-06-29 Show GitHub Exploit DB Packet Storm
222349 4.6 警告 Daiki Ueno - libfep における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-3980 2014-06-16 13:52 2014-06-4 Show GitHub Exploit DB Packet Storm
222350 10 危険 Rocket Software - Rocket Servergraph の Tivoli Storage Manager 用 Admin Center における任意のコマンドを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2014-3915 2014-06-16 13:48 2014-06-2 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 23, 2026, 4 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
314501 8.8 HIGH
Network
zohocorp manageengine_admanager_plus Zohocorp ManageEngine ADManager Plus versions 7203 and prior are vulnerable to Privilege Escalation in the Modify Computers option. NVD-CWE-noinfo
CVE-2024-24409 2024-11-14 05:35 2024-11-8 Show GitHub Exploit DB Packet Storm
314502 5.4 MEDIUM
Network
mycred mycred The myCred – Loyalty Points and Rewards plugin for WordPress and WooCommerce – Give Points, Ranks, Badges, Cashback, WooCommerce rewards, and WooCommerce credits for Gamification plugin for WordPress… CWE-79
Cross-site Scripting
CVE-2024-10187 2024-11-14 05:31 2024-11-8 Show GitHub Exploit DB Packet Storm
314503 6.5 MEDIUM
Network
salesagility suitecrm SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. Poor input validation in export allows authenticated user do a SQL injection attack. User-con… CWE-89
SQL Injection
CVE-2024-49773 2024-11-14 05:29 2024-11-6 Show GitHub Exploit DB Packet Storm
314504 8.1 HIGH
Network
zohocorp manageengine_sharepoint_manager_plus Zohocorp ManageEngine SharePoint Manager Plus versions 4503 and prior are vulnerable to authenticated XML External Entity (XXE) in the Management option. CWE-611
XXE
CVE-2024-10839 2024-11-14 05:19 2024-11-8 Show GitHub Exploit DB Packet Storm
314505 8.8 HIGH
Network
salesagility suitecrm SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. In SuiteCRM versions 7.14.4, poor input validation allows authenticated user do a SQL injecti… CWE-89
SQL Injection
CVE-2024-49772 2024-11-14 05:19 2024-11-6 Show GitHub Exploit DB Packet Storm
314506 8.8 HIGH
Network
salesagility suitecrm SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. User input is not validated and is written to the filesystem. The ParserLabel::addLabels() fu… NVD-CWE-noinfo
CVE-2024-50333 2024-11-14 05:10 2024-11-6 Show GitHub Exploit DB Packet Storm
314507 5.4 MEDIUM
Network
brainstormforce elementor_header_\&_footer_builder The Elementor Header & Footer Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via REST API SVG File uploads in all versions up to, and including, 1.6.45 due to insufficient … CWE-79
Cross-site Scripting
CVE-2024-10325 2024-11-14 05:01 2024-11-8 Show GitHub Exploit DB Packet Storm
314508 7.5 HIGH
Network
talyssonoc commonregexjs CommonRegexJS is a CommonRegex port for JavaScript. All available versions contain one or more regular expressions that are vulnerable to Regular Expression Denial of Service (ReDoS). As of time of p… CWE-1333
 Inefficient Regular Expression Complexity
CVE-2020-26305 2024-11-14 05:00 2024-10-27 Show GitHub Exploit DB Packet Storm
314509 7.2 HIGH
Network
siemens ruggedcom_rm1224_lte\(4g\)_eu_firmware
ruggedcom_rm1224_lte\(4g\)_nam_firmware
scalance_m804pb_firmware
scalance_m812-1_\(annex_a\)_firmware
scalance_m812-1_\(annex_b\)_firmware
scalan…
A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.2), RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2) (All versions < V8.2), SCALANCE M804PB… CWE-77
Command Injection
CVE-2024-50572 2024-11-14 04:59 2024-11-12 Show GitHub Exploit DB Packet Storm
314510 7.5 HIGH
Network
foundation foundation Foundation is a front-end framework. Versions 6.3.3 and prior contain one or more regular expressions that are vulnerable to Regular Expression Denial of Service (ReDoS). As of time of publication, i… CWE-1333
 Inefficient Regular Expression Complexity
CVE-2020-26304 2024-11-14 04:58 2024-10-27 Show GitHub Exploit DB Packet Storm