Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 26, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
222361	4.3	警告	WP App Maker	-	WordPress 用 WP App Maker プラグインの asset-studio/icons-launcher.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2014-4578	2014-07-7 18:26	2014-06-4	Show	GitHub Exploit DB Packet Storm

222362	5	警告	Linux	-	Linux Kernel の net/sctp/associola.c 内の sctp_association_free 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2014-4667	2014-07-7 16:53	2014-06-26	Show	GitHub Exploit DB Packet Storm

222363	4.9	警告	Linux	-	Linux Kernel の ALSA 制御の実装の sound/core/control.c 内の snd_ctl_elem_add 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-189 数値処理の問題	CVE-2014-4655	2014-07-7 16:51	2014-06-26	Show	GitHub Exploit DB Packet Storm

222364	4.9	警告	Linux	-	Linux Kernel の ALSA 制御の実装の sound/core/control.c 内の snd_ctl_elem_add 関数におけるカーネル制御を削除される脆弱性	CWE-Other その他	CVE-2014-4654	2014-07-7 16:50	2014-06-26	Show	GitHub Exploit DB Packet Storm

222365	6.6	警告	Linux	-	Linux Kernel の ALSA 制御の実装の sound/core/control.c におけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2014-4653	2014-07-7 16:49	2014-06-26	Show	GitHub Exploit DB Packet Storm

222366	4.7	警告	Linux	-	Linux Kernel の ALSA 制御の実装の sound/core/control.c におけるカーネルメモリから重要な情報を取得される脆弱性	CWE-362 競合状態	CVE-2014-4652	2014-07-7 16:48	2014-06-26	Show	GitHub Exploit DB Packet Storm

222367	5	警告	Yann Collet	-	Yann Collet LZ4 におけるサービス運用妨害 (DoS) の脆弱性	CWE-189 数値処理の問題	CVE-2014-4715	2014-07-7 16:47	2014-07-2	Show	GitHub Exploit DB Packet Storm

222368	5	警告	Linux Yann Collet	-	32-bit プラットフォーム上で稼動する Yann Collet LZ4 および Linux Kernel で使用される LZ4 アルゴリズムの実装における整数オーバーフローの脆弱性	CWE-20 不適切な入力確認	CVE-2014-4611	2014-07-7 16:46	2014-06-26	Show	GitHub Exploit DB Packet Storm

222369	2.6	注意	Lamp Design	-	Lamp Design Storesprite の templates/defaultheader.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2014-3737	2014-07-7 15:05	2014-06-19	Show	GitHub Exploit DB Packet Storm

222370	4.3	警告	Webklipper Technologies	-	WordPress 用 WebEngage プラグインの resize.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2014-4574	2014-07-4 18:26	2014-05-28	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 26, 2026, 4 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
313951	6.4	MEDIUM Network	-	-	A vulnerability in the web UI of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to gain read and write access to information that is stored on an affected system. T…	CWE-611 XXE	CVE-2021-1483	2024-11-19 02:11	2024-11-16	Show	GitHub Exploit DB Packet Storm

313952	6.4	MEDIUM Network	-	-	A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to bypass authorization checking and gain access to sensitive…	CWE-20 Improper Input Validation	CVE-2021-1482	2024-11-19 02:11	2024-11-16	Show	GitHub Exploit DB Packet Storm

313953	-		-	-	The user avatar upload function in python_book V1.0 has an arbitrary file upload vulnerability.	-	CVE-2024-50649	2024-11-19 02:11	2024-11-16	Show	GitHub Exploit DB Packet Storm

313954	-		-	-	yshopmall V1.0 has an arbitrary file upload vulnerability, which can enable RCE or even take over the server when improperly configured to parse JSP files.	-	CVE-2024-50648	2024-11-19 02:11	2024-11-16	Show	GitHub Exploit DB Packet Storm

313955	-		-	-	The python_food ordering system V1.0 has an unauthorized vulnerability that leads to the leakage of sensitive user information. Attackers can access it through https://ip:port/api/myapp/index/user/in…	-	CVE-2024-50647	2024-11-19 02:11	2024-11-16	Show	GitHub Exploit DB Packet Storm

313956	4.3	MEDIUM Adjacent	-	-	A vulnerability in Cisco TelePresence CE and RoomOS could allow an unauthenticated, adjacent attacker to view sensitive information on an affected device. This vulnerability exists because the aff…	CWE-125 Out-of-bounds Read	CVE-2023-20094	2024-11-19 02:11	2024-11-16	Show	GitHub Exploit DB Packet Storm

313957	6.7	MEDIUM Local	-	-	A vulnerability in Cisco TelePresence CE and RoomOS could allow an authenticated, local attacker to elevate privileges to root on an affected device. This vulnerability is due to improper access c…	CWE-27 Path Traversal: 'dir/../../filename'	CVE-2023-20090	2024-11-19 02:11	2024-11-16	Show	GitHub Exploit DB Packet Storm

313958	4.3	MEDIUM Network	-	-	A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to conduct Cypher query language injection attacks on an affe…	CWE-943 Improper Neutralization of Special Elements in Data Query Logic	CVE-2021-1481	2024-11-19 02:11	2024-11-16	Show	GitHub Exploit DB Packet Storm

313959	4.9	MEDIUM Network	-	-	A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. This…	CWE-20 Improper Input Validation	CVE-2021-1470	2024-11-19 02:11	2024-11-16	Show	GitHub Exploit DB Packet Storm

313960	-		-	-	A vulnerability in the vDaemon service of Cisco SD-WAN vManage Software could allow an authenticated, local attacker to cause a buffer overflow on an affected system, resulting in a denial …	CWE-20 Improper Input Validation	CVE-2021-1466	2024-11-19 02:11	2024-11-16	Show	GitHub Exploit DB Packet Storm