Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 22, 2026, 6:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
222431 6.8 警告 Moxiecode Systems AB - WordPress 用 TinyMCE Color Picker プラグインにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2014-3845 2014-05-26 15:33 2014-05-12 Show GitHub Exploit DB Packet Storm
222432 5 警告 Moxiecode Systems AB - WordPress 用 TinyMCE Color Picker プラグインにおけるプラグイン設定を変更される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2014-3844 2014-05-26 15:32 2014-05-12 Show GitHub Exploit DB Packet Storm
222433 6.8 警告 Zemanta - WordPress 用 Search Everything プラグインにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2014-3843 2014-05-26 15:32 2014-05-7 Show GitHub Exploit DB Packet Storm
222434 4.3 警告 iMember360 - WordPress 用 iMember360 プラグインにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-3842 2014-05-26 15:32 2014-04-24 Show GitHub Exploit DB Packet Storm
222435 4.3 警告 Tech Banker - WordPress 用 Contact Bank プラグインにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-3841 2014-05-26 15:31 2014-05-12 Show GitHub Exploit DB Packet Storm
222436 6.5 警告 DOTonPAPER - WordPress 用 Booking System プラグインの dopbs-backend-forms.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2014-3210 2014-05-26 15:31 2014-05-21 Show GitHub Exploit DB Packet Storm
222437 6.8 警告 Mail On Update Project - WordPress 用 Mail On Update プラグインにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2013-2107 2014-05-26 15:28 2013-05-16 Show GitHub Exploit DB Packet Storm
222438 7.5 危険 MicroP project - MicroP におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-5299 2014-05-26 15:10 2010-08-23 Show GitHub Exploit DB Packet Storm
222439 7.5 危険 エマソン - Emerson DeltaV におけるアクセス制限を回避される脆弱性 CWE-255
証明書・パスワード管理 		CVE-2014-2350 2014-05-26 14:52 2014-05-22 Show GitHub Exploit DB Packet Storm
222440 4.6 警告 エマソン - Emerson DeltaV における設定ファイルを変更される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2014-2349 2014-05-26 14:51 2014-05-22 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 23, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
314101 - - - Sercomm Router Etisalat Model S3- AC2100 is affected by Incorrect Access Control via the diagnostic utility in the router dashboard. - CVE-2021-27702 2024-11-16 07:35 2024-11-13 Show GitHub Exploit DB Packet Storm
314102 7.8 HIGH
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: udf: fix uninit-value use in udf_get_fileshortad Check for overflow when computing alen in udf_current_aext to mitigate later uni… CWE-908
 Use of Uninitialized Resource 		CVE-2024-50143 2024-11-16 07:22 2024-11-7 Show GitHub Exploit DB Packet Storm
314103 - - - Bluetooth LE and BR/EDR Secure Connections pairing and Secure Simple Pairing using the Passkey entry protocol in Bluetooth Core Specifications 2.1 through 5.3 may permit an unauthenticated man-in-the… - CVE-2021-37577 2024-11-16 06:35 2024-10-2 Show GitHub Exploit DB Packet Storm
314104 - - - Improper Input Validation vulnerability of Authenticated User in Progress LoadMaster allows : OS Command Injection.This issue affects: ?Product Affected Versions LoadMaster Fro… CWE-20
 Improper Input Validation  		CVE-2024-8755 2024-11-16 06:15 2024-10-12 Show GitHub Exploit DB Packet Storm
314105 5.5 MEDIUM
Local 		cysoft168 super_easy_enterprise_management_system An issue in Super easy enterprise management system v.1.0.0 and before allows a local attacker to obtain the server absolute path by entering a single quotation mark. CWE-22
Path Traversal 		CVE-2024-42680 2024-11-16 06:15 2024-08-15 Show GitHub Exploit DB Packet Storm
314106 7.5 HIGH
Network 		sunmochina enterprise_management_system Incorrect access control in the component /servlet/SnoopServlet of Shenzhou News Union Enterprise Management System v5.0 through v18.8 allows attackers to access sensitive information regarding the s… NVD-CWE-Other
CVE-2024-44760 2024-11-16 05:15 2024-08-29 Show GitHub Exploit DB Packet Storm
314107 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: octeon_ep: Add SKB allocation failures handling in __octep_oq_process_rx() build_skb() returns NULL in case of a memory allocatio… CWE-476
 NULL Pointer Dereference 		CVE-2024-50145 2024-11-16 04:50 2024-11-7 Show GitHub Exploit DB Packet Storm
314108 7.8 HIGH
Local 		amd ryzen_ai_software Improper input validation in the NPU driver could allow an attacker to supply a specially crafted pointer potentially leading to arbitrary code execution. NVD-CWE-noinfo
CVE-2024-21974 2024-11-16 04:20 2024-11-13 Show GitHub Exploit DB Packet Storm
314109 5.5 MEDIUM
Local 		amd ryzen_ai_software Improper validation of user input in the NPU driver could allow an attacker to provide a buffer with unexpected size, potentially leading to system crash. NVD-CWE-noinfo
CVE-2024-21949 2024-11-16 04:20 2024-11-13 Show GitHub Exploit DB Packet Storm
314110 7.8 HIGH
Local 		amd ryzen_ai_software Improper input validation in the NPU driver could allow an attacker to supply a specially crafted pointer potentially leading to arbitrary code execution. NVD-CWE-noinfo
CVE-2024-21975 2024-11-16 04:15 2024-11-13 Show GitHub Exploit DB Packet Storm