Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 26, 2026, 10:01 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
222501 5 警告 SAP - SAP Trader's and Scheduler's Workbench for Oil & Gas におけるアクセス権を取得される脆弱性 CWE-255
証明書・パスワード管理 		CVE-2014-4006 2014-06-11 17:46 2014-06-6 Show GitHub Exploit DB Packet Storm
222502 5 警告 SAP - SAP Brazil add-on におけるアクセス権を取得される脆弱性 CWE-255
証明書・パスワード管理 		CVE-2014-4005 2014-06-11 17:46 2014-06-6 Show GitHub Exploit DB Packet Storm
222503 5 警告 SAP - SAP Project System のコンポーネントにおけるアクセス権を取得される脆弱性 CWE-255
証明書・パスワード管理 		CVE-2014-4004 2014-06-11 17:45 2014-06-6 Show GitHub Exploit DB Packet Storm
222504 7.5 危険 SAP - SAP NetWeaver の System Landscape Directory における情報を変更される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2014-4003 2014-06-11 17:45 2014-06-6 Show GitHub Exploit DB Packet Storm
222505 4 警告 シスコシステムズ - Cisco WebEx Meeting Server における重要な情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2014-3294 2014-06-11 17:11 2014-06-9 Show GitHub Exploit DB Packet Storm
222506 5.5 警告 シスコシステムズ - Cisco Unified Communications Manager の Real Time Monitoring Tool の実装における任意のファイルを読まれる脆弱性 CWE-20
不適切な入力確認 		CVE-2014-3292 2014-06-11 17:10 2014-06-10 Show GitHub Exploit DB Packet Storm
222507 4 警告 シスコシステムズ - Cisco Unified Communications Domain Manager の Java インターフェースにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2014-3287 2014-06-11 17:09 2014-06-9 Show GitHub Exploit DB Packet Storm
222508 4.3 警告 シスコシステムズ - Cisco AsyncOS 製品にクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-3289 2014-06-11 16:37 2014-06-10 Show GitHub Exploit DB Packet Storm
222509 6 警告 （複数のベンダ） - 複数製品の UEFI ファームウェアの実装に脆弱性 - CVE-2014-2961 2014-06-11 16:19 2014-06-9 Show GitHub Exploit DB Packet Storm
222510 4.3 警告 Misery Project - Drupal 用 Misery モジュールにおけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2013-4599 2014-06-11 15:55 2013-11-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 26, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
313871 6.1 MEDIUM
Network 		- - The SimpleForm – Contact form made simple plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg & remove_query_arg without appropriate escaping on the U… CWE-79
Cross-site Scripting 		CVE-2024-10883 2024-11-19 02:11 2024-11-16 Show GitHub Exploit DB Packet Storm
313872 6.1 MEDIUM
Network 		- - The Gallery Manager plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of remove_Query_Arg without appropriate escaping on the URL in all versions up to, and includin… - CVE-2024-10875 2024-11-19 02:11 2024-11-16 Show GitHub Exploit DB Packet Storm
313873 4.3 MEDIUM
Network 		- - The WP Chat App plugin for WordPress is vulnerable to unauthorized plugin installation due to a missing capability check on the ajax_install_plugin() function in all versions up to, and including, 3.… CWE-862
 Missing Authorization 		CVE-2024-10533 2024-11-19 02:11 2024-11-16 Show GitHub Exploit DB Packet Storm
313874 - - - The Steel plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's btn shortcode in all versions up to, and including, 1.3.0 due to insufficient input sanitization and outpu… CWE-79
Cross-site Scripting 		CVE-2024-10147 2024-11-19 02:11 2024-11-16 Show GitHub Exploit DB Packet Storm
313875 6.4 MEDIUM
Network 		- - The PJW Mime Config plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 1.0 due to insufficient input sanitization and output … CWE-79
Cross-site Scripting 		CVE-2024-10017 2024-11-19 02:11 2024-11-16 Show GitHub Exploit DB Packet Storm
313876 5.3 MEDIUM
Network 		- - The Popup Box – Create Countdown, Coupon, Video, Contact Form Popups plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the deactivate_plugin… CWE-862
 Missing Authorization 		CVE-2024-10861 2024-11-19 02:11 2024-11-16 Show GitHub Exploit DB Packet Storm
313877 4.3 MEDIUM
Network 		- - The Popularis Extra plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.2.7 via the 'elementor-template' shortcode due to insufficient restrictions on w… CWE-639
 Authorization Bypass Through User-Controlled Key 		CVE-2024-10795 2024-11-19 02:11 2024-11-16 Show GitHub Exploit DB Packet Storm
313878 4.3 MEDIUM
Network 		- - The Simple Local Avatars plugin for WordPress is vulnerable to unauthorized modification of datadue to a missing capability check on the sla_clear_user_cache function in all versions up to, and inclu… CWE-862
 Missing Authorization 		CVE-2024-10786 2024-11-19 02:11 2024-11-16 Show GitHub Exploit DB Packet Storm
313879 - - - When the Global Pointer (GP) relative addressing is enabled (CONFIG_RISCV_GP=y), the gp reg points at 0x800 bytes past the start of the .sdata section which is then used by the linker to relax access… - CVE-2024-11263 2024-11-19 02:11 2024-11-16 Show GitHub Exploit DB Packet Storm
313880 - - - A maliciously crafted DLL file when placed in temporary files and folders that are leveraged by the Autodesk Installer could lead to escalation of privileges to NT AUTHORITY/SYSTEM due to insecure pr… - CVE-2024-9500 2024-11-19 02:11 2024-11-16 Show GitHub Exploit DB Packet Storm