Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 19, 2026, 4 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
223251	4.3	警告	DNN	-	DotNetNuke におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-4649	2014-03-14 15:05	2013-08-13	Show	GitHub Exploit DB Packet Storm

223252	3.5	注意	DNN	-	DotNetNuke におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-3943	2014-03-14 14:39	2013-08-13	Show	GitHub Exploit DB Packet Storm

223253	7.5	危険	FreeType Project	-	FreeType の cff/cf2hints.c 内の cf2_hintmap_build 関数におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2014-2240	2014-03-14 14:19	2014-03-7	Show	GitHub Exploit DB Packet Storm

223254	4.3	警告	CiviCRM Caseproof Joobi	-	複数ベンダの製品で使用される Open Flash Chart の open-flash-chart.swf におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-1636	2014-03-14 13:48	2013-06-10	Show	GitHub Exploit DB Packet Storm

223255	10	危険	マイクロソフトアドビシステムズ Google	-	Adobe Flash Player および Adobe AIR におけるメモリ二重解放の脆弱性	CWE-399 リソース管理の問題	CVE-2014-0502	2014-03-13 18:24	2014-02-20	Show	GitHub Exploit DB Packet Storm

223256	7.8	危険	マイクロソフトアドビシステムズ Google	-	Adobe Flash Player および Adobe AIR における ASLR 保護メカニズムを回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2014-0499	2014-03-13 18:23	2014-02-20	Show	GitHub Exploit DB Packet Storm

223257	10	危険	マイクロソフトアドビシステムズ Google	-	Adobe Flash Player および Adobe AIR におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2014-0498	2014-03-13 18:19	2014-02-20	Show	GitHub Exploit DB Packet Storm

223258	3.5	注意	MySQL AB オラクル	-	Oracle MySQL の MySQL Server における Optimizer に関する脆弱性	CWE-noinfo 情報不足	CVE-2014-0437	2014-03-13 18:18	2014-01-14	Show	GitHub Exploit DB Packet Storm

223259	10	危険	シスコシステムズ	-	Cisco Unified SIP Phone 3905 のファームウェアにおける root アクセス権を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2014-0721	2014-03-13 17:45	2014-02-19	Show	GitHub Exploit DB Packet Storm

223260	7.5	危険	Raoul Proenca	-	Gnew の users/login.php におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2013-5639	2014-03-13 17:45	2013-10-2	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 19, 2026, 4:01 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
313751	-		-	-	A stored cross-site scripting (XSS) vulnerability in the Create Customer API in Incognito Service Activation Center (SAC) UI v14.11 allows authenticated attackers to execute arbitrary web scripts or …	-	CVE-2024-42834	2024-11-19 05:35	2024-11-14	Show	GitHub Exploit DB Packet Storm

313752	-		-	-	SQL Injection vulnerability in Simple Laboratory Management System using PHP and MySQL v.1.0 allows a remote attacker to cause a denial of service via the delete_users function in the Useres.php	-	CVE-2024-40443	2024-11-19 05:35	2024-11-14	Show	GitHub Exploit DB Packet Storm

313753	-		-	-	Cross Site Scripting vulnerability in Cyber Cafe Management System v.1.0 allows a local attacker to execute arbitrary code via a crafted script to the adminname parameter.	-	CVE-2023-38920	2024-11-19 05:35	2024-11-14	Show	GitHub Exploit DB Packet Storm

313754	7.2	HIGH Network	angeljudesuarez	construction_management_system	A SQL injection vulnerability in printtool.php of Itsourcecode Construction Management System 1.0 allows remote attackers to execute arbitrary SQL commands via the borrow_id parameter.	CWE-89 SQL Injection	CVE-2024-50972	2024-11-19 05:35	2024-11-14	Show	GitHub Exploit DB Packet Storm

313755	7.2	HIGH Network	angeljudesuarez	construction_management_system	A SQL injection vulnerability in print.php of Itsourcecode Construction Management System 1.0 allows remote attackers to execute arbitrary SQL commands via the map_id parameter.	CWE-89 SQL Injection	CVE-2024-50971	2024-11-19 05:35	2024-11-14	Show	GitHub Exploit DB Packet Storm

313756	8.8	HIGH Network	nikoarroyocuraza	online_furniture_shopping_project	A SQL injection vulnerability in orderview1.php of Itsourcecode Online Furniture Shopping Project 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter.	CWE-89 SQL Injection	CVE-2024-50970	2024-11-19 05:35	2024-11-14	Show	GitHub Exploit DB Packet Storm

313757	7.8	HIGH Local	microsoft	excel office 365_apps office_long_term_servicing_channel	Microsoft Excel Remote Code Execution Vulnerability	NVD-CWE-noinfo	CVE-2024-49028	2024-11-19 05:34	2024-11-13	Show	GitHub Exploit DB Packet Storm

313758	7.8	HIGH Local	microsoft	office 365_apps office_long_term_servicing_channel	Microsoft Office Graphics Remote Code Execution Vulnerability	NVD-CWE-noinfo	CVE-2024-49032	2024-11-19 05:31	2024-11-13	Show	GitHub Exploit DB Packet Storm

313759	7.8	HIGH Local	microsoft	office 365_apps office_long_term_servicing_channel	Microsoft Office Graphics Remote Code Execution Vulnerability	NVD-CWE-noinfo	CVE-2024-49031	2024-11-19 05:31	2024-11-13	Show	GitHub Exploit DB Packet Storm

313760	4.8	MEDIUM Network	mayurik	hospital_management_system	A vulnerability was found in SourceCodester Hospital Management System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /vm/doctor/edit-doc.php.…	CWE-79 Cross-site Scripting	CVE-2024-11102	2024-11-19 05:00	2024-11-12	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed