Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 26, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
215831	3.5	注意	X3CMS	-	X3 CMS の search_controller におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2014-8772	2014-12-5 11:52	2014-11-8	Show	GitHub Exploit DB Packet Storm

215832	6.8	警告	X3CMS	-	X3 CMS の管理者エリアにおけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2014-8771	2014-12-5 11:51	2014-11-8	Show	GitHub Exploit DB Packet Storm

215833	5	警告	infoware GmbH	-	Infoware MapSuite の MapAPI におけるサーバサイドのリクエストフォージェリの脆弱性	CWE-Other その他	CVE-2014-2233	2014-12-5 11:30	2014-03-24	Show	GitHub Exploit DB Packet Storm

215834	4.3	警告	Open-Xchange	-	Open-Xchange AppSuite のドキュメントコンバータコンポーネントにおけるサーバサイドのリクエストフォージェリの脆弱性	CWE-Other その他	CVE-2014-5237	2014-12-5 11:01	2014-08-25	Show	GitHub Exploit DB Packet Storm

215835	6	警告	OpenStack	-	OpenStack Identity および Juno におけるアクセス権を取得される脆弱性	CWE-310 暗号の問題	CVE-2014-3520	2014-12-4 18:15	2014-07-24	Show	GitHub Exploit DB Packet Storm

215836	4.3	警告	OpenStack	-	OpenStack Dashboard の Users パネルにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2014-3475	2014-12-4 18:14	2014-07-23	Show	GitHub Exploit DB Packet Storm

215837	3.5	注意	OpenStack	-	OpenStack Dashboard の Launch Instance メニューの horizon/static/horizon/js/horizon.instances.js におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2014-3474	2014-12-4 18:12	2014-07-23	Show	GitHub Exploit DB Packet Storm

215838	4.3	警告	OpenStack	-	OpenStack Dashboard Horizon Orchestration dashboard の Orchestration/Stack セクションにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2014-3473	2014-12-4 18:09	2014-07-23	Show	GitHub Exploit DB Packet Storm

215839	4.3	警告	Sunhater	-	SunHater KCFinder の index.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2014-3988	2014-12-4 10:42	2014-06-17	Show	GitHub Exploit DB Packet Storm

215840	7.2	危険	Thomson Reuters	-	Thomson Reuters Fixed Assets CS のインストーラにおける任意のコードを実行される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2014-9141	2014-12-4 10:42	2014-12-1	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 26, 2026, 4:05 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
293281	6.1	MEDIUM Network	count_per_day_project	count_per_day	The count-per-day plugin before 3.2.3 for WordPress has XSS via search words.	CWE-79 Cross-site Scripting	CVE-2012-6714	2024-11-21 10:46	2019-08-22	Show	GitHub Exploit DB Packet Storm

293282	6.1	MEDIUM Network	formbuilder_project	formbuilder	The formbuilder plugin before 0.9.1 for WordPress has XSS via a Referer header.	CWE-79 Cross-site Scripting	CVE-2012-6715	2024-11-21 10:46	2019-08-22	Show	GitHub Exploit DB Packet Storm

293283	6.1	MEDIUM Network	wp-jobmanager	job_manager	The job-manager plugin before 0.7.19 for WordPress has multiple XSS issues.	CWE-79 Cross-site Scripting	CVE-2012-6713	2024-11-21 10:46	2019-08-14	Show	GitHub Exploit DB Packet Storm

293284	9.8	CRITICAL Network	linux	linux_kernel	In the Linux kernel before 3.4, a buffer overflow occurs in drivers/net/wireless/iwlwifi/iwl-agn-sta.c, which will cause at least memory corruption.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2012-6712	2024-11-21 10:46	2019-07-28	Show	GitHub Exploit DB Packet Storm

293285	7.8	HIGH Local	gnu redhat	bash enterprise_linux	A heap-based buffer overflow exists in GNU Bash before 4.3 when wide characters, not supported by the current locale set in the LC_CTYPE environment variable, are printed through the echo built-in fu…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2012-6711	2024-11-21 10:46	2019-06-19	Show	GitHub Exploit DB Packet Storm

293286	9.8	CRITICAL Network	page_flip_book_project	page_flip_book	Directory traversal vulnerability in pageflipbook.php script from index.php in Page Flip Book plugin for WordPress (wppageflip) allows remote attackers to include and execute arbitrary local files vi…	CWE-22 Path Traversal	CVE-2012-6652	2024-11-21 10:46	2019-05-13	Show	GitHub Exploit DB Packet Storm

293287	9.8	CRITICAL Network	extplorer	extplorer	ext_find_user in eXtplorer through 2.1.2 allows remote attackers to bypass authentication via a password[]= (aka an empty array) in an action=login request to index.php.	CWE-287 Improper Authentication	CVE-2012-6710	2024-11-21 10:46	2018-10-8	Show	GitHub Exploit DB Packet Storm

293288	7.1	HIGH Local	fedoraproject	fedora	The fedora-business-cards package before 1-0.1.beta1.fc17 on Fedora 17 and before 1-0.1.beta1.fc18 on Fedora 18 allows local users to cause a denial of service or write to arbitrary files via a symli…	CWE-59 Link Following	CVE-2013-0159	2024-11-21 10:46	2018-05-2	Show	GitHub Exploit DB Packet Storm

293289	5.9	MEDIUM Network	elinks twibright	elinks links	ELinks 0.12 and Twibright Links 2.3 have Missing SSL Certificate Validation.	CWE-295 Improper Certificate Validation	CVE-2012-6709	2024-11-21 10:46	2018-02-24	Show	GitHub Exploit DB Packet Storm

293290	6.1	MEDIUM Network	fortinet	fortidb	Multiple cross-site scripting (XSS) vulnerabilities in Java number format exception handling in FortiGate FortiDB before 4.4.2 allow remote attackers to inject arbitrary web script or HTML via the co…	CWE-79 Cross-site Scripting	CVE-2012-6347	2024-11-21 10:46	2018-02-10	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed