Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 23, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
215851	5	警告	Wireshark	-	Wireshark の TN5250 ディセクタの epan/dissectors/packet-tn5250.c におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2014-8714	2014-11-25 15:50	2014-11-12	Show	GitHub Exploit DB Packet Storm

215852	5	警告	Wireshark	-	Wireshark の NCP ディセクタの epan/dissectors/packet-ncp2222.inc におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2014-8713	2014-11-25 15:49	2014-11-12	Show	GitHub Exploit DB Packet Storm

215853	5	警告	Wireshark	-	Wireshark の NCP ディセクタの epan/dissectors/packet-ncp2222.inc におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2014-8712	2014-11-25 15:49	2014-11-12	Show	GitHub Exploit DB Packet Storm

215854	5	警告	Wireshark	-	Wireshark の AMQP ディセクタの epan/dissectors/packet-amqp.c における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2014-8711	2014-11-25 15:48	2014-11-12	Show	GitHub Exploit DB Packet Storm

215855	7.2	危険	アドバンテック株式会社	-	Advantech WebAccess におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2014-8388	2014-11-25 15:43	2014-11-20	Show	GitHub Exploit DB Packet Storm

215856	5	警告	シスコシステムズ	-	Cisco Unified Communications Manager IM and Presence Service におけるユーザアカウントを列挙される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2014-8000	2014-11-25 15:30	2014-11-19	Show	GitHub Exploit DB Packet Storm

215857	4	警告	TIBCO Software	-	複数の TIBCO Spotfire 製品の TIBCO Spotfire Web Player における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2014-7195	2014-11-25 14:50	2014-11-12	Show	GitHub Exploit DB Packet Storm

215858	6.4	警告	TIBCO Software	-	複数の TIBCO 製品における重要な情報を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2014-7194	2014-11-25 14:49	2014-10-29	Show	GitHub Exploit DB Packet Storm

215859	4	警告	IBM	-	XGS デバイス上で稼働する IBM Security Network Protection における任意のコマンドを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2014-6183	2014-11-25 14:07	2014-11-19	Show	GitHub Exploit DB Packet Storm

215860	4	警告	IBM	-	IBM Sterling Selling and Fulfillment Suite の Sterling Order Management におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2014-4807	2014-11-25 14:07	2014-11-20	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 23, 2026, 4:08 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
293421	-	cisco	webex	Cisco WebEx 4.1 on iOS does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middl…	CWE-20 Improper Input Validation	CVE-2012-6399	2024-11-21 10:46	2013-05-27	Show	GitHub Exploit DB Packet Storm

293422	-	elgg	elgg	engine/lib/access.php in Elgg before 1.8.5 does not properly clear cached access lists during plugin boot, which allows remote attackers to read private entities via unspecified vectors.	CWE-264 Permissions, Privileges, and Access Controls	CVE-2012-6563	2024-11-21 10:46	2013-05-24	Show	GitHub Exploit DB Packet Storm

293423	-	elgg	elgg	engine/lib/users.php in Elgg before 1.8.5 does not properly specify permissions for the useradd action, which allows remote attackers to create arbitrary accounts.	CWE-264 Permissions, Privileges, and Access Controls	CVE-2012-6562	2024-11-21 10:46	2013-05-24	Show	GitHub Exploit DB Packet Storm

293424	-	elgg	elgg	Cross-site scripting (XSS) vulnerability in engine/lib/views.php in Elgg before 1.8.5 allows remote attackers to inject arbitrary web script or HTML via the view parameter to index.php. NOTE: some o…	CWE-79 Cross-site Scripting	CVE-2012-6561	2024-11-21 10:46	2013-05-24	Show	GitHub Exploit DB Packet Storm

293425	-	freenac	freenac	SQL injection vulnerability in deviceadd.php in FreeNAC 3.02 allows remote attackers to execute arbitrary SQL commands via the status parameter.	CWE-20 Improper Input Validation	CVE-2012-6560	2024-11-21 10:46	2013-05-24	Show	GitHub Exploit DB Packet Storm

293426	-	freenac	freenac	Multiple cross-site scripting (XSS) vulnerabilities in FreeNAC 3.02 allow remote attackers to inject arbitrary web script or HTML via the (1) comment, (2) mac, (3) graphtype, (4) name, or (5) type pa…	CWE-79 Cross-site Scripting	CVE-2012-6559	2024-11-21 10:46	2013-05-24	Show	GitHub Exploit DB Packet Storm

293427	-	heaventools	pe_explorer	Heap-based buffer overflow in HeavenTools PE Explorer 1.99 R6 allows remote attackers to execute arbitrary code via the size value for a string in the resource section of a Portable Executable (PE) f…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2012-6558	2024-11-21 10:46	2013-05-24	Show	GitHub Exploit DB Packet Storm

293428	-	zodiacdm	aboutme-plugin	Multiple cross-site scripting (XSS) vulnerabilities in the AboutMe plugin 1.1.1 for Vanilla Forums allow remote attackers to inject arbitrary web script or HTML via the (1) AboutMe/RealName, (2) Abou…	CWE-79 Cross-site Scripting	CVE-2012-6557	2024-11-21 10:46	2013-05-24	Show	GitHub Exploit DB Packet Storm

293429	-	jspautsch	firstlastnames	Multiple cross-site scripting (XSS) vulnerabilities in the FirstLastNames plugin 1.1.1 for Vanilla Forums allow remote attackers to inject arbitrary web script or HTML via the (1) User/FirstName or (…	CWE-79 Cross-site Scripting	CVE-2012-6556	2024-11-21 10:46	2013-05-24	Show	GitHub Exploit DB Packet Storm

293430	-	vanillaforums	latestcomment	Cross-site scripting (XSS) vulnerability in the LatestComment plugin 1.1 for Vanilla Forums allows remote attackers to inject arbitrary web script or HTML via the discussion title.	CWE-79 Cross-site Scripting	CVE-2012-6555	2024-11-21 10:46	2013-05-24	Show	GitHub Exploit DB Packet Storm