Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 27, 2026, 2:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
215971	4	警告	Digium	-	Asterisk Open Source の res_pjsip_pubsub モジュールにおけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2014-6609	2014-11-27 15:46	2014-07-30	Show	GitHub Exploit DB Packet Storm

215972	5	警告	シスコシステムズ	-	Cisco IOS XR におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2014-8004	2014-11-27 15:20	2014-11-25	Show	GitHub Exploit DB Packet Storm

215973	7.5	危険	シスコシステムズ	-	Cisco OpenH264 の decode_slice.cpp における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2014-8002	2014-11-27 15:20	2014-11-24	Show	GitHub Exploit DB Packet Storm

215974	7.5	危険	シスコシステムズ	-	Cisco OpenH264 の decode.cpp におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2014-8001	2014-11-27 15:20	2014-11-24	Show	GitHub Exploit DB Packet Storm

215975	5	警告	Openswan	-	Openswan におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2014-2037	2014-11-27 15:19	2014-02-21	Show	GitHub Exploit DB Packet Storm

215976	5	警告	シーメンス	-	複数のシーメンス製品における任意のファイルを読まれる脆弱性	CWE-200 情報漏えい	CVE-2014-8552	2014-11-27 15:12	2014-11-21	Show	GitHub Exploit DB Packet Storm

215977	10	危険	シーメンス	-	複数のシーメンス製品における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2014-8551	2014-11-27 15:12	2014-11-21	Show	GitHub Exploit DB Packet Storm

215978	7.8	危険	Zoho Corporation	-	ManageEngine OpUtils の ConfigSaveServlet サーブレットにおけるファイルを公開される脆弱性	CWE-200 情報漏えい	CVE-2014-8678	2014-11-27 14:58	2014-11-21	Show	GitHub Exploit DB Packet Storm

215979	5	警告	シスコシステムズ	-	Network Convergence System 6000 デバイス上で稼働する Cisco IOS XR の lighttpd モジュールにおけるサービス運用妨害 (DoS) の脆弱性	CWE-362 競合状態	CVE-2014-8005	2014-11-27 14:53	2014-11-25	Show	GitHub Exploit DB Packet Storm

215980	6.5	警告	Jexperts	-	JExperts Channel Platform におけるアクセス制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2014-8558	2014-11-27 14:46	2014-10-27	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 27, 2026, 4:52 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
293931	-	danielb	finder	Cross-site scripting (XSS) vulnerability in the autocomplete functionality in the Finder module 6.x-1.x before 6.x-1.26, 7.x-1.x, and 7.x-2.x before 7.x-2.0-alpha8 for Drupal allows remote attackers …	CWE-79 Cross-site Scripting	CVE-2012-6645	2024-11-21 10:46	2014-04-8	Show	GitHub Exploit DB Packet Storm

293932	-	clip-bucket	clipbucket	Multiple cross-site scripting (XSS) vulnerabilities in ClipBucket 2.6 allow remote attackers to inject arbitrary web script or HTML via the (1) cat parameter to channels.php, (2) collections.php, (3)…	CWE-79 Cross-site Scripting	CVE-2012-6644	2024-11-21 10:46	2014-04-8	Show	GitHub Exploit DB Packet Storm

293933	-	clip-bucket	clipbucket	Multiple SQL injection vulnerabilities in the update_counter function in includes/functions.php in ClipBucket 2.6 allow remote attackers to execute arbitrary SQL commands via the time parameter to (1…	CWE-89 SQL Injection	CVE-2012-6643	2024-11-21 10:46	2014-04-8	Show	GitHub Exploit DB Packet Storm

293934	-	clip-bucket	clipbucket	Cross-site scripting (XSS) vulnerability in ClipBucket 2.6 allows remote attackers to inject arbitrary web script or HTML via the type parameter to view_channel.php. NOTE: the provenance of this inf…	CWE-79 Cross-site Scripting	CVE-2012-6642	2024-11-21 10:46	2014-04-8	Show	GitHub Exploit DB Packet Storm

293935	-	prestashop	prestashop	Cross-site scripting (XSS) vulnerability in redirect.php in the Socolissimo module (modules/socolissimo/) in PrestaShop before 1.4.7.2 allows remote attackers to inject arbitrary web script or HTML v…	CWE-79 Cross-site Scripting	CVE-2012-6641	2024-11-21 10:46	2014-04-8	Show	GitHub Exploit DB Packet Storm

293936	-	horde	groupware imp	Cross-site scripting (XSS) vulnerability in Horde Internet Mail Program (IMP) before 5.0.22, as used in Horde Groupware Webmail Edition before 4.0.9, allows remote attackers to inject arbitrary web s…	CWE-79 Cross-site Scripting	CVE-2012-6640	2024-11-21 10:46	2014-04-6	Show	GitHub Exploit DB Packet Storm

293937	-	samsung	kies	Buffer overflow in the PrepareSync method in the SyncService.dll ActiveX control in Samsung Kies before 2.5.1.12123_2_7 allows remote attackers to execute arbitrary code via a long string to the pass…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2012-6429	2024-11-21 10:46	2014-04-4	Show	GitHub Exploit DB Packet Storm

293938	-	opensolution	quick_cart quick_cms	Cross-site scripting (XSS) vulnerability in Open Solution Quick.Cms 5.0 and Quick.Cart 6.0, possibly as downloaded before December 19, 2012, allows remote attackers to inject arbitrary web script or …	CWE-79 Cross-site Scripting	CVE-2012-6430	2024-11-21 10:46	2014-03-25	Show	GitHub Exploit DB Packet Storm

293939	-	mongodb	mongodb	The default configuration for MongoDB before 2.3.2 does not validate objects, which allows remote authenticated users to cause a denial of service (crash) or read system memory via a crafted BSON obj…	CWE-20 Improper Input Validation	CVE-2012-6619	2024-11-21 10:46	2014-03-7	Show	GitHub Exploit DB Packet Storm

293940	-	apache adobe	cordova phonegap	Apache Cordova 3.3.0 and earlier and Adobe PhoneGap 2.9.0 and earlier do not anchor the end of domain-name regular expressions, which allows remote attackers to bypass a whitelist protection mechanis…	CWE-20 Improper Input Validation	CVE-2012-6637	2024-11-21 10:46	2014-03-3	Show	GitHub Exploit DB Packet Storm