Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 29, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
215971	9	危険	VMware	-	VMware vCloud Automation Center の VMware Remote Console 機能における権限を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2014-8373	2014-12-15 18:22	2014-12-9	Show	GitHub Exploit DB Packet Storm

215972	4	警告	VMware	-	AirWatch by VMware On-Premise における任意のテナントから組織の情報および統計データを取得される脆弱性	CWE-200 情報漏えい	CVE-2014-8372	2014-12-15 18:21	2014-12-10	Show	GitHub Exploit DB Packet Storm

215973	4.3	警告	レッドハット	-	Red Hat JBoss Portal で使用される JBoss RichFaces におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2014-7852	2014-12-15 18:21	2014-12-9	Show	GitHub Exploit DB Packet Storm

215974	2.1	注意	ヒューレット・パッカード	-	Windows および Linux 上で稼働する HP Smart Update Manager における重要な情報を取得される脆弱性	CWE-noinfo 情報不足	CVE-2014-2608	2014-12-15 18:20	2014-12-9	Show	GitHub Exploit DB Packet Storm

215975	4	警告	IBM	-	IBM WebSphere DataPower XC10 アプライアンスにおけるグリッドデータのアクセス制限を回避される脆弱性	CWE-200 情報漏えい	CVE-2014-6138	2014-12-15 18:19	2014-12-8	Show	GitHub Exploit DB Packet Storm

215976	3.5	注意	IBM	-	IBM WebSphere DataPower XC10 アプライアンスにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2014-6163	2014-12-15 18:18	2014-12-8	Show	GitHub Exploit DB Packet Storm

215977	2.1	注意	IBM	-	IBM WebSphere DataPower XC10 アプライアンスにおける重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2014-6143	2014-12-15 18:17	2014-12-8	Show	GitHub Exploit DB Packet Storm

215978	6	警告	IBM	-	IBM WebSphere DataPower XC10 アプライアンスにおけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2014-3058	2014-12-15 18:17	2014-12-8	Show	GitHub Exploit DB Packet Storm

215979	10	危険	Node.js Foundation IBM	-	IBM Rational Application Developer などの製品で使用される Node.js 用 syntax-error パッケージの index.js における Eval インジェクションの脆弱性	CWE-94 コード・インジェクション	CVE-2014-7192	2014-12-15 18:16	2014-07-15	Show	GitHub Exploit DB Packet Storm

215980	5	警告	IBM	-	複数の IBM 製品の Rule Execution Server の Hosted Transparent Decision Service における任意のファイルを読まれる脆弱性	CWE-200 情報漏えい	CVE-2014-6114	2014-12-15 18:16	2014-12-3	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 29, 2026, 4:16 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
295501	-	moodle	moodle	Multiple cross-site request forgery (CSRF) vulnerabilities in user/messageselect.php in the messaging system in Moodle 2.2.x before 2.2.7, 2.3.x before 2.3.4, and 2.4.x before 2.4.1 allow remote atta…	CWE-352 Origin Validation Error	CVE-2012-6103	2024-11-21 10:45	2013-01-28	Show	GitHub Exploit DB Packet Storm

295502	-	moodle	moodle	lib.php in the Submission comments plugin in the Assignment module in Moodle 2.3.x before 2.3.4 and 2.4.x before 2.4.1 allows remote attackers to read or modify the submission comments (aka feedback …	CWE-264 Permissions, Privileges, and Access Controls	CVE-2012-6102	2024-11-21 10:45	2013-01-28	Show	GitHub Exploit DB Packet Storm

295503	-	moodle	moodle	Multiple open redirect vulnerabilities in Moodle 2.2.x before 2.2.7, 2.3.x before 2.3.4, and 2.4.x before 2.4.1 allow remote attackers to redirect users to arbitrary web sites and conduct phishing at…	CWE-20 Improper Input Validation	CVE-2012-6101	2024-11-21 10:45	2013-01-28	Show	GitHub Exploit DB Packet Storm

295504	-	moodle	moodle	report/outline/index.php in Moodle 2.2.x before 2.2.7, 2.3.x before 2.3.4, and 2.4.x before 2.4.1 does not properly enforce the moodle/user:viewhiddendetails capability requirement, which allows remo…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2012-6100	2024-11-21 10:45	2013-01-28	Show	GitHub Exploit DB Packet Storm

295505	-	moodle	moodle	The moodle1 backup converter in backup/converter/moodle1/lib.php in Moodle 2.1.x before 2.1.10, 2.2.x before 2.2.7, 2.3.x before 2.3.4, and 2.4.x before 2.4.1 does not properly validate pathnames, wh…	CWE-20 Improper Input Validation	CVE-2012-6099	2024-11-21 10:45	2013-01-28	Show	GitHub Exploit DB Packet Storm

295506	-	moodle	moodle	grade/edit/outcome/edit_form.php in Moodle 1.9.x through 1.9.19, 2.1.x before 2.1.10, 2.2.x before 2.2.7, 2.3.x before 2.3.4, and 2.4.x before 2.4.1 does not properly enforce the moodle/grade:manage …	CWE-264 Permissions, Privileges, and Access Controls	CVE-2012-6098	2024-11-21 10:45	2013-01-28	Show	GitHub Exploit DB Packet Storm

295507	-	tp-link	tl-wr841n_firmware tl-wr841n	Directory traversal vulnerability in the web-based management interface on the TP-LINK TL-WR841N router with firmware 3.13.9 build 120201 Rel.54965n and earlier allows remote attackers to read arbitr…	CWE-22 Path Traversal	CVE-2012-6276	2024-11-21 10:45	2013-01-27	Show	GitHub Exploit DB Packet Storm

295508	-	dell	openmanage_server_administrator	Multiple cross-site scripting (XSS) vulnerabilities in Dell OpenManage Server Administrator 6.5.0.1, 7.0.0.1, and 7.1.0.1 allow remote attackers to inject arbitrary web script or HTML via the topic p…	CWE-79 Cross-site Scripting	CVE-2012-6272	2024-11-21 10:45	2013-01-25	Show	GitHub Exploit DB Packet Storm

295509	-	isc redhat canonical	bind enterprise_linux_hpc_node enterprise_linux_server_eus enterprise_linux_server_aus enterprise_linux_desktop enterprise_linux_server enterprise_linux_workstation ubuntu_linux	ISC BIND 9.8.x through 9.8.4-P1 and 9.9.x through 9.9.2-P1, in certain configurations involving DNS64 with a Response Policy Zone that lacks an AAAA rewrite rule, allows remote attackers to cause a d…	CWE-20 Improper Input Validation	CVE-2012-5689	2024-11-21 10:45	2013-01-25	Show	GitHub Exploit DB Packet Storm

295510	-	proftpd	proftpd	ProFTPD before 1.3.5rc1, when using the UserOwner directive, allows local users to modify the ownership of arbitrary files via a race condition and a symlink attack on the (1) MKD or (2) XMKD command…	CWE-362 Race Condition	CVE-2012-6095	2024-11-21 10:45	2013-01-25	Show	GitHub Exploit DB Packet Storm