Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 27, 2026, 2:01 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
216001 5 警告 Digium - Asterisk Open Source および Certified Asterisk における ACL 制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-8412 2014-11-26 15:57 2014-11-20 Show GitHub Exploit DB Packet Storm
216002 4.3 警告 jQuery - jQuery UI の Tooltip ウィジェットの jquery.ui.tooltip.js のデフォルトコンテンツオプションにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-6662 2014-11-26 15:50 2012-11-27 Show GitHub Exploit DB Packet Storm
216003 3.5 注意 Liferay - Liferay Portal Enterprise Edition におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-8349 2014-11-26 15:27 2014-11-14 Show GitHub Exploit DB Packet Storm
216004 7.1 危険 Xen プロジェクト - Xen の arch/x86/mm.c 内の do_mmu_update 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2014-9030 2014-11-26 15:20 2014-11-20 Show GitHub Exploit DB Packet Storm
216005 4 警告 MantisBT Group - MantisBT における $g_download_attachments_threshold および $g_view_attachments_threshold の制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-8988 2014-11-26 13:46 2014-11-16 Show GitHub Exploit DB Packet Storm
216006 3.5 注意 MantisBT Group - MantisBT の Configuration Report ページのフィルタのセレクションリストにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-8986 2014-11-26 13:45 2014-06-1 Show GitHub Exploit DB Packet Storm
216007 5 警告 ARM Ltd. (旧 Offspark) - PolarSSL におけるダウングレード攻撃を実行される脆弱性 CWE-310
暗号の問題
CVE-2014-8627 2014-11-26 11:57 2014-10-22 Show GitHub Exploit DB Packet Storm
216008 6.4 警告 Canonical - Ubuntu の apparmor パッケージの apparmor_parser における AppArmor ポリシーを回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-1424 2014-11-25 20:32 2014-11-20 Show GitHub Exploit DB Packet Storm
216009 5 警告 Moodle - Moodle の LTI モジュールにおける任意のメッセージの生成を誘発される脆弱性 CWE-20
不適切な入力確認
CVE-2014-9060 2014-11-25 18:39 2014-11-17 Show GitHub Exploit DB Packet Storm
216010 4.3 警告 Moodle - Moodle の lib/setup.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-9059 2014-11-25 18:38 2014-11-17 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 27, 2026, 4:52 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
294381 - redhat openshift_origin
openshift
node-util/www/html/restorer.php in the Red Hat OpenShift Origin before 1.0.5-3 allows remote attackers to execute arbitrary commands via a crafted uuid in the PATH_INFO. CWE-20
 Improper Input Validation 
CVE-2012-5646 2024-11-21 10:45 2013-02-25 Show GitHub Exploit DB Packet Storm
294382 - infradead openconnect Multiple stack-based buffer overflows in http.c in OpenConnect before 4.08 allow remote VPN gateways to cause a denial of service (application crash) via a long (1) hostname, (2) path, or (3) cookie … CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2012-6128 2024-11-21 10:45 2013-02-25 Show GitHub Exploit DB Packet Storm
294383 - qt
canonical
opensuse
qt
ubuntu_linux
opensuse
The QSslSocket::sslErrors function in Qt before 4.6.5, 4.7.x before 4.7.6, 4.8.x before 4.8.5, when using certain versions of openSSL, uses an "incompatible structure layout" that can read memory fro… CWE-310
Cryptographic Issues
CVE-2012-6093 2024-11-21 10:45 2013-02-25 Show GitHub Exploit DB Packet Storm
294384 - bigantsoft bigant_im_message_server Multiple stack-based buffer overflows in AntDS.exe in BigAntSoft BigAnt IM Message Server allow remote attackers to have an unspecified impact via (1) the filename header in an SCH request or (2) the… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2012-6275 2024-11-21 10:45 2013-02-24 Show GitHub Exploit DB Packet Storm
294385 - bigantsoft bigant_im_message_server BigAntSoft BigAnt IM Message Server does not require authentication for file uploading, which allows remote attackers to create arbitrary files under AntServer\DocData\Public via unspecified vectors. CWE-287
Improper Authentication
CVE-2012-6274 2024-11-21 10:45 2013-02-24 Show GitHub Exploit DB Packet Storm
294386 - bigantsoft bigant_im_message_server SQL injection vulnerability in BigAntSoft BigAnt IM Message Server allows remote attackers to execute arbitrary SQL commands via an SHU (aka search user) request. CWE-89
SQL Injection
CVE-2012-6273 2024-11-21 10:45 2013-02-24 Show GitHub Exploit DB Packet Storm
294387 - ibm websphere_message_broker IBM WebSphere Message Broker 6.1 before 6.1.0.12, 7.0 before 7.0.0.6, and 8.0 before 8.0.0.2, when the Parse Query Strings option is enabled on an HTTPInput node, allows remote attackers to cause a d… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2012-5953 2024-11-21 10:45 2013-02-20 Show GitHub Exploit DB Packet Storm
294388 - ibm websphere_message_broker IBM WebSphere Message Broker 6.1 before 6.1.0.12, 7.0 before 7.0.0.6, and 8.0 before 8.0.0.2 does not validate Basic Authentication credentials before proceeding to WS-Addressing and WS-Security oper… CWE-287
Improper Authentication
CVE-2012-5952 2024-11-21 10:45 2013-02-20 Show GitHub Exploit DB Packet Storm
294389 - ibm netezza Cross-site scripting (XSS) vulnerability in the WebAdmin application 6.0.5, 6.0.8, and 7.0 before P2 in IBM Netezza allows remote authenticated users to inject content, and conduct phishing attacks, … CWE-79
Cross-site Scripting
CVE-2012-5941 2024-11-21 10:45 2013-02-20 Show GitHub Exploit DB Packet Storm
294390 - ibm netezza The WebAdmin application 6.0.5, 6.0.8, and 7.0 before P2 in IBM Netezza, when SSL is not enabled, allows remote attackers to discover credentials by sniffing the network during the authentication pro… CWE-287
Improper Authentication
CVE-2012-5940 2024-11-21 10:45 2013-02-20 Show GitHub Exploit DB Packet Storm