Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 28, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
216071 4.3 警告 OpenStack - OpenStack Dashboard Horizon Orchestration dashboard の Orchestration/Stack セクションにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-3473 2014-12-4 18:09 2014-07-23 Show GitHub Exploit DB Packet Storm
216072 4.3 警告 Sunhater - SunHater KCFinder の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-3988 2014-12-4 10:42 2014-06-17 Show GitHub Exploit DB Packet Storm
216073 7.2 危険 Thomson Reuters - Thomson Reuters Fixed Assets CS のインストーラにおける任意のコードを実行される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-9141 2014-12-4 10:42 2014-12-1 Show GitHub Exploit DB Packet Storm
216074 4.3 警告 Kennziffer.com - TYPO3 用 Questionnaire (ke_questionnaire) エクステンションにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-4956 2014-12-3 17:00 2011-10-9 Show GitHub Exploit DB Packet Storm
216075 7.5 危険 Kennziffer.com - TYPO3 用 Questionnaire (ke_questionnaire) エクステンションにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-4957 2014-12-3 16:59 2011-10-9 Show GitHub Exploit DB Packet Storm
216076 5.8 警告 アップル
GNU Project
- GNU patch の util.c におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2010-4651 2014-12-3 16:33 2011-03-11 Show GitHub Exploit DB Packet Storm
216077 7.2 危険 CCH group - CCH Wolters Kluwer ProSystem fx Engagement におけるローカルシステムの権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-9113 2014-12-3 16:17 2014-11-26 Show GitHub Exploit DB Packet Storm
216078 5 警告 GNU Project - GNU Cpio の process_copy_in 関数におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2014-9112 2014-12-3 16:08 2014-11-27 Show GitHub Exploit DB Packet Storm
216079 4 警告 CSSJockey.com - WordPress 用 SupportEzzy Ticket System プラグインにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-9179 2014-12-3 16:08 2014-10-12 Show GitHub Exploit DB Packet Storm
216080 7.5 危険 Smarty Pants Plugins - WordPress 用 Smarty Pants Plugins SP Client Document Manager プラグインにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2014-9178 2014-12-3 16:07 2014-11-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
294801 - c2enterprise c2_webresource Cross-site scripting (XSS) vulnerability in fileview.asp in C2 WebResource allows remote attackers to inject arbitrary web script or HTML via the File parameter. CWE-79
Cross-site Scripting
CVE-2013-0125 2024-11-21 10:46 2013-04-5 Show GitHub Exploit DB Packet Storm
294802 - zeroclipboard_project zeroclipboard Cross-site scripting (XSS) vulnerability in ZeroClipboard before 1.1.4 allows remote attackers to inject arbitrary web script or HTML via "the clipText returned from the flash object," a different vu… CWE-79
Cross-site Scripting
CVE-2012-6550 2024-11-21 10:46 2013-04-2 Show GitHub Exploit DB Packet Storm
294803 - coreftp coreftp Multiple buffer overflows in Core FTP before 2.2 build 1769 allow remote FTP servers to execute arbitrary code or cause a denial of service (application crash) via a long directory name in a (1) DELE… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2013-0130 2024-11-21 10:46 2013-03-30 Show GitHub Exploit DB Packet Storm
294804 - novell sentinel_log_manager Novell Sentinel Log Manager before 1.2.0.3 allows remote attackers to create data retention policies via a crafted text/x-gwt-rpc request to novelllogmanager/datastorageservice.rpc, and allows remote… CWE-264
Permissions, Privileges, and Access Controls
CVE-2012-6534 2024-11-21 10:46 2013-03-30 Show GitHub Exploit DB Packet Storm
294805 - askia askiaweb Multiple cross-site scripting (XSS) vulnerabilities in the administration interface in ASKIA askiaweb allow remote attackers to inject arbitrary web script or HTML via the (1) Number or (2) UpdatePag… CWE-79
Cross-site Scripting
CVE-2013-0124 2024-11-21 10:46 2013-03-22 Show GitHub Exploit DB Packet Storm
294806 - askia askiaweb Multiple SQL injection vulnerabilities in the administration interface in ASKIA askiaweb allow remote attackers to execute arbitrary SQL commands via (1) the nHistoryId parameter to WebProd/pages/pgH… CWE-89
SQL Injection
CVE-2013-0123 2024-11-21 10:46 2013-03-22 Show GitHub Exploit DB Packet Storm
294807 - verizon fios_actiontec_mi424wr-gen31_router_firmware
fios_actiontec_mi424wr-gen31_router
Multiple cross-site request forgery (CSRF) vulnerabilities in index.cgi on the Verizon FIOS Actiontec MI424WR-GEN3I router with firmware 40.19.36 allow remote attackers to hijack the authentication o… CWE-352
 Origin Validation Error
CVE-2013-0126 2024-11-21 10:46 2013-03-22 Show GitHub Exploit DB Packet Storm
294808 - linux linux_kernel The isofs_export_encode_fh function in fs/isofs/export.c in the Linux kernel before 3.6 does not initialize a certain structure member, which allows local users to obtain sensitive information from k… CWE-200
Information Exposure
CVE-2012-6549 2024-11-21 10:46 2013-03-16 Show GitHub Exploit DB Packet Storm
294809 - linux
redhat
linux_kernel
enterprise_linux
The udf_encode_fh function in fs/udf/namei.c in the Linux kernel before 3.6 does not initialize a certain structure member, which allows local users to obtain sensitive information from kernel heap m… CWE-200
Information Exposure
CVE-2012-6548 2024-11-21 10:46 2013-03-16 Show GitHub Exploit DB Packet Storm
294810 - linux linux_kernel The __tun_chr_ioctl function in drivers/net/tun.c in the Linux kernel before 3.6 does not initialize a certain structure, which allows local users to obtain sensitive information from kernel stack me… CWE-200
Information Exposure
CVE-2012-6547 2024-11-21 10:46 2013-03-16 Show GitHub Exploit DB Packet Storm