Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 20, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
216101 5 警告 ProcessOne - ejabberd における暗号化せずに接続を確立される脆弱性 CWE-310
暗号の問題 		CVE-2014-8760 2014-10-29 11:15 2014-10-12 Show GitHub Exploit DB Packet Storm
216102 4.6 警告 Electric Cloud - Electric Cloud ElectricCommander における任意の Perl コードを実行される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2014-7180 2014-10-29 11:04 2014-10-22 Show GitHub Exploit DB Packet Storm
216103 4.3 警告 Lester Chan - WordPress 用 WP-Ban プラグインにおける IP ブラックリストを回避される脆弱性 CWE-20
不適切な入力確認 		CVE-2014-6230 2014-10-29 10:54 2014-09-17 Show GitHub Exploit DB Packet Storm
216104 6.8 警告 Julius Davies - Not Yet Commons SSL の Certificates.java における SSL サーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-3604 2014-10-29 10:42 2014-09-6 Show GitHub Exploit DB Packet Storm
216105 3.5 注意 vBulletin Solutions, Inc. - vBulletin の admincp/apilog.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-2021 2014-10-29 10:33 2014-10-13 Show GitHub Exploit DB Packet Storm
216106 6.9 警告 HAMSTER soft. - Hamster Free ZIP Archiver における任意のコードを実行される脆弱性 CWE-Other
その他 		CVE-2014-0619 2014-10-28 18:12 2014-10-16 Show GitHub Exploit DB Packet Storm
216107 5 警告 IBM - IBM Sametime Classic Meeting Server における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2014-4766 2014-10-28 18:04 2014-10-17 Show GitHub Exploit DB Packet Storm
216108 4.3 警告 Megapolis - Megapolis.Portal Manager におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-8381 2014-10-28 17:53 2014-10-16 Show GitHub Exploit DB Packet Storm
216109 7.8 危険 サムスン - Samsung モバイルデバイスの Remote Controls 機能におけるサービス運用妨害 (DoS) の脆弱性 CWE-94
コード・インジェクション 		CVE-2014-8346 2014-10-28 17:44 2014-10-27 Show GitHub Exploit DB Packet Storm
216110 4.9 警告 Centrify - Linux および UNIX 上で稼動する Centrify Server Suite および Centrify DirectControl の adsetgroups における root 権限で任意のファイルを読まれる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2014-7298 2014-10-28 17:43 2014-10-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 20, 2026, 4:14 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
295701 - cisco telepresence_system_software
telepresence_system_1300_65
telepresence_system_3000
telepresence_system_3010
telepresence_system_3200
telepresence_system_3210
telepresence_system_t3 		An unspecified API on Cisco TelePresence Immersive Endpoint Devices before 1.9.1 allows remote attackers to execute arbitrary commands by leveraging certain adjacency and sending a malformed request … CWE-78
OS Command  		CVE-2012-3074 2024-11-21 10:40 2012-07-12 Show GitHub Exploit DB Packet Storm
295702 - cisco telepresence_multipoint_switch_software
telepresence_multipoint_switch
telepresence_system_software
telepresence_system_1300_65
telepresence_system_3000
telepresence_system_3010
tel… 		The IP implementation on Cisco TelePresence Multipoint Switch before 1.8.1, Cisco TelePresence Manager before 1.9.0, and Cisco TelePresence Recording Server 1.8 and earlier allows remote attackers to… NVD-CWE-Other
CVE-2012-3073 2024-11-21 10:40 2012-07-12 Show GitHub Exploit DB Packet Storm
295703 - astaro
sophos 		security_gateway_software
security_gateway
unified_threat_management_software
unified_threat_management 		Cross-site scripting (XSS) vulnerability in the Backup/Restore component in WebAdmin in Astaro Security Gateway before 8.305 allows remote attackers to inject arbitrary web script or HTML via the "Co… CWE-79
Cross-site Scripting 		CVE-2012-3238 2024-11-21 10:40 2012-07-10 Show GitHub Exploit DB Packet Storm
295704 - synel sy-780\/a_time_\&_attendance_terminal The Synel SY-780/A Time & Attendance terminal allows remote attackers to cause a denial of service (device hang) via network traffic to port (1) 1641, (2) 3734, or (3) 3735. CWE-399
 Resource Management Errors 		CVE-2012-2970 2024-11-21 10:40 2012-07-10 Show GitHub Exploit DB Packet Storm
295705 - elitecore cyberoam_unified_threat_management The default configuration of Cyberoam UTM appliances uses the same Certification Authority certificate and same private key across different customers' installations, which makes it easier for man-in… CWE-310
Cryptographic Issues 		CVE-2012-3372 2024-11-21 10:40 2012-07-9 Show GitHub Exploit DB Packet Storm
295706 - pidgin pidgin Buffer overflow in markup.c in the MXit protocol plugin in libpurple in Pidgin before 2.10.5 allows remote attackers to execute arbitrary code via a crafted inline image in a message. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2012-3374 2024-11-21 10:40 2012-07-7 Show GitHub Exploit DB Packet Storm
295707 - invensys wonderware_application_server
dasabcip
dassidirect
daserver_runtime_components
intouch\/wonderware_application_server 		Stack-based buffer overflow in slssvc.exe before 58.x in Invensys Wonderware SuiteLink in the Invensys System Platform software suite, as used in InTouch/Wonderware Application Server IT before 10.5 … CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2012-3007 2024-11-21 10:40 2012-07-5 Show GitHub Exploit DB Packet Storm
295708 - redhat dtach Integer signedness error in attach.c in dtach 0.8 allows remote attackers to obtain sensitive information from daemon stack memory in opportunistic circumstances by reading application data after an … CWE-189
Numeric Errors 		CVE-2012-3368 2024-11-21 10:40 2012-07-4 Show GitHub Exploit DB Packet Storm
295709 - anl bcfg2 The Trigger plugin in bcfg2 1.2.x before 1.2.3 allows remote attackers with root access to the client to execute arbitrary commands via shell metacharacters in the UUID field to the server process (b… CWE-78
OS Command  		CVE-2012-3366 2024-11-21 10:40 2012-07-4 Show GitHub Exploit DB Packet Storm
295710 - webatall web\@all Cross-site scripting (XSS) vulnerability in search.php in web@all 2.0, as downloaded before May 30, 2012, allows remote attackers to inject arbitrary web script or HTML via the _text[title] parameter. CWE-79
Cross-site Scripting 		CVE-2012-3232 2024-11-21 10:40 2012-06-30 Show GitHub Exploit DB Packet Storm