Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 20, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
216141 4.3 警告 CBI Referral Manager - WordPress 用 CBI Referral Manager プラグインの getNetworkSites.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-4517 2014-10-27 18:55 2014-04-25 Show GitHub Exploit DB Packet Storm
216142 4.3 警告 waisir - WordPress 用 Alipay プラグインの includes/api_tenpay/inc.tenpay_notify.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-4514 2014-10-27 18:54 2014-01-28 Show GitHub Exploit DB Packet Storm
216143 6.5 警告 GB Plugins - WordPress 用 GB Gallery Slideshow プラグインの GBgallery.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2014-8375 2014-10-27 18:54 2014-08-9 Show GitHub Exploit DB Packet Storm
216144 7.5 危険 シトリックス・システムズ - Citrix NetScaler Application Delivery Controller および NetScaler Gateway の管理インターフェースにおける任意のコードを実行される脆弱性 CWE-noinfo
情報不足
CVE-2014-7140 2014-10-27 18:53 2014-09-17 Show GitHub Exploit DB Packet Storm
216145 4.3 警告 dotProject - dotProject におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-5702 2014-10-27 18:53 2012-11-15 Show GitHub Exploit DB Packet Storm
216146 5 警告 Banana Dance - Banana Dance の functions/suggest.php における任意のデータベースの情報を読まれる脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-5243 2014-10-27 18:53 2012-12-19 Show GitHub Exploit DB Packet Storm
216147 6.8 警告 Banana Dance - Banana Dance の functions/suggest.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2012-5242 2014-10-27 18:52 2012-12-19 Show GitHub Exploit DB Packet Storm
216148 7.5 危険 OS4Ed - openSIS における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2014-8366 2014-10-27 18:52 2014-06-26 Show GitHub Exploit DB Packet Storm
216149 4.3 警告 Xornic - Xornic Contact Us におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-8365 2014-10-27 18:51 2014-06-8 Show GitHub Exploit DB Packet Storm
216150 4.3 警告 Joomla! - Joomla! 用 JChatSocial コンポーネントにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-3863 2014-10-27 18:14 2014-07-7 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 20, 2026, 4:14 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
295581 - ushahidi ushahidi_platform The installer in the Ushahidi Platform before 2.5 omits certain calls to the exit function, which allows remote attackers to obtain administrative privileges via unspecified vectors. NVD-CWE-Other
CVE-2012-3475 2024-11-21 10:40 2012-08-13 Show GitHub Exploit DB Packet Storm
295582 - ushahidi ushahidi_platform The comments API in application/libraries/api/MY_Comments_Api_Object.php in the Ushahidi Platform before 2.5 allows remote attackers to obtain sensitive information about the e-mail address, IP addre… CWE-200
Information Exposure
CVE-2012-3474 2024-11-21 10:40 2012-08-13 Show GitHub Exploit DB Packet Storm
295583 - ushahidi ushahidi_platform The (1) reports API and (2) administration feature in the comments API in the Ushahidi Platform before 2.5 do not require authentication, which allows remote attackers to generate reports and organiz… CWE-287
Improper Authentication
CVE-2012-3473 2024-11-21 10:40 2012-08-13 Show GitHub Exploit DB Packet Storm
295584 - ushahidi ushahidi_platform The email API in application/libraries/api/MY_Email_Api_Object.php in the Ushahidi Platform before 2.5 does not require authentication, which allows remote attackers to list, delete, or organize mess… CWE-287
Improper Authentication
CVE-2012-3472 2024-11-21 10:40 2012-08-13 Show GitHub Exploit DB Packet Storm
295585 - ushahidi ushahidi_platform Multiple SQL injection vulnerabilities in the edit functions in (1) application/controllers/admin/reports.php and (2) application/controllers/members/reports.php in the Ushahidi Platform before 2.5 a… CWE-89
SQL Injection
CVE-2012-3471 2024-11-21 10:40 2012-08-13 Show GitHub Exploit DB Packet Storm
295586 - ushahidi ushahidi_platform Multiple SQL injection vulnerabilities in application/libraries/api/MY_Countries_Api_Object.php in the Ushahidi Platform before 2.5 allow remote attackers to execute arbitrary SQL commands via vector… CWE-89
SQL Injection
CVE-2012-3470 2024-11-21 10:40 2012-08-13 Show GitHub Exploit DB Packet Storm
295587 - ushahidi ushahidi_platform Multiple SQL injection vulnerabilities in the Ushahidi Platform before 2.5 allow remote attackers to execute arbitrary SQL commands via vectors related to (1) the messages admin functionality in appl… CWE-89
SQL Injection
CVE-2012-3469 2024-11-21 10:40 2012-08-13 Show GitHub Exploit DB Packet Storm
295588 - ushahidi ushahidi_platform Multiple SQL injection vulnerabilities in the Ushahidi Platform before 2.5 allow remote attackers to execute arbitrary SQL commands via vectors related to (1) the verify function in application/contr… CWE-89
SQL Injection
CVE-2012-3468 2024-11-21 10:40 2012-08-13 Show GitHub Exploit DB Packet Storm
295589 - caucho resin Caucho Quercus, as distributed in Resin before 4.0.29, allows remote attackers to bypass intended restrictions on filename extensions for created files via a %00 sequence in a pathname within an HTTP… CWE-264
Permissions, Privileges, and Access Controls
CVE-2012-2969 2024-11-21 10:40 2012-08-13 Show GitHub Exploit DB Packet Storm
295590 - caucho resin Directory traversal vulnerability in Caucho Quercus, as distributed in Resin before 4.0.29, allows remote attackers to create files in arbitrary directories via a .. (dot dot) in a pathname within an… CWE-22
Path Traversal
CVE-2012-2968 2024-11-21 10:40 2012-08-13 Show GitHub Exploit DB Packet Storm