Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 2, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
216211 2.1 注意 FedUp project
Fedora Project		 - Fedora の fedup におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他 		CVE-2013-6494 2014-12-3 12:21 2013-11-4 Show GitHub Exploit DB Packet Storm
216212 4 警告 filefield project - Drupal 用 FileField モジュールにおけるコンテンツを作成される脆弱性 CWE-200
情報漏えい 		CVE-2014-9156 2014-12-2 18:43 2014-07-16 Show GitHub Exploit DB Packet Storm
216213 4 警告 Avatar Uploader project - Drupal 用 Avatar Uploader モジュールにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2014-9155 2014-12-2 18:43 2014-09-1 Show GitHub Exploit DB Packet Storm
216214 4 警告 notify project - Drupal 用 Notify モジュールにおけるノードのタイトルを取得される脆弱性 CWE-200
情報漏えい 		CVE-2014-9154 2014-12-2 18:42 2014-08-13 Show GitHub Exploit DB Packet Storm
216215 4.3 警告 Services project - Drupal 用 Services モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-9153 2014-12-2 18:40 2014-09-24 Show GitHub Exploit DB Packet Storm
216216 7.5 危険 Services project - Drupal 用 Services モジュールの _user_resource_create 関数におけるパスワードを推測される脆弱性 CWE-255
証明書・パスワード管理 		CVE-2014-9152 2014-12-2 18:40 2014-09-24 Show GitHub Exploit DB Packet Storm
216217 7.5 危険 Services project - Drupal 用 Services モジュールにおけるアクセス権を取得される脆弱性 CWE-Other
その他 		CVE-2014-9151 2014-12-2 18:39 2014-09-24 Show GitHub Exploit DB Packet Storm
216218 5.8 警告 fasttoggle project - Drupal 用 Fasttoggle モジュールにおけるアカウントをブロックされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2014-5268 2014-12-2 18:39 2014-08-6 Show GitHub Exploit DB Packet Storm
216219 5 警告 Wireshark - Wireshark の DOS Sniffer ファイルパーサの wiretap/ngsniffer.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2014-6430 2014-12-2 18:13 2014-09-16 Show GitHub Exploit DB Packet Storm
216220 5 警告 Wireshark - Wireshark の DOS Sniffer ファイルパーサの wiretap/ngsniffer.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2014-6429 2014-12-2 18:13 2014-09-16 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 2, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
296231 - ibm tririga_application_platform Multiple cross-site request forgery (CSRF) vulnerabilities in IBM TRIRIGA Application Platform 2.x and 3.x before 3.3, and 8, allow remote attackers to hijack the authentication of arbitrary users fo… CWE-352
 Origin Validation Error 		CVE-2012-5950 2024-11-21 10:45 2013-04-23 Show GitHub Exploit DB Packet Storm
296232 - ibm tririga_application_platform Multiple cross-site scripting (XSS) vulnerabilities in IBM TRIRIGA Application Platform 2.x and 3.x before 3.3, and 8, allow remote attackers to inject content, and conduct phishing attacks, via vect… CWE-79
Cross-site Scripting 		CVE-2012-5949 2024-11-21 10:45 2013-04-23 Show GitHub Exploit DB Packet Storm
296233 - ibm tririga_application_platform Multiple cross-site scripting (XSS) vulnerabilities in IBM TRIRIGA Application Platform 2.x and 3.x before 3.3, and 8, allow remote attackers to inject arbitrary web script or HTML via vectors involv… CWE-79
Cross-site Scripting 		CVE-2012-5948 2024-11-21 10:45 2013-04-23 Show GitHub Exploit DB Packet Storm
296234 - apache activemq Multiple cross-site scripting (XSS) vulnerabilities in the web demos in Apache ActiveMQ before 5.8.0 allow remote attackers to inject arbitrary web script or HTML via (1) the refresh parameter to Por… CWE-79
Cross-site Scripting 		CVE-2012-6092 2024-11-21 10:45 2013-04-22 Show GitHub Exploit DB Packet Storm
296235 - xmlsoft
opensuse 		libxslt
opensuse 		libxslt before 1.1.28 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via an (1) empty match attribute in a XSL key to the xsltAddKey function in keys.c or (… NVD-CWE-Other
CVE-2012-6139 2024-11-21 10:45 2013-04-13 Show GitHub Exploit DB Packet Storm
296236 - ibm sterling_file_gateway
gentran_integration_suite
sterling_integrator
sterling_b2b_integrator 		Unspecified vulnerability in the CLA2 server in IBM Gentran Integration Suite 4.3, Sterling Integrator 5.0 and 5.1, and Sterling B2B Integrator 5.2, as used in IBM Sterling File Gateway 1.1 through 2… NVD-CWE-noinfo
CVE-2012-5937 2024-11-21 10:45 2013-04-13 Show GitHub Exploit DB Packet Storm
296237 - redhat openstack_folsom
openstack_essex 		Red Hat OpenStack Essex and Folsom creates the /var/log/puppet directory with world-readable permissions, which allows local users to obtain sensitive information such as Puppet log files. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2012-6120 2024-11-21 10:45 2013-04-11 Show GitHub Exploit DB Packet Storm
296238 - omniauth-oauth2_project omniauth-oauth2 Cross-site request forgery (CSRF) vulnerability in the omniauth-oauth2 gem 1.1.1 and earlier for Ruby allows remote attackers to hijack the authentication of users for requests that modify session st… CWE-352
 Origin Validation Error 		CVE-2012-6134 2024-11-21 10:45 2013-04-10 Show GitHub Exploit DB Packet Storm
296239 - fedorahosted cronie File descriptor leak in cronie 1.4.8, when running in certain environments, might allow local users to read restricted files, as demonstrated by reading /etc/crontab. CWE-200
Information Exposure 		CVE-2012-6097 2024-11-21 10:45 2013-04-10 Show GitHub Exploit DB Packet Storm
296240 - redhat
gluster 		storage_native_client
storage_server
storage_management_console
glusterfs 		The GlusterFS functionality in Red Hat Storage Management Console 2.0, Native Client, and Server 2.0 allows local users to overwrite arbitrary files via a symlink attack on multiple temporary files c… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2012-5635 2024-11-21 10:45 2013-04-10 Show GitHub Exploit DB Packet Storm