Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 19, 2026, 10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
216221 7.5 危険 X2Engine - X2Engine の protected/controllers/SiteController.php における PHP オブジェクトインジェクション攻撃を実行される脆弱性 CWE-94
コード・インジェクション
CVE-2014-5297 2014-10-14 15:51 2014-07-31 Show GitHub Exploit DB Packet Storm
216222 4 警告 MAYO project - Drupal 用 MAYO テーマにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-8079 2014-10-14 15:45 2014-02-11 Show GitHub Exploit DB Packet Storm
216223 3.5 注意 Drupal - Drupal 用 Print モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-8078 2014-10-14 15:45 2014-04-2 Show GitHub Exploit DB Packet Storm
216224 3.5 注意 Drupal - Drupal 用 NewsFlash テーマにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-8077 2014-10-14 15:44 2014-03-5 Show GitHub Exploit DB Packet Storm
216225 3.5 注意 Drupal - Drupal 用 Professional テーマにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-8076 2014-10-14 15:44 2014-04-23 Show GitHub Exploit DB Packet Storm
216226 3.5 注意 Drupal - Drupal 用 Tribune モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-8075 2014-10-14 15:44 2014-01-29 Show GitHub Exploit DB Packet Storm
216227 2.1 注意 GNU Project - GnuPG などの製品で使用される Libgcrypt における鍵抽出攻撃を実行される脆弱性 CWE-200
情報漏えい
CVE-2014-5270 2014-10-14 15:12 2014-08-8 Show GitHub Exploit DB Packet Storm
216228 4.3 警告 ヒューレット・パッカード - HP Records Manager におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-4661 2014-10-14 14:50 2014-10-7 Show GitHub Exploit DB Packet Storm
216229 7.5 危険 ヒューレット・パッカード
Linux
- UNIX 上で稼動する HP Operations Manager における任意のコードを実行される脆弱性 CWE-noinfo
情報不足
CVE-2014-2649 2014-10-14 14:49 2014-10-8 Show GitHub Exploit DB Packet Storm
216230 10 危険 ヒューレット・パッカード
Linux
- UNIX 上で稼動する HP Operations Manager における任意のコードを実行される脆弱性 CWE-noinfo
情報不足
CVE-2014-2648 2014-10-14 14:48 2014-10-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 19, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
292681 - splunk splunk Cross-site scripting (XSS) vulnerability in Splunk Web in Splunk 5.0.0 through 5.0.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. CWE-79
Cross-site Scripting
CVE-2012-6447 2024-11-21 10:46 2014-01-24 Show GitHub Exploit DB Packet Storm
292682 - kernel util-linux (a) mount and (b) umount in util-linux 2.14.1, 2.17.2, and probably other versions allow local users to determine the existence of restricted directories by (1) using the --guess-fstype command-line … CWE-200
Information Exposure
CVE-2013-0157 2024-11-21 10:46 2014-01-22 Show GitHub Exploit DB Packet Storm
292683 - wordpress wordpress wp-admin/includes/class-wp-posts-list-table.php in WordPress before 3.3.3 does not properly restrict excerpt-view access, which allows remote authenticated users to obtain sensitive information by vi… CWE-264
Permissions, Privileges, and Access Controls
CVE-2012-6635 2024-11-21 10:46 2014-01-21 Show GitHub Exploit DB Packet Storm
292684 - wordpress wordpress wp-admin/media-upload.php in WordPress before 3.3.3 allows remote attackers to obtain sensitive information or bypass intended media-attachment restrictions via a post_id value. CWE-264
Permissions, Privileges, and Access Controls
CVE-2012-6634 2024-11-21 10:46 2014-01-21 Show GitHub Exploit DB Packet Storm
292685 - wordpress wordpress Cross-site scripting (XSS) vulnerability in wp-includes/default-filters.php in WordPress before 3.3.3 allows remote attackers to inject arbitrary web script or HTML via an editable slug field. CWE-79
Cross-site Scripting
CVE-2012-6633 2024-11-21 10:46 2014-01-21 Show GitHub Exploit DB Packet Storm
292686 - vessio netbill Multiple cross-site scripting (XSS) vulnerabilities in Vessio NetBill 1.2 allow remote attackers to inject arbitrary web script or HTML via the (1) full name or (2) file title to accounts/admin/index… CWE-79
Cross-site Scripting
CVE-2012-6632 2024-11-21 10:46 2014-01-17 Show GitHub Exploit DB Packet Storm
292687 - vessio netbill Cross-site request forgery (CSRF) vulnerability in accounts/admin/index.php in Vessio NetBill 1.2 allows remote attackers to hijack the authentication of administrators for requests that add accounts… CWE-352
 Origin Validation Error
CVE-2012-6631 2024-11-21 10:46 2014-01-17 Show GitHub Exploit DB Packet Storm
292688 - rick_mead media_library_categories Multiple cross-site scripting (XSS) vulnerabilities in the Media Library Categories plugin 1.1.1 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) bulk parameter… CWE-79
Cross-site Scripting
CVE-2012-6630 2024-11-21 10:46 2014-01-17 Show GitHub Exploit DB Packet Storm
292689 - xyzscripts newsletter_manager Multiple cross-site request forgery (CSRF) vulnerabilities in the Newsletter Manager plugin 1.0.2 and earlier for WordPress allow remote attackers to hijack the authentication of administrators for r… CWE-352
 Origin Validation Error
CVE-2012-6629 2024-11-21 10:46 2014-01-17 Show GitHub Exploit DB Packet Storm
292690 - xyzscripts newsletter_manager Multiple cross-site scripting (XSS) vulnerabilities in the Newsletter Manager plugin before 1.0.2 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) xyz_em_campNa… CWE-79
Cross-site Scripting
CVE-2012-6628 2024-11-21 10:46 2014-01-17 Show GitHub Exploit DB Packet Storm