Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 19, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
216351 4.3 警告 IBM - IBM Tivoli Federated Identity Manager におけるオープンリダイレクトの脆弱性 CWE-Other
その他
CVE-2014-3097 2014-10-3 16:50 2014-09-29 Show GitHub Exploit DB Packet Storm
216352 10 危険 IBM - IBM WebSphere DataPower XC10 アプライアンスにおける管理者権限を取得される脆弱性 CWE-noinfo
情報不足
CVE-2014-3060 2014-10-3 16:49 2014-07-31 Show GitHub Exploit DB Packet Storm
216353 10 危険 IBM - IBM WebSphere DataPower XC10 アプライアンスの管理コンソールにおける管理者権限を取得される脆弱性 CWE-noinfo
情報不足
CVE-2014-3059 2014-10-3 16:49 2014-07-31 Show GitHub Exploit DB Packet Storm
216354 6.8 警告 Debian - APT の apt-get の HTTP トランスポートコードにおけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2014-6273 2014-10-3 15:51 2014-09-23 Show GitHub Exploit DB Packet Storm
216355 5 警告 Willy Tarreau - HAProxy の proto_http.c 内の http_request_forward_body 関数における整数オーバーフローの脆弱性 CWE-189
数値処理の問題
CVE-2014-6269 2014-10-3 15:36 2014-09-2 Show GitHub Exploit DB Packet Storm
216356 4.3 警告 Plone Foundation
Zope Foundation
- Plone で使用される Zope の AccessControl/AuthEncoding.py におけるパスワードを取得される脆弱性 CWE-362
競合状態
CVE-2012-5507 2014-10-3 15:06 2012-11-6 Show GitHub Exploit DB Packet Storm
216357 4.3 警告 ヒューレット・パッカード - HP System Management Homepage におけるクリックジャッキング攻撃を実行される脆弱性 CWE-20
不適切な入力確認
CVE-2014-2642 2014-10-3 15:06 2014-09-30 Show GitHub Exploit DB Packet Storm
216358 5 警告 Plone Foundation - Plone の python_scripts.py におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2012-5506 2014-10-3 15:06 2012-11-6 Show GitHub Exploit DB Packet Storm
216359 6 警告 ヒューレット・パッカード - HP System Management Homepage におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2014-2641 2014-10-3 15:05 2014-09-30 Show GitHub Exploit DB Packet Storm
216360 5 警告 Plone Foundation - Plone の atat.py におけるプライベートデータ構造を読まれる脆弱性 CWE-200
情報漏えい
CVE-2012-5505 2014-10-3 14:53 2012-11-6 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 19, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
294631 - bit51 better-wp-security Cross-site scripting (XSS) vulnerability in inc/admin/content.php in the Better WP Security (better_wp_security) plugin before 3.2.5 for WordPress allows remote attackers to inject arbitrary web scri… CWE-79
Cross-site Scripting
CVE-2012-4263 2024-11-21 10:42 2012-08-14 Show GitHub Exploit DB Packet Storm
294632 - hccgmbh mycare2x Multiple cross-site scripting (XSS) vulnerabilities in myCare2x allow remote attackers to inject arbitrary web script or HTML via the (1) name_last, (2) name_first, (3) name_middle, or (4) name_maide… CWE-79
Cross-site Scripting
CVE-2012-4262 2024-11-21 10:42 2012-08-14 Show GitHub Exploit DB Packet Storm
294633 - hccgmbh mycare2x SQL injection vulnerability in modules/patient/mycare2x_pat_info.php in myCare2x allows remote attackers to execute arbitrary SQL commands via the lang parameter. CWE-89
SQL Injection
CVE-2012-4261 2024-11-21 10:42 2012-08-14 Show GitHub Exploit DB Packet Storm
294634 - hccgmbh mycare2x Multiple SQL injection vulnerabilities in myCare2x allow remote attackers to execute arbitrary SQL commands via the (1) aktion or (2) callurl parameter to modules/patient/mycare2x_pat_info.php; (3) d… CWE-89
SQL Injection
CVE-2012-4260 2024-11-21 10:42 2012-08-14 Show GitHub Exploit DB Packet Storm
294635 - c4b xphone_unified_communications_2011 Cross-site scripting (XSS) vulnerability in the contacts in (1) XPhone UC Web and the (2) web frontend for XPhone Virtual Directory in C4B XPhone Unified Communications (UC) 2011 Web 4.1.890S R1 allo… CWE-79
Cross-site Scripting
CVE-2012-4259 2024-11-21 10:42 2012-08-14 Show GitHub Exploit DB Packet Storm
294636 - myrephp myre_real_estate_software Multiple SQL injection vulnerabilities in MYRE Real Estate Software (2012 Q2) allow remote attackers to execute arbitrary SQL commands via the (1) link_idd parameter to 1_mobile/listings.php or (2) u… CWE-89
SQL Injection
CVE-2012-4258 2024-11-21 10:42 2012-08-14 Show GitHub Exploit DB Packet Storm
294637 - george_karpouzas yet_another_question_\&_answer_system Yaqas (Yet Another Question & Answer System) 1.0 Alpha 1 allows remote attackers to obtain sensitive information via an invalid character in the PHPSESSID, which reveals the installation path in an e… CWE-200
Information Exposure
CVE-2012-4257 2024-11-21 10:42 2012-08-14 Show GitHub Exploit DB Packet Storm
294638 - joobi com_jnews The jNews (com_jnews) component 7.5.1 for Joomla! allows remote attackers to obtain sensitive information via the emailsearch parameter, which reveals the installation path in an error message. CWE-200
Information Exposure
CVE-2012-4256 2024-11-21 10:42 2012-08-14 Show GitHub Exploit DB Packet Storm
294639 - mysqldumper mysqldumper MySQLDumper 1.24.4 allows remote attackers to obtain sensitive information via a direct request to learn/cubemail/refresh_dblist.php, which reveals the installation path in an error message. CWE-200
Information Exposure
CVE-2012-4255 2024-11-21 10:42 2012-08-14 Show GitHub Exploit DB Packet Storm
294640 - mysqldumper mysqldumper MySQLDumper 1.24.4 allows remote attackers to obtain sensitive information (Notices) via a direct request to (1) learn/cubemail/restore.php or (2) learn/cubemail/dump.php. CWE-200
Information Exposure
CVE-2012-4254 2024-11-21 10:42 2012-08-14 Show GitHub Exploit DB Packet Storm