Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 17, 2026, 4 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
216361	4.3	警告	HL7	-	HL7 C-CDA の CDA.xsl におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2014-5452	2014-09-3 18:25	2013-04-14	Show	GitHub Exploit DB Packet Storm

216362	4.3	警告	HL7	-	HL7 C-CDA の CDA.xsl における重要な URL を取得される脆弱性	CWE-200 情報漏えい	CVE-2014-3862	2014-09-3 18:25	2014-04-14	Show	GitHub Exploit DB Packet Storm

216363	4.3	警告	HL7	-	HL7 C-CDA の CDA.xsl におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2014-3861	2014-09-3 18:24	2014-04-14	Show	GitHub Exploit DB Packet Storm

216364	4	警告	Amazon.com, Inc.	-	Android 版アプリ Kindle における SSL サーバ証明書の検証不備の脆弱性	CWE-Other その他	CVE-2014-3908	2014-09-3 18:07	2014-08-29	Show	GitHub Exploit DB Packet Storm

216365	3.3	注意	Android for MSM	-	Code Aurora Forum リリースの Android 用の Qualcomm Innovation Center (QuIC) init スクリプトにおけるファイルのメタデータを変更される脆弱性	CWE-59 リンク解釈の問題	CVE-2013-6124	2014-09-3 17:17	2013-10-15	Show	GitHub Exploit DB Packet Storm

216366	5	警告	Android for MSM	-	Code Aurora Forum リリースの Android 用の特定の Qualcomm Innovation Center パッチにおけるディスク暗号化のパスワードを取得される脆弱性	CWE-Other その他	CVE-2013-2599	2014-09-3 17:16	2013-07-3	Show	GitHub Exploit DB Packet Storm

216367	7.2	危険	Android for MSM	-	MSM デバイス用 Qualcomm Innovation Center Android コントリビューションなどで使用される Linux Kernel 用 acdb オーディオドライバにおけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2013-2597	2014-09-3 15:45	2013-06-21	Show	GitHub Exploit DB Packet Storm

216368	7.2	危険	Android for MSM	-	MSM デバイス用 Qualcomm Innovation Center Android コントリビューションなどで使用される Linux Kernel 用 MSM カメラドライバにおける権限を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2013-2595	2014-09-3 15:44	2013-05-1	Show	GitHub Exploit DB Packet Storm

216369	4.3	警告	Linux	-	Linux Kernel の virt/kvm/iommu.c 内の kvm_iommu_map_pages 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-189 数値処理の問題	CVE-2014-3601	2014-09-3 15:12	2014-08-19	Show	GitHub Exploit DB Packet Storm

216370	2.1	注意	Ganeti project	-	Ganeti の lib/client/gnt_cluster.py の _UpgradeBeforeConfigurationChange 関数における SSL キーを取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2014-5247	2014-09-3 14:27	2014-08-5	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 17, 2026, 4:15 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
292541	-	wordpress	wordpress	wp-admin/media-upload.php in WordPress before 3.3.3 allows remote attackers to obtain sensitive information or bypass intended media-attachment restrictions via a post_id value.	CWE-264 Permissions, Privileges, and Access Controls	CVE-2012-6634	2024-11-21 10:46	2014-01-21	Show	GitHub Exploit DB Packet Storm

292542	-	wordpress	wordpress	Cross-site scripting (XSS) vulnerability in wp-includes/default-filters.php in WordPress before 3.3.3 allows remote attackers to inject arbitrary web script or HTML via an editable slug field.	CWE-79 Cross-site Scripting	CVE-2012-6633	2024-11-21 10:46	2014-01-21	Show	GitHub Exploit DB Packet Storm

292543	-	vessio	netbill	Multiple cross-site scripting (XSS) vulnerabilities in Vessio NetBill 1.2 allow remote attackers to inject arbitrary web script or HTML via the (1) full name or (2) file title to accounts/admin/index…	CWE-79 Cross-site Scripting	CVE-2012-6632	2024-11-21 10:46	2014-01-17	Show	GitHub Exploit DB Packet Storm

292544	-	vessio	netbill	Cross-site request forgery (CSRF) vulnerability in accounts/admin/index.php in Vessio NetBill 1.2 allows remote attackers to hijack the authentication of administrators for requests that add accounts…	CWE-352 Origin Validation Error	CVE-2012-6631	2024-11-21 10:46	2014-01-17	Show	GitHub Exploit DB Packet Storm

292545	-	rick_mead	media_library_categories	Multiple cross-site scripting (XSS) vulnerabilities in the Media Library Categories plugin 1.1.1 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) bulk parameter…	CWE-79 Cross-site Scripting	CVE-2012-6630	2024-11-21 10:46	2014-01-17	Show	GitHub Exploit DB Packet Storm

292546	-	xyzscripts	newsletter_manager	Multiple cross-site request forgery (CSRF) vulnerabilities in the Newsletter Manager plugin 1.0.2 and earlier for WordPress allow remote attackers to hijack the authentication of administrators for r…	CWE-352 Origin Validation Error	CVE-2012-6629	2024-11-21 10:46	2014-01-17	Show	GitHub Exploit DB Packet Storm

292547	-	xyzscripts	newsletter_manager	Multiple cross-site scripting (XSS) vulnerabilities in the Newsletter Manager plugin before 1.0.2 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) xyz_em_campNa…	CWE-79 Cross-site Scripting	CVE-2012-6628	2024-11-21 10:46	2014-01-17	Show	GitHub Exploit DB Packet Storm

292548	-	xyzscripts	newsletter_manager	Cross-site scripting (XSS) vulnerability in admin/test_mail.php in the Newsletter Manager plugin 1.0.2 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the…	CWE-79 Cross-site Scripting	CVE-2012-6627	2024-11-21 10:46	2014-01-17	Show	GitHub Exploit DB Packet Storm

292549	-	brian_cabunac	browser_to_email_phone_message_system	SQL injection vulnerability in verify-user.php in b2ePMS 1.0 allows remote attackers to execute arbitrary SQL commands via the username field.	CWE-89 SQL Injection	CVE-2012-6626	2024-11-21 10:46	2014-01-17	Show	GitHub Exploit DB Packet Storm

292550	-	vasthtml	forumpress	SQL injection vulnerability in fs-admin/fs-admin.php in the ForumPress WP Forum Server plugin before 1.7.4 for WordPress allows remote attackers to execute arbitrary SQL commands via the groupid para…	CWE-89 SQL Injection	CVE-2012-6625	2024-11-21 10:46	2014-01-17	Show	GitHub Exploit DB Packet Storm