Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 2, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
216371 6.5 警告 Dolibarr ERP & CRM - Dolibarr ERP/CRM における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2014-7137 2014-11-25 16:39 2014-10-4 Show GitHub Exploit DB Packet Storm
216372 6.8 警告 Huawei - 複数の Huawei 製品におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2014-5395 2014-11-25 16:18 2014-08-6 Show GitHub Exploit DB Packet Storm
216373 6.8 警告 オラクル - Oracle Database Server の JPublisher コンポーネントにおける機密性に影響のある脆弱性 CWE-200
情報漏えい 		CVE-2014-6477 2014-11-25 15:56 2014-11-6 Show GitHub Exploit DB Packet Storm
216374 5 警告 Wireshark - Wireshark の TN5250 ディセクタの epan/dissectors/packet-tn5250.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2014-8714 2014-11-25 15:50 2014-11-12 Show GitHub Exploit DB Packet Storm
216375 5 警告 Wireshark - Wireshark の NCP ディセクタの epan/dissectors/packet-ncp2222.inc におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2014-8713 2014-11-25 15:49 2014-11-12 Show GitHub Exploit DB Packet Storm
216376 5 警告 Wireshark - Wireshark の NCP ディセクタの epan/dissectors/packet-ncp2222.inc におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2014-8712 2014-11-25 15:49 2014-11-12 Show GitHub Exploit DB Packet Storm
216377 5 警告 Wireshark - Wireshark の AMQP ディセクタの epan/dissectors/packet-amqp.c における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2014-8711 2014-11-25 15:48 2014-11-12 Show GitHub Exploit DB Packet Storm
216378 7.2 危険 アドバンテック株式会社 - Advantech WebAccess におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2014-8388 2014-11-25 15:43 2014-11-20 Show GitHub Exploit DB Packet Storm
216379 5 警告 シスコシステムズ - Cisco Unified Communications Manager IM and Presence Service におけるユーザアカウントを列挙される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2014-8000 2014-11-25 15:30 2014-11-19 Show GitHub Exploit DB Packet Storm
216380 4 警告 TIBCO Software - 複数の TIBCO Spotfire 製品の TIBCO Spotfire Web Player における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2014-7195 2014-11-25 14:50 2014-11-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 2, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
296201 - roundup-tracker roundup Cross-site scripting (XSS) vulnerability in the history display in Roundup before 1.4.20 allows remote attackers to inject arbitrary web script or HTML via a username, related to generating a link. CWE-79
Cross-site Scripting 		CVE-2012-6130 2024-11-21 10:45 2014-04-12 Show GitHub Exploit DB Packet Storm
296202 - roundup-tracker roundup Cross-site scripting (XSS) vulnerability in Roundup before 1.4.20 allows remote attackers to inject arbitrary web script or HTML via the otk parameter. CWE-79
Cross-site Scripting 		CVE-2012-6132 2024-11-21 10:45 2014-04-11 Show GitHub Exploit DB Packet Storm
296203 - theforeman foreman Multiple SQL injection vulnerabilities in Foreman before 1.0.2 allow remote attackers to execute arbitrary SQL commands via unspecified parameters to (1) app/models/hostext/search.rb or (2) app/model… CWE-89
SQL Injection 		CVE-2012-5648 2024-11-21 10:45 2014-04-4 Show GitHub Exploit DB Packet Storm
296204 - apache couchdb Cross-site scripting (XSS) vulnerability in the Futon UI in Apache CouchDB before 1.0.4, 1.1.x before 1.1.2, and 1.2.x before 1.2.1 allows remote attackers to inject arbitrary web script or HTML via … CWE-79
Cross-site Scripting 		CVE-2012-5650 2024-11-21 10:45 2014-03-19 Show GitHub Exploit DB Packet Storm
296205 - apache
mochiweb_project 		couchdb
mochiweb 		Directory traversal vulnerability in the partition2 function in mochiweb_util.erl in MochiWeb before 2.4.0, as used in Apache CouchDB before 1.0.4, 1.1.x before 1.1.2, and 1.2.x before 1.2.1, allows … CWE-22
Path Traversal 		CVE-2012-5641 2024-11-21 10:45 2014-03-19 Show GitHub Exploit DB Packet Storm
296206 - imagecms imagecms SQL injection vulnerability in ImageCMS before 4.2 allows remote authenticated administrators to execute arbitrary SQL commands via the q parameter to admin/admin_search/. NOTE: this can be leverage… CWE-89
SQL Injection 		CVE-2012-6290 2024-11-21 10:45 2014-03-12 Show GitHub Exploit DB Packet Storm
296207 - hp linux_imaging_and_printing_project HP Linux Imaging and Printing (HPLIP) before 3.13.2 uses world-writable permissions for /var/log/hp and /var/log/hp/tmp, which allows local users to delete log files via standard filesystem operation… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2012-6108 2024-11-21 10:45 2014-02-15 Show GitHub Exploit DB Packet Storm
296208 - redhat satellite
satellite_5_managed_db
spacewalk-java 		Multiple cross-site scripting (XSS) vulnerabilities in systems/sdc/notes.jsp in Spacewalk and Red Hat Network (RHN) Satellite 5.6 allow remote attackers to inject arbitrary web script or HTML via the… CWE-79
Cross-site Scripting 		CVE-2012-6149 2024-11-21 10:45 2014-02-15 Show GitHub Exploit DB Packet Storm
296209 - pidgin pidgin The Yahoo! protocol plugin in libpurple in Pidgin before 2.10.8 does not properly validate UTF-8 data, which allows remote attackers to cause a denial of service (application crash) via crafted byte … CWE-20
 Improper Input Validation  		CVE-2012-6152 2024-11-21 10:45 2014-02-7 Show GitHub Exploit DB Packet Storm
296210 - zabbix zabbix libs/zbxmedia/eztexting.c in Zabbix 1.8.x before 1.8.18rc1, 2.0.x before 2.0.8rc1, and 2.1.x before 2.1.2 does not properly set the CURLOPT_SSL_VERIFYHOST option for libcurl, which allows man-in-the-… CWE-310
Cryptographic Issues 		CVE-2012-6086 2024-11-21 10:45 2014-01-30 Show GitHub Exploit DB Packet Storm