Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 2, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
216401	6.9	警告	オラクル	-	Oracle Java SE における Hotspot に関する脆弱性	CWE-noinfo 情報不足	CVE-2014-6468	2014-11-21 18:01	2014-10-14	Show	GitHub Exploit DB Packet Storm

216402	2.1	注意	Zarafa Fedora Project	-	Zarafa および WebApp の WebAccess における重要な情報を取得される脆弱性	CWE-310 暗号の問題	CVE-2014-0103	2014-11-21 18:00	2014-06-30	Show	GitHub Exploit DB Packet Storm

216403	2.1	注意	Zarafa	-	Zarafa WebAccess および WebApp における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2014-5447	2014-11-21 17:59	2014-08-24	Show	GitHub Exploit DB Packet Storm

216404	2.1	注意	Zarafa	-	Zarafa における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2014-5448	2014-11-21 17:59	2014-08-24	Show	GitHub Exploit DB Packet Storm

216405	2.1	注意	Zarafa	-	Zarafa WebAccess および WebApp における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2014-5449	2014-11-21 17:59	2014-08-24	Show	GitHub Exploit DB Packet Storm

216406	6.5	警告	Ward Mundy & Associates LLC.	-	Incredible PBX の reminders/index.php における任意のコマンドを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2014-9001	2014-11-21 14:32	2014-10-21	Show	GitHub Exploit DB Packet Storm

216407	7.5	危険	DigitalVidhya	-	DigitalVidhya Online Examination System の Photo 機能における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2014-8997	2014-11-21 14:23	2014-11-13	Show	GitHub Exploit DB Packet Storm

216408	4.3	警告	Nibbleblog	-	Nibbleblog におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2014-8996	2014-11-21 14:13	2014-07-3	Show	GitHub Exploit DB Packet Storm

216409	5	警告	Maarch	-	Maarch LetterBox における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2014-8995	2014-11-21 14:07	2014-11-17	Show	GitHub Exploit DB Packet Storm

216410	5	警告	ZTE	-	ZTE ZXHN H108L のファームウェアにおける CWMP 設定を変更される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2014-8493	2014-11-21 13:37	2014-11-14	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 3, 2026, 4:18 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
296481	7.8	HIGH Local	soapbox_project	soapbox	Soapbox through 0.3.1: Sandbox bypass - runs a second instance of Soapbox within a sandboxed Soapbox.	CWE-269 Improper Privilege Management	CVE-2012-6302	2024-11-21 10:45	2020-01-25	Show	GitHub Exploit DB Packet Storm

296482	7.5	HIGH Network	freeciv	freeciv	Freeciv before 2.3.3 allows remote attackers to cause a denial of service via a crafted packet.	CWE-400 Uncontrolled Resource Consumption	CVE-2012-6083	2024-11-21 10:45	2020-01-24	Show	GitHub Exploit DB Packet Storm

296483	9.8	CRITICAL Network	ht_editor_project	ht_editor	HT Editor 2.0.20 has a Remote Stack Buffer Overflow Vulnerability	CWE-787 Out-of-bounds Write	CVE-2012-5867	2024-11-21 10:45	2020-01-24	Show	GitHub Exploit DB Packet Storm

296484	9.8	CRITICAL Network	babygekko	babygekko	BabyGekko before 1.2.4 allows PHP file inclusion.	CWE-20 Improper Input Validation	CVE-2012-5699	2024-11-21 10:45	2020-01-24	Show	GitHub Exploit DB Packet Storm

296485	8.8	HIGH Network	babygekko	babygekko	BabyGekko before 1.2.4 has SQL injection.	CWE-89 SQL Injection	CVE-2012-5698	2024-11-21 10:45	2020-01-24	Show	GitHub Exploit DB Packet Storm

296486	9.8	CRITICAL Network	bulbsecurity	smartphone_pentest_framework	Bulb Security Smartphone Pentest Framework (SPF) 0.1.2 through 0.1.4 allows remote attackers to execute arbitrary commands via shell metacharacters in the hostingPath parameter to (1) SEAttack.pl or …	CWE-78 OS Command	CVE-2012-5878	2024-11-21 10:45	2020-01-4	Show	GitHub Exploit DB Packet Storm

296487	8.8	HIGH Adjacent	bulbsecurity	smartphone_pentest_framework	Bulb Security Smartphone Pentest Framework (SPF) before 0.1.3 allows remote attackers to execute arbitrary commands via shell metacharacters in the ipAddressTB parameter to (1) remoteAttack.pl or (2)…	CWE-78 OS Command	CVE-2012-5693	2024-11-21 10:45	2020-01-4	Show	GitHub Exploit DB Packet Storm

296488	7.5	HIGH Network	openbsd	textproc\/isearch	The isearch package (textproc/isearch) before 1.47.01nb1 uses the tempnam() function to create insecure temporary files into a publicly-writable area (/tmp).	CWE-269 CWE-459 Improper Privilege Management Incomplete Cleanup	CVE-2012-5663	2024-11-21 10:45	2019-12-31	Show	GitHub Exploit DB Packet Storm

296489	7.5	HIGH Network	freeciv fedoraproject	freeciv fedora	A denial of service flaw was found in the way the server component of Freeciv before 2.3.4 processed certain packets. A remote attacker could send a specially-crafted packet that, when processed woul…	CWE-400 Uncontrolled Resource Consumption	CVE-2012-5645	2024-11-21 10:45	2019-12-31	Show	GitHub Exploit DB Packet Storm

296490	7.5	HIGH Network	gnome debian	gnome_keyring debian_linux	gnome-keyring does not discard stored secrets when using gnome_keyring_lock_all_sync function	CWE-20 Improper Input Validation	CVE-2012-6111	2024-11-21 10:45	2019-12-21	Show	GitHub Exploit DB Packet Storm