Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 10, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
216411 3.5 注意 IBM - IBM Curam Social Program Management におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-3013 2014-06-20 14:05 2014-06-9 Show GitHub Exploit DB Packet Storm
216412 3.5 注意 IBM - IBM Curam Social Program Management における CRLF インジェクションの脆弱性 CWE-Other
その他
CVE-2014-3012 2014-06-20 14:05 2014-06-9 Show GitHub Exploit DB Packet Storm
216413 3.5 注意 IBM - IBM WebSphere Portal におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-0910 2014-06-20 14:04 2014-06-6 Show GitHub Exploit DB Packet Storm
216414 4.3 警告 Novell - Linux 上で稼働する Novell Open Enterprise Server の iPrint におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-0599 2014-06-20 13:47 2014-05-29 Show GitHub Exploit DB Packet Storm
216415 10 危険 Novell - Linux 上で稼働する Novell Open Enterprise Server の iPrint におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2014-0598 2014-06-20 13:47 2014-05-29 Show GitHub Exploit DB Packet Storm
216416 4 警告 シスコシステムズ - Cisco Adaptive Security Appliance ソフトウェアの WebVPN ポータルにおける重要な情報を取得される脆弱性 CWE-20
不適切な入力確認
CVE-2014-2151 2014-06-20 12:18 2014-06-17 Show GitHub Exploit DB Packet Storm
216417 9.3 危険 Wireshark - Wireshark の libpcap ファイルパーサの wiretap/libpcap.c における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2014-4174 2014-06-20 12:17 2014-04-9 Show GitHub Exploit DB Packet Storm
216418 9.3 危険 マイクロソフト - Microsoft Internet Explorer 9 から 11 における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2014-2782 2014-06-20 11:53 2014-06-10 Show GitHub Exploit DB Packet Storm
216419 4.3 警告 マイクロソフト - Microsoft Malware Protection Engine の mpengine.dll におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2014-2779 2014-06-20 11:51 2014-06-17 Show GitHub Exploit DB Packet Storm
216420 7.5 危険 WebTitan - WebTitan の categories-x.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2014-4307 2014-06-20 11:35 2014-04-7 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 10, 2026, 4:58 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
293781 - o-dyn collabtive manageuser.php in Collabtive before 0.7.6 allows remote authenticated users, and possibly unauthenticated attackers, to bypass intended access restrictions and upload and execute arbitrary files by u… CWE-20
 Improper Input Validation 
CVE-2012-2670 2024-11-21 10:39 2012-06-17 Show GitHub Exploit DB Packet Storm
293782 - openldap openldap libraries/libldap/tls_m.c in OpenLDAP, possibly 2.4.31 and earlier, when using the Mozilla NSS backend, always uses the default cipher suite even when TLSCipherSuite is set, which might cause OpenLDA… CWE-200
Information Exposure
CVE-2012-2668 2024-11-21 10:39 2012-06-17 Show GitHub Exploit DB Packet Storm
293783 - dlitz pycrypto PyCrypto before 2.6 does not produce appropriate prime numbers when using an ElGamal scheme to generate a key, which reduces the signature space or public key space and makes it easier for attackers … CWE-310
Cryptographic Issues
CVE-2012-2417 2024-11-21 10:39 2012-06-17 Show GitHub Exploit DB Packet Storm
293784 - michael_dehaan cobbler Incomplete blacklist vulnerability in action_power.py in Cobbler 2.2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) username or (2) password fields to the… NVD-CWE-Other
CVE-2012-2395 2024-11-21 10:39 2012-06-16 Show GitHub Exploit DB Packet Storm
293785 - dolphin-browser dolphin_browser_hd
dolphin_for_pad
The Dolphin Browser HD application before 7.6 and Dolphin for Pad application before 1.0.1 for Android do not properly implement the WebView class, which allows remote attackers to obtain sensitive i… CWE-200
Information Exposure
CVE-2012-2635 2024-11-21 10:39 2012-06-16 Show GitHub Exploit DB Packet Storm
293786 - newsgator feeddemon Cross-site scripting (XSS) vulnerability in FeedDemon before 4.0, when the feed preview option is enabled, allows remote attackers to inject arbitrary web script or HTML via a feed. CWE-79
Cross-site Scripting
CVE-2012-2634 2024-11-21 10:39 2012-06-16 Show GitHub Exploit DB Packet Storm
293787 - wordpress wassup_plugin Cross-site scripting (XSS) vulnerability in wassup.php in the WassUp plugin before 1.8.3.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the User-Agent HTTP header. CWE-79
Cross-site Scripting
CVE-2012-2633 2024-11-21 10:39 2012-06-16 Show GitHub Exploit DB Packet Storm
293788 - seil b1_firmware
x2
b1
x1
x86_firmware
SEIL routers with firmware SEIL/x86 1.00 through 2.35, SEIL/X1 2.30 through 3.75, SEIL/X2 2.30 through 3.75, and SEIL/B1 2.30 through 3.75, when the http-proxy and application-gateway features are en… NVD-CWE-Other
CVE-2012-2632 2024-11-21 10:39 2012-06-16 Show GitHub Exploit DB Packet Storm
293789 - atmarkweb \@web_shoppingcart_t
\@web_shoppingcart
Cross-site scripting (XSS) vulnerability in WEBLOGIC @WEB ShoppingCart before 1.5.2.0, and @WEB ShoppingCart T 1.5.0.1 and earlier, allows remote attackers to inject arbitrary web script or HTML via … CWE-79
Cross-site Scripting
CVE-2012-2631 2024-11-21 10:39 2012-06-15 Show GitHub Exploit DB Packet Storm
293790 - bradfordnetworks network_sentry_appliance_software
network_sentry_appliance
The agent in Bradford Network Sentry before 5.3.3 does not require authentication for messages, which allows remote attackers to trigger the display of arbitrary text on a workstation via a crafted p… CWE-287
Improper Authentication
CVE-2012-2606 2024-11-21 10:39 2012-06-14 Show GitHub Exploit DB Packet Storm