Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 20, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
216441 4.8 警告 シスコシステムズ - Cisco IOS XE におけるルートインジェクション攻撃を実行される脆弱性 CWE-Other
その他 		CVE-2014-3405 2014-10-14 17:32 2014-10-10 Show GitHub Exploit DB Packet Storm
216442 4.3 警告 シスコシステムズ - Cisco IOS XE の Autonomic Networking Infrastructure コンポーネントにおける無効なメッセージの受信を誘発される脆弱性 CWE-310
暗号の問題 		CVE-2014-3404 2014-10-14 17:31 2014-10-10 Show GitHub Exploit DB Packet Storm
216443 5 警告 シスコシステムズ - Cisco IOS XE の Autonomic Networking Infrastructure コンポーネントにおけるデバイスになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-3403 2014-10-14 17:30 2014-10-10 Show GitHub Exploit DB Packet Storm
216444 4.3 警告 Wojtek Kaniewski - libgadu におけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2013-4488 2014-10-14 16:56 2013-11-1 Show GitHub Exploit DB Packet Storm
216445 5 警告 X2Engine - X2Engine の FileUploadsFilter.php におけるアップロードブラックリストを回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2014-5298 2014-10-14 15:52 2014-08-5 Show GitHub Exploit DB Packet Storm
216446 7.5 危険 X2Engine - X2Engine の protected/controllers/SiteController.php における PHP オブジェクトインジェクション攻撃を実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2014-5297 2014-10-14 15:51 2014-07-31 Show GitHub Exploit DB Packet Storm
216447 4 警告 MAYO project - Drupal 用 MAYO テーマにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-8079 2014-10-14 15:45 2014-02-11 Show GitHub Exploit DB Packet Storm
216448 3.5 注意 Drupal - Drupal 用 Print モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-8078 2014-10-14 15:45 2014-04-2 Show GitHub Exploit DB Packet Storm
216449 3.5 注意 Drupal - Drupal 用 NewsFlash テーマにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-8077 2014-10-14 15:44 2014-03-5 Show GitHub Exploit DB Packet Storm
216450 3.5 注意 Drupal - Drupal 用 Professional テーマにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-8076 2014-10-14 15:44 2014-04-23 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 20, 2026, 4:14 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
294401 - cyberlink streamauthor Multiple untrusted search path vulnerabilities in CyberLink StreamAuthor 4.0 build 3308 allow local users to gain privileges via a Trojan horse (1) mfc71loc.dll or (2) mfc71enu.dll file in the curren… NVD-CWE-Other
CVE-2012-4757 2024-11-21 10:43 2012-09-6 Show GitHub Exploit DB Packet Storm
294402 - cyberlink labelprint Multiple untrusted search path vulnerabilities in CyberLink LabelPrint 2.5.3602 allow local users to gain privileges via a Trojan horse (1) mfc71loc.dll or (2) mfc71enu.dll file in the current workin… NVD-CWE-Other
CVE-2012-4756 2024-11-21 10:43 2012-09-6 Show GitHub Exploit DB Packet Storm
294403 - scitools understand Untrusted search path vulnerability in SciTools Understand before 2.6 build 600 allows local users to gain privileges via a Trojan horse wintab32.dll file in the current working directory, as demonst… NVD-CWE-Other
CVE-2012-4755 2024-11-21 10:43 2012-09-6 Show GitHub Exploit DB Packet Storm
294404 - mindjet mindmanager_2012 Multiple untrusted search path vulnerabilities in MindManager 2012 10.0.493 allow local users to gain privileges via a Trojan horse (1) ssgp.dll or (2) dwmapi.dll file in the current working director… NVD-CWE-Other
CVE-2012-4754 2024-11-21 10:43 2012-09-6 Show GitHub Exploit DB Packet Storm
294405 - owncloud owncloud Multiple cross-site request forgery (CSRF) vulnerabilities in ownCloud before 4.0.5 allow remote attackers to hijack the authentication of unspecified victims via unknown vectors. CWE-352
 Origin Validation Error 		CVE-2012-4753 2024-11-21 10:43 2012-09-6 Show GitHub Exploit DB Packet Storm
294406 - owncloud owncloud appconfig.php in ownCloud before 4.0.6 does not properly restrict access, which allows remote authenticated users to edit app configurations via unspecified vectors. NOTE: this can be leveraged by u… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2012-4752 2024-11-21 10:43 2012-09-6 Show GitHub Exploit DB Packet Storm
294407 - mozilla bugzilla Bugzilla 2.x and 3.x through 3.6.11, 3.7.x and 4.0.x before 4.0.8, 4.1.x and 4.2.x before 4.2.3, and 4.3.x before 4.3.3 stores potentially sensitive information under the web root with insufficient a… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2012-4747 2024-11-21 10:43 2012-09-4 Show GitHub Exploit DB Packet Storm
294408 - zte zxdsl Cross-site request forgery (CSRF) vulnerability in accessaccount.cgi in ZTE ZXDSL 831IIV7.5.0a_Z29_OV allows remote attackers to hijack the authentication of administrators for requests that change t… CWE-352
 Origin Validation Error 		CVE-2012-4746 2024-11-21 10:43 2012-09-1 Show GitHub Exploit DB Packet Storm
294409 - the_collective acuity_cms Cross-site scripting (XSS) vulnerability in admin/login.asp in Acuity CMS 2.6.2 allows remote attackers to inject arbitrary web script or HTML via the UserName parameter. CWE-79
Cross-site Scripting 		CVE-2012-4745 2024-11-21 10:43 2012-09-1 Show GitHub Exploit DB Packet Storm
294410 - eos.pe siche_search_module Cross-site scripting (XSS) vulnerability in ssearch.php in the Siche search module 0.5 for Zeroboard allows remote attackers to inject arbitrary web script or HTML via the search parameter. CWE-79
Cross-site Scripting 		CVE-2012-4744 2024-11-21 10:43 2012-09-1 Show GitHub Exploit DB Packet Storm