Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 15, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
216451 5 警告 Debian
Python Software Foundation		 - Python Image Library および Pillow の PIL/IcnsImagePlugin.py におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2014-3589 2014-08-27 12:25 2014-08-13 Show GitHub Exploit DB Packet Storm
216452 4.3 警告 Apache Software Foundation - Apache ActiveMQ の scheduled.jsp におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-1879 2014-08-26 17:47 2013-03-21 Show GitHub Exploit DB Packet Storm
216453 7.1 危険 IBM - IBM GCM16 および GCM32 Global Console Manager スイッチのファームウェアの systest.php における任意のコマンドを実行される脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2014-3085 2014-08-26 17:42 2014-07-14 Show GitHub Exploit DB Packet Storm
216454 6.3 警告 IBM - IBM GCM16 および GCM32 Global Console Manager スイッチのファームウェアの prodtest.php における任意のファイルを読まれる脆弱性 CWE-200
情報漏えい 		CVE-2014-3081 2014-08-26 17:42 2014-07-14 Show GitHub Exploit DB Packet Storm
216455 6.8 警告 マイクロソフト
アドビシステムズ
Google		 - Adobe Flash Player および Adobe AIR におけるクロスサイトリクエストフォージェリ攻撃を実行される脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2014-5333 2014-08-26 17:40 2014-08-12 Show GitHub Exploit DB Packet Storm
216456 6.8 警告 GNU Project
IBM		 - GnuTLS の lib/gnutls_handshake.c の read_server_hello 関数におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2014-3466 2014-08-26 17:40 2014-05-29 Show GitHub Exploit DB Packet Storm
216457 7.5 危険 Schrack - Schrack Technik microControl のファームウェアの Web インターフェースにおけるアクセス権を取得される脆弱性 CWE-255
証明書・パスワード管理 		CVE-2014-5396 2014-08-26 17:32 2014-07-10 Show GitHub Exploit DB Packet Storm
216458 5 警告 WP Content Source Control project - WordPress 用 WP Content Source Control プラグインの downloadfiles/download.php の file_get_contents 関数におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2014-5368 2014-08-26 16:13 2014-08-19 Show GitHub Exploit DB Packet Storm
216459 7.2 危険 Little Kernel project - MSM デバイス用 Qualcomm Innovation Center Android コントリビューションなどで配布される Little Kernel ブートローダにおけるデバイスロックおよびカーネルの署名の制限を回避される脆弱性 CWE-287
不適切な認証 		CVE-2014-4325 2014-08-26 15:45 2014-08-5 Show GitHub Exploit DB Packet Storm
216460 1.9 注意 Little Kernel project - MSM デバイス用 Qualcomm Innovation Center Android コントリビューションなどで配布される Little Kernel ブートローダにおける制御可能なメモリ領域にデータを書き込まれる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2014-0974 2014-08-26 15:39 2014-07-23 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 15, 2026, 4:28 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
293471 - uninett radsecproxy radsecproxy before 1.6.1 does not properly verify certificates when there are configuration blocks with CA settings that are unrelated to the block being used for verifying the certificate chain, whi… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2012-4523 2024-11-21 10:43 2012-11-20 Show GitHub Exploit DB Packet Storm
293472 - cups-pk-helper_project cups-pk-helper cups-pk-helper before 0.2.3 does not properly wrap the (1) cupsGetFile and (2) cupsPutFile function calls, which allows user-assisted remote attackers to read or overwrite sensitive files using CUPS … CWE-264
Permissions, Privileges, and Access Controls 		CVE-2012-4510 2024-11-21 10:43 2012-11-20 Show GitHub Exploit DB Packet Storm
293473 - matomo matomo Cross-site scripting (XSS) vulnerability in Piwik before 1.9 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. CWE-79
Cross-site Scripting 		CVE-2012-4541 2024-11-21 10:43 2012-11-19 Show GitHub Exploit DB Packet Storm
293474 - viewvc
debian 		viewvc
debian_linux 		Cross-site scripting (XSS) vulnerability in the "extra" details in the DiffSource._get_row function in lib/viewvc.py in ViewVC 1.0.x before 1.0.13 and 1.1.x before 1.1.16 allows remote authenticated … CWE-79
Cross-site Scripting 		CVE-2012-4533 2024-11-21 10:43 2012-11-19 Show GitHub Exploit DB Packet Storm
293475 - steve_j_baker plib Stack-based buffer overflow in the error function in ssg/ssgParser.cxx in PLIB 1.8.5 allows remote attackers to execute arbitrary code via a crafted 3d model file that triggers a long error message, … CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2012-4552 2024-11-21 10:43 2012-11-19 Show GitHub Exploit DB Packet Storm
293476 - djangoproject django The django.http.HttpRequest.get_host function in Django 1.3.x before 1.3.4 and 1.4.x before 1.4.2 allows remote attackers to generate and display arbitrary URLs via crafted username and password Host… CWE-20
 Improper Input Validation  		CVE-2012-4520 2024-11-21 10:43 2012-11-19 Show GitHub Exploit DB Packet Storm
293477 - patterninsight pattern_insight Cross-site scripting (XSS) vulnerability in the Keyword Search page in the web interface in Pattern Insight 2.3 allows remote attackers to inject arbitrary web script or HTML via crafted characters t… CWE-79
Cross-site Scripting 		CVE-2012-4950 2024-11-21 10:43 2012-11-19 Show GitHub Exploit DB Packet Storm
293478 - agilefleet fleetcommander
fleetcommander_kiosk 		Agile FleetCommander and FleetCommander Kiosk before 4.08 store database credentials in cleartext, which allows remote attackers to obtain sensitive information via requests to unspecified pages. CWE-310
Cryptographic Issues 		CVE-2012-4947 2024-11-21 10:43 2012-11-19 Show GitHub Exploit DB Packet Storm
293479 - agilefleet fleetcommander
fleetcommander_kiosk 		Agile FleetCommander and FleetCommander Kiosk before 4.08 use an XOR format for password encryption, which makes it easier for context-dependent attackers to obtain sensitive information by reading a… CWE-310
Cryptographic Issues 		CVE-2012-4946 2024-11-21 10:43 2012-11-19 Show GitHub Exploit DB Packet Storm
293480 - agilefleet fleetcommander
fleetcommander_kiosk 		Agile FleetCommander and FleetCommander Kiosk before 4.08 allow remote attackers to execute arbitrary commands via unspecified vectors, related to a "command injection" issue. CWE-20
 Improper Input Validation  		CVE-2012-4945 2024-11-21 10:43 2012-11-19 Show GitHub Exploit DB Packet Storm