Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 14, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
216451 7.5 危険 TeamPass - TeamPass におけるにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2014-3773 2014-08-11 14:20 2014-05-25 Show GitHub Exploit DB Packet Storm
216452 7.5 危険 TeamPass - TeamPass におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2014-3772 2014-08-11 14:20 2014-05-25 Show GitHub Exploit DB Packet Storm
216453 7.5 危険 TeamPass - TeamPass におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2014-3771 2014-08-11 14:19 2014-05-25 Show GitHub Exploit DB Packet Storm
216454 6.5 警告 Ando Saabas - Sphider の admin/admin.php における任意の PHP コードを settings/conf.php に挿入される脆弱性 CWE-94
コード・インジェクション 		CVE-2014-5194 2014-08-11 11:57 2014-07-28 Show GitHub Exploit DB Packet Storm
216455 4.3 警告 Ando Saabas - Sphider の admin/admin.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-5193 2014-08-11 11:56 2014-07-28 Show GitHub Exploit DB Packet Storm
216456 7.5 危険 Ando Saabas - Sphider の admin/admin.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2014-5192 2014-08-11 11:56 2014-07-28 Show GitHub Exploit DB Packet Storm
216457 7.5 危険 Ando Saabas - 複数の Sphider 製品における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2014-5082 2014-08-11 11:56 2014-06-20 Show GitHub Exploit DB Packet Storm
216458 7.2 危険 Ayatana Project - Ubuntu で使用される Unity におけるロック画面を回避される脆弱性 CWE-362
競合状態 		CVE-2014-5195 2014-08-11 11:46 2014-07-31 Show GitHub Exploit DB Packet Storm
216459 4.3 警告 CKEditor Team - CKEditor におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-5191 2014-08-11 11:36 2014-07-15 Show GitHub Exploit DB Packet Storm
216460 4.3 警告 freelinking Project
Freelinking for Case Tracker Project		 - Freelinking for Case Tracker モジュールで使用される Drupal 用 freelinking モジュールにおける重要な情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2014-5179 2014-08-8 19:11 2014-07-23 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 14, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
295001 - moodle moodle Cross-site scripting (XSS) vulnerability in Moodle 2.0.x before 2.0.9, 2.1.x before 2.1.6, and 2.2.x before 2.2.3 allows remote authenticated users to inject arbitrary web script or HTML via the idnu… CWE-79
Cross-site Scripting 		CVE-2012-2365 2024-11-21 10:38 2012-07-21 Show GitHub Exploit DB Packet Storm
295002 - moodle moodle Cross-site scripting (XSS) vulnerability in lib/filelib.php in Moodle 2.0.x before 2.0.9, 2.1.x before 2.1.6, and 2.2.x before 2.2.3 allows remote authenticated users to inject arbitrary web script o… CWE-79
Cross-site Scripting 		CVE-2012-2364 2024-11-21 10:38 2012-07-21 Show GitHub Exploit DB Packet Storm
295003 - moodle moodle SQL injection vulnerability in calendar/event.php in the calendar implementation in Moodle 1.9.x before 1.9.18 allows remote authenticated users to execute arbitrary SQL commands via a crafted calend… CWE-89
SQL Injection 		CVE-2012-2363 2024-11-21 10:38 2012-07-21 Show GitHub Exploit DB Packet Storm
295004 - moodle moodle Cross-site scripting (XSS) vulnerability in blog/lib.php in the blog implementation in Moodle 1.9.x before 1.9.18, when Internet Explorer is used, allows remote attackers to inject arbitrary web scri… CWE-79
Cross-site Scripting 		CVE-2012-2362 2024-11-21 10:38 2012-07-21 Show GitHub Exploit DB Packet Storm
295005 - moodle moodle Cross-site scripting (XSS) vulnerability in admin/webservice/forms.php in the web services implementation in Moodle 2.0.x before 2.0.9, 2.1.x before 2.1.6, and 2.2.x before 2.2.3 allows remote authen… CWE-79
Cross-site Scripting 		CVE-2012-2361 2024-11-21 10:38 2012-07-21 Show GitHub Exploit DB Packet Storm
295006 - moodle moodle Cross-site scripting (XSS) vulnerability in the Wiki subsystem in Moodle 2.0.x before 2.0.9, 2.1.x before 2.1.6, and 2.2.x before 2.2.3 allows remote authenticated users to inject arbitrary web scrip… CWE-79
Cross-site Scripting 		CVE-2012-2360 2024-11-21 10:38 2012-07-21 Show GitHub Exploit DB Packet Storm
295007 - moodle moodle admin/roles/override.php in Moodle 2.0.x before 2.0.9, 2.1.x before 2.1.6, and 2.2.x before 2.2.3 allows remote authenticated users to gain privileges by leveraging the teacher role and modifying the… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2012-2359 2024-11-21 10:38 2012-07-21 Show GitHub Exploit DB Packet Storm
295008 - moodle moodle Moodle 2.0.x before 2.0.9, 2.1.x before 2.1.6, and 2.2.x before 2.2.3 allows remote authenticated users to bypass an activity's read-only state and modify the database by leveraging the student role … CWE-264
Permissions, Privileges, and Access Controls 		CVE-2012-2358 2024-11-21 10:38 2012-07-21 Show GitHub Exploit DB Packet Storm
295009 - moodle moodle The Multi-Authentication feature in the Central Authentication Service (CAS) functionality in auth/cas/cas_form.html in Moodle 2.1.x before 2.1.6 and 2.2.x before 2.2.3 does not use HTTPS, which allo… CWE-200
Information Exposure 		CVE-2012-2357 2024-11-21 10:38 2012-07-21 Show GitHub Exploit DB Packet Storm
295010 - moodle moodle The question-bank functionality in Moodle 2.1.x before 2.1.6 and 2.2.x before 2.2.3 allows remote authenticated users to bypass intended capability requirements and save questions via a save_question… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2012-2356 2024-11-21 10:38 2012-07-21 Show GitHub Exploit DB Packet Storm