Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 14, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
216481 4.3 警告 IBM - IBM Business Process Manager および WebSphere Lombardi Edition におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-0957 2014-07-22 17:33 2014-07-14 Show GitHub Exploit DB Packet Storm
216482 4.3 警告 OctavoCMS - OctavoCMS の admin/viewer.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-4331 2014-07-22 17:24 2014-07-9 Show GitHub Exploit DB Packet Storm
216483 5 警告 アドバンテック株式会社 - Advantech WebAccess の bwocxrun ActiveX コントロールの BrowseFolder メソッドにおける任意のファイルを読まれる脆弱性 CWE-200
情報漏えい 		CVE-2014-2368 2014-07-22 16:09 2014-07-17 Show GitHub Exploit DB Packet Storm
216484 4.3 警告 アドバンテック株式会社 - Advantech WebAccess の broadweb/include/gChkCook.asp の ActiveX コントロールにおける任意のファイルを読まれる脆弱性 CWE-200
情報漏えい 		CVE-2014-2367 2014-07-22 16:09 2014-07-17 Show GitHub Exploit DB Packet Storm
216485 4 警告 アドバンテック株式会社 - Advantech WebAccess の upAdminPg.asp における認証情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2014-2366 2014-07-22 16:08 2014-07-17 Show GitHub Exploit DB Packet Storm
216486 5.5 警告 アドバンテック株式会社 - Advantech WebAccess における任意のファイルを作成される脆弱性 CWE-noinfo
情報不足 		CVE-2014-2365 2014-07-22 16:08 2014-07-17 Show GitHub Exploit DB Packet Storm
216487 7.5 危険 アドバンテック株式会社 - Advantech WebAccess におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2014-2364 2014-07-22 16:07 2014-07-17 Show GitHub Exploit DB Packet Storm
216488 5.8 警告 DELL EMC (旧 EMC Corporation) - EMC RecoverPoint Appliance におけるサービス運用妨害 (DoS) の脆弱性 CWE-16
環境設定 		CVE-2014-2519 2014-07-22 15:21 2014-07-18 Show GitHub Exploit DB Packet Storm
216489 5 警告 レッドハット - Red Hat Enterprise MRG で使用される Cumin におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2012-2682 2014-07-22 15:21 2012-06-8 Show GitHub Exploit DB Packet Storm
216490 5 警告 Google - Google Chrome におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2014-3162 2014-07-22 15:05 2014-07-16 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 14, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
293031 - psyced psyced psyced before 20120821 does not verify that a request was made for an XMPP Server Dialback response, which allows remote XMPP servers to spoof domains via responses for domains that were not asserted. CWE-20
 Improper Input Validation  		CVE-2012-4671 2024-11-21 10:43 2012-08-26 Show GitHub Exploit DB Packet Storm
293032 - tigase tigase_xmpp_server Tigase XMPP Server before 5.1.0 does not verify that a request was made for an XMPP Server Dialback response, which allows remote XMPP servers to spoof domains via a (1) Verify Response or (2) Author… CWE-20
 Improper Input Validation  		CVE-2012-4670 2024-11-21 10:43 2012-08-26 Show GitHub Exploit DB Packet Storm
293033 - isode m-link M-Link R14.6 before R14.6v14 and R15.1 before R15.1v10 does not verify that a request was made for an XMPP Server Dialback response, which allows remote XMPP servers to spoof domains via responses fo… CWE-20
 Improper Input Validation  		CVE-2012-4669 2024-11-21 10:43 2012-08-26 Show GitHub Exploit DB Packet Storm
293034 - roundcube webmail Cross-site scripting (XSS) vulnerability in Roundcube Webmail 0.8.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the signature in an email. CWE-79
Cross-site Scripting 		CVE-2012-4668 2024-11-21 10:43 2012-08-25 Show GitHub Exploit DB Packet Storm
293035 - darold squidclamav Multiple cross-site scripting (XSS) vulnerabilities in SquidClamav 5.x before 5.8 allow remote attackers to inject arbitrary web script or HTML via the (1) url, (2) virus, (3) source, or (4) user par… CWE-79
Cross-site Scripting 		CVE-2012-4667 2024-11-21 10:43 2012-08-25 Show GitHub Exploit DB Packet Storm
293036 - websense websense_email_security The default configuration of the SMTP component in Websense Email Security 6.1 through 7.3 enables weak SSL ciphers in the "SurfControl plc\SuperScout Email Filter\SMTP" registry key, which makes it … CWE-200
Information Exposure 		CVE-2012-4605 2024-11-21 10:43 2012-08-23 Show GitHub Exploit DB Packet Storm
293037 - websense websense_web_security The TRITON management console in Websense Web Security before 7.6 Hotfix 24 allows remote attackers to bypass authentication and read arbitrary reports via a crafted uid field, in conjunction with a … CWE-287
Improper Authentication 		CVE-2012-4604 2024-11-21 10:43 2012-08-23 Show GitHub Exploit DB Packet Storm
293038 - mcafee smartfilter_administration McAfee SmartFilter Administration, and SmartFilter Administration Bess Edition, before 4.2.1.01 does not require authentication for access to the JBoss Remote Method Invocation (RMI) interface, which… CWE-287
Improper Authentication 		CVE-2012-4599 2024-11-21 10:43 2012-08-22 Show GitHub Exploit DB Packet Storm
293039 - mcafee mcafee_virtual_technician
epo_mcafee_virtual_technician 		An unspecified ActiveX control in McAfee Virtual Technician (MVT) before 6.4, and ePO-MVT, allows remote attackers to execute arbitrary code or cause a denial of service (Internet Explorer crash) via… NVD-CWE-noinfo
CVE-2012-4598 2024-11-21 10:43 2012-08-22 Show GitHub Exploit DB Packet Storm
293040 - mcafee email_and_web_security
email_gateway 		Cross-site scripting (XSS) vulnerability in McAfee Email and Web Security (EWS) 5.5 through Patch 6 and 5.6 through Patch 3, and McAfee Email Gateway (MEG) 7.0.0 and 7.0.1, allows remote attackers to… CWE-79
Cross-site Scripting 		CVE-2012-4597 2024-11-21 10:43 2012-08-22 Show GitHub Exploit DB Packet Storm