Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 12, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
216501	4.3	警告	Chris Taylor	-	WordPress 用 BannerMan プラグインにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2014-4845	2014-07-11 14:37	2014-06-27	Show	GitHub Exploit DB Packet Storm

216502	4	警告	シスコシステムズ	-	Cisco Unified Communications Manager の Dialed Number Analyzer コンポーネントにおけるディレクトリトラバーサルの脆弱性	CWE-20 不適切な入力確認	CVE-2014-3318	2014-07-11 14:08	2014-07-10	Show	GitHub Exploit DB Packet Storm

216503	4	警告	シスコシステムズ	-	Cisco Unified Communications Manager の Dialed Number Analyzer コンポーネントにおけるアップロードの制限を回避される脆弱性	CWE-20 不適切な入力確認	CVE-2014-3316	2014-07-11 14:07	2014-07-10	Show	GitHub Exploit DB Packet Storm

216504	4.3	警告	シスコシステムズ	-	Cisco Unified Communications Manager の Dialed Number Analyzer コンポーネントにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2014-3315	2014-07-11 14:06	2014-07-10	Show	GitHub Exploit DB Packet Storm

216505	5.1	警告	シスコシステムズ	-	Cisco WebEx Meetings Server および WebEx Meeting Center の WebEx Meetings クライアントにおけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2014-3311	2014-07-11 14:06	2014-07-10	Show	GitHub Exploit DB Packet Storm

216506	4.3	警告	シスコシステムズ	-	Cisco WebEx Meetings Server および WebEx Meeting Center の WebEx Meetings クライアントにおける任意のファイルを読まれる脆弱性	CWE-20 不適切な入力確認	CVE-2014-3310	2014-07-11 14:05	2014-07-10	Show	GitHub Exploit DB Packet Storm

216507	4.3	警告	osTicket	-	osTicket におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2014-4744	2014-07-11 12:29	2014-06-20	Show	GitHub Exploit DB Packet Storm

216508	7.5	危険	Artifectx	-	Artifectx xClassified の demo/ads.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2014-4741	2014-07-11 12:19	2014-07-7	Show	GitHub Exploit DB Packet Storm

216509	4.3	警告	Kajona	-	Kajona の Search モジュールの templates/default/tpl/module_search/ におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2014-4743	2014-07-11 12:08	2014-06-8	Show	GitHub Exploit DB Packet Storm

216510	4.3	警告	Kajona	-	Kajona の System モジュールの system/class_link.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2014-4742	2014-07-11 12:07	2014-06-8	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 13, 2026, 5:05 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
293281	-	wordpress	wordpress	Cross-site request forgery (CSRF) vulnerability in wp-admin/index.php in WordPress 3.4.2 allows remote attackers to hijack the authentication of administrators for requests that modify an RSS URL via…	CWE-352 Origin Validation Error	CVE-2012-4448	2024-11-21 10:42	2012-09-29	Show	GitHub Exploit DB Packet Storm

293282	-	jamf	casper_suite	Multiple cross-site request forgery (CSRF) vulnerabilities in editAccount.html in the JAMF Software Server (JSS) interface in JAMF Casper Suite before 8.61 allow remote attackers to hijack the authen…	CWE-352 Origin Validation Error	CVE-2012-4051	2024-11-21 10:42	2012-09-28	Show	GitHub Exploit DB Packet Storm

293283	-	jb\+	jigbrowser\+	The jigbrowser+ application before 1.5.0 for Android does not properly implement the WebView class, which allows remote attackers to obtain sensitive information via a crafted application.	CWE-94 Code Injection	CVE-2012-4017	2024-11-21 10:42	2012-09-28	Show	GitHub Exploit DB Packet Storm

293284	-	justsystems	atok	The ATOK application before 1.0.4 for Android allows remote attackers to read the learning information file, and obtain sensitive input-string information, via a crafted application.	CWE-264 Permissions, Privileges, and Access Controls	CVE-2012-4016	2024-11-21 10:42	2012-09-28	Show	GitHub Exploit DB Packet Storm

293285	-	mylittletools	mylittleadmin	Cross-site scripting (XSS) vulnerability in the management screen in myLittleTools myLittleAdmin for SQL Server 2000 allows remote attackers to inject arbitrary web script or HTML via vectors that tr…	CWE-79 Cross-site Scripting	CVE-2012-4015	2024-11-21 10:42	2012-09-25	Show	GitHub Exploit DB Packet Storm

293286	-	mcafee	email_and_web_security	Unspecified vulnerability in McAfee Email Anti-virus (formerly WebShield SMTP) allows remote attackers to cause a denial of service via unknown vectors.	NVD-CWE-noinfo	CVE-2012-4014	2024-11-21 10:42	2012-09-25	Show	GitHub Exploit DB Packet Storm

293287	-	moodle	moodle	course/reset.php in Moodle 2.1.x before 2.1.8, 2.2.x before 2.2.5, and 2.3.x before 2.3.2 checks an update capability instead of a reset capability, which allows remote authenticated users to bypass …	CWE-264 Permissions, Privileges, and Access Controls	CVE-2012-4408	2024-11-21 10:42	2012-09-19	Show	GitHub Exploit DB Packet Storm

293288	-	moodle	moodle	lib/filelib.php in Moodle 2.1.x before 2.1.8, 2.2.x before 2.2.5, and 2.3.x before 2.3.2 does not properly check the publication state of blog files, which allows remote attackers to obtain sensitive…	CWE-200 Information Exposure	CVE-2012-4407	2024-11-21 10:42	2012-09-19	Show	GitHub Exploit DB Packet Storm

293289	-	moodle	moodle	theme/yui_combo.php in Moodle 2.3.x before 2.3.2 does not properly construct error responses for the drag-and-drop script, which allows remote attackers to obtain the installation path by sending a r…	CWE-200 Information Exposure	CVE-2012-4403	2024-11-21 10:42	2012-09-19	Show	GitHub Exploit DB Packet Storm

293290	-	moodle	moodle	webservice/lib.php in Moodle 2.1.x before 2.1.8, 2.2.x before 2.2.5, and 2.3.x before 2.3.2 does not properly restrict the use of web-service tokens, which allows remote authenticated users to run ar…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2012-4402	2024-11-21 10:42	2012-09-19	Show	GitHub Exploit DB Packet Storm