Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 11, 2026, 6:01 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
216541 6.8 警告 DELL EMC (旧 EMC Corporation) - 複数の EMC 製品で使用される EMC Documentum Foundation Services の JAXB XML パーサにおける任意のファイルを読まれる脆弱性 CWE-200
情報漏えい
CVE-2014-2510 2014-07-9 14:07 2014-07-7 Show GitHub Exploit DB Packet Storm
216542 4.3 警告 D-Link Systems, Inc. - D-Link DIR-645 ルータのファームウェアにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-7389 2014-07-9 13:40 2013-12-19 Show GitHub Exploit DB Packet Storm
216543 4.3 警告 Custom Banners plugin project - WordPress 用 Custom Banners プラグインにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-4724 2014-07-9 12:12 2014-06-29 Show GitHub Exploit DB Packet Storm
216544 4.3 警告 BannerSky - WordPress 用 Easy Banners プラグインにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-4723 2014-07-9 12:12 2014-06-29 Show GitHub Exploit DB Packet Storm
216545 7.5 危険 Yii Framework - Yii PHP Framework の CDetailView ウィジェットにおける任意の PHP スクリプトを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2014-4672 2014-07-9 11:56 2014-06-29 Show GitHub Exploit DB Packet Storm
216546 5 警告 Kryo - iodine の iodined.c および user.c における認証を回避される脆弱性 CWE-287
不適切な認証
CVE-2014-4168 2014-07-9 11:41 2014-06-17 Show GitHub Exploit DB Packet Storm
216547 4.3 警告 OpenStack - OpenStack Swift におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-3497 2014-07-9 11:23 2014-06-19 Show GitHub Exploit DB Packet Storm
216548 10 危険 オートデスク株式会社 - Autodesk VRED に OS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション
CVE-2014-2967 2014-07-9 09:27 2014-07-3 Show GitHub Exploit DB Packet Storm
216549 4.3 警告 SpamTitan Technologies - SpamTitan にクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-2965 2014-07-9 09:27 2014-06-23 Show GitHub Exploit DB Packet Storm
216550 5 警告 Ricardo SIGNES - Perl 用 Email::Address モジュールの parse 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2014-4720 2014-07-8 18:57 2014-06-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 11, 2026, 4:09 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
295261 - dclassifieds dclassifieds Cross-site request forgery (CSRF) vulnerability in admin/settings/update in DClassifieds 0.1 final allows remote attackers to hijack the authentication of administrators for requests that modify acco… CWE-352
 Origin Validation Error
CVE-2012-0990 2024-11-21 10:36 2012-02-8 Show GitHub Exploit DB Packet Storm
295262 - apache struts Multiple cross-site scripting (XSS) vulnerabilities in Apache Struts 1.3.10 allow remote attackers to inject arbitrary web script or HTML via (1) the name parameter to struts-examples/upload/upload-s… CWE-79
Cross-site Scripting
CVE-2012-1007 2024-11-21 10:36 2012-02-7 Show GitHub Exploit DB Packet Storm
295263 - apache struts Multiple cross-site scripting (XSS) vulnerabilities in Apache Struts 2.0.14 and 2.2.3 allow remote attackers to inject arbitrary web script or HTML via the (1) name or (2) lastName parameter to strut… CWE-79
Cross-site Scripting
CVE-2012-1006 2024-11-21 10:36 2012-02-7 Show GitHub Exploit DB Packet Storm
295264 - opera opera_browser Multiple integer overflows in Opera 11.60 and earlier allow remote attackers to cause a denial of service (application crash) via a large integer argument to the (1) Int32Array, (2) Float32Array, (3)… CWE-189
Numeric Errors
CVE-2012-1003 2024-11-21 10:36 2012-02-7 Show GitHub Exploit DB Packet Storm
295265 - scriptsez ez_album SQL injection vulnerability in Scriptsez.net Ez Album allows remote attackers to execute arbitrary SQL commands via the id parameter in a view action to index.php. CWE-89
SQL Injection
CVE-2012-0983 2024-11-21 10:36 2012-02-3 Show GitHub Exploit DB Packet Storm
295266 - vastal agent_zone SQL injection vulnerability in search.php in Vastal I-Tech Agent Zone (aka The Real Estate Script) allows remote attackers to execute arbitrary SQL commands via the price_from parameter. CWE-89
SQL Injection
CVE-2012-0982 2024-11-21 10:36 2012-02-3 Show GitHub Exploit DB Packet Storm
295267 - kybernetika phpshowtime Directory traversal vulnerability in phpShowtime 2.0 allows remote attackers to list arbitrary directories and image files via a .. (dot dot) in the r parameter to index.php. NOTE: Some of these det… CWE-22
Path Traversal
CVE-2012-0981 2024-11-21 10:36 2012-02-3 Show GitHub Exploit DB Packet Storm
295268 - phux download_manager SQL injection vulnerability in download.php in phux Download Manager allows remote attackers to execute arbitrary SQL commands via the file parameter. CWE-89
SQL Injection
CVE-2012-0980 2024-11-21 10:36 2012-02-3 Show GitHub Exploit DB Packet Storm
295269 - twiki twiki Cross-site scripting (XSS) vulnerability in TWiki allows remote attackers to inject arbitrary web script or HTML via the organization field in a profile, involving (1) registration or (2) editing of … CWE-79
Cross-site Scripting
CVE-2012-0979 2024-11-21 10:36 2012-02-3 Show GitHub Exploit DB Packet Storm
295270 - luratech lurawave_jp2_browser_plug-in Stack-based buffer overflow in npjp2.dll in LuraWave JP2 Browser Plug-In 1.1.1.11 and other versions before 2.1.1.11 allows remote attackers to execute arbitrary code via a JPEG2000 (JP2) file with a… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2012-0978 2024-11-21 10:36 2012-02-3 Show GitHub Exploit DB Packet Storm