Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 15, 2026, 12:10 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
216661 3.5 注意 IBM - IBM WebSphere Portal におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-3102 2014-08-13 14:42 2014-07-30 Show GitHub Exploit DB Packet Storm
216662 4.3 警告 IBM - IBM WebSphere Portal におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-0953 2014-08-13 14:40 2014-07-30 Show GitHub Exploit DB Packet Storm
216663 6.8 警告 Nmap
Novell
- NMap の http-domino-enum-passwords.nse スクリプトにおける任意の名前のファイルをアップロードされる脆弱性 CWE-Other
その他
CVE-2013-4885 2014-08-11 18:37 2013-07-29 Show GitHub Exploit DB Packet Storm
216664 4.3 警告 ProcessOne - ejabberd の TLS ドライバにおける重要な情報を取得される脆弱性 CWE-310
暗号の問題
CVE-2013-6169 2014-08-11 18:36 2013-02-5 Show GitHub Exploit DB Packet Storm
216665 2.1 注意 Fredrik Lundh
Python Software Foundation
- Python Image Library および Pillow におけるシンボリックリンク攻撃を実行される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-1933 2014-08-11 18:34 2014-03-15 Show GitHub Exploit DB Packet Storm
216666 4.4 警告 Fredrik Lundh
Python Software Foundation
- Python Image Library および Pillow における任意のファイルを上書きされる脆弱性 CWE-59
リンク解釈の問題
CVE-2014-1932 2014-08-11 18:33 2014-03-15 Show GitHub Exploit DB Packet Storm
216667 1.9 注意 freedesktop.org - D-Bus の dbus/dbus-sysdeps-unix.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2013-2168 2014-08-11 18:31 2013-06-13 Show GitHub Exploit DB Packet Storm
216668 5 警告 Pidgin - Pidgin の libpurple の IRC プロトコルプラグインにおけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2014-0020 2014-08-11 18:26 2014-01-28 Show GitHub Exploit DB Packet Storm
216669 9.3 危険 Pidgin - Windows 上で稼働する Pidgin の gtkutils.c における任意のプログラムを実行される脆弱性 CWE-20
CWE-DesignError
CVE-2013-6486 2014-08-11 18:24 2013-11-4 Show GitHub Exploit DB Packet Storm
216670 5 警告 Pidgin - Pidgin の libpurple の util.c におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2013-6485 2014-08-11 18:24 2013-08-20 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 15, 2026, 4:28 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
296011 - typo3 typo3 The Extbase Framework in TYPO3 4.6.x through 4.6.6, 4.7, and 6.0 unserializes untrusted data, which allows remote attackers to unserialize arbitrary objects and possibly execute arbitrary code via ve… NVD-CWE-Other
CVE-2012-1605 2024-11-21 10:37 2012-09-5 Show GitHub Exploit DB Packet Storm
296012 - oracle jdk
jre
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 6 and earlier allows remote attackers to affect confidentiality, integrity, and availability via u… NVD-CWE-noinfo
CVE-2012-1682 2024-11-21 10:37 2012-08-31 Show GitHub Exploit DB Packet Storm
296013 - giantrobot zipcart The ZipCart module 6.x before 6.x-1.4 for Drupal checks the "access content" permission instead of the "access ZipCart downloads" permission when building archives, which allows remote authenticated … CWE-264
Permissions, Privileges, and Access Controls
CVE-2012-1650 2024-11-21 10:37 2012-08-29 Show GitHub Exploit DB Packet Storm
296014 - mediafront mediafront Multiple cross-site scripting (XSS) vulnerabilities in the "stand alone PHP application for the OSM Player," as used in the MediaFront module 6.x-1.x before 6.x-1.5 and 7.x-1.x before 7.x-1.5 for Dru… CWE-79
Cross-site Scripting
CVE-2012-1647 2024-11-21 10:37 2012-08-29 Show GitHub Exploit DB Packet Storm
296015 - wimleers cdn The CDN module 6.x-2.2 and 7.x-2.2 for Drupal, when running in Origin Pull mode with the "Far Future expiration" option enabled, allows remote attackers to read arbitrary PHP files via unspecified ve… CWE-200
Information Exposure
CVE-2012-1645 2024-11-21 10:37 2012-08-29 Show GitHub Exploit DB Packet Storm
296016 - gizra og_vocab The Organic Groups (OG) Vocabulary module 6.x-1.x before 6.x-1.2 for Drupal allows remote authenticated users with certain administrator permissions to modify the vocabularies of other groups via uns… CWE-264
Permissions, Privileges, and Access Controls
CVE-2012-1644 2024-11-21 10:37 2012-08-29 Show GitHub Exploit DB Packet Storm
296017 - jason_savino fp The Faster Permissions module 7.x-2.x before 7.x-1.2 for Drupal does not check the "administer permissions" permission, which allows remote attackers to modify access permissions via unspecified vect… CWE-264
Permissions, Privileges, and Access Controls
CVE-2012-1643 2024-11-21 10:37 2012-08-29 Show GitHub Exploit DB Packet Storm
296018 - yaml-fuer-drupal linkchecker includes/linkchecker.pages.inc in the Link checker module 6.x-2.x before 6.x-2.5 for Drupal does not properly enforce access permissions on broken links, which allows remote attackers to obtain sensi… CWE-264
Permissions, Privileges, and Access Controls
CVE-2012-1642 2024-11-21 10:37 2012-08-29 Show GitHub Exploit DB Packet Storm
296019 - danielb finder The finder_import function in the Finder module 6.x-1.x before 6.x-1.26, 7.x-1.x, and 7.x-2.x before 7.x-2.0-alpha8 for Drupal allows remote authenticated users with the administer finder permission … CWE-264
Permissions, Privileges, and Access Controls
CVE-2012-1641 2024-11-21 10:37 2012-08-29 Show GitHub Exploit DB Packet Storm
296020 - rik_de_boer revisioning The hook_node_access function in the revisioning module 7.x-1.x before 7.x-1.3 for Drupal checks the permissions of the current user even when it is called to check permissions of other users, which … CWE-264
Permissions, Privileges, and Access Controls
CVE-2012-1635 2024-11-21 10:37 2012-08-29 Show GitHub Exploit DB Packet Storm