Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 27, 2026, 4 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
216661 4.3 警告 WP Google Maps - WordPress 用 WP Google Maps プラグインにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-7182 2014-10-28 16:03 2014-09-29 Show GitHub Exploit DB Packet Storm
216662 5 警告 MantisBT Group - MantisBT の gpc_api.php における認証を回避される脆弱性 CWE-287
不適切な認証
CVE-2014-6387 2014-10-28 15:58 2014-09-12 Show GitHub Exploit DB Packet Storm
216663 6.8 警告 Huawei - Huawei E3236 および E3276 におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2014-8331 2014-10-28 14:33 2014-08-6 Show GitHub Exploit DB Packet Storm
216664 6.8 警告 TWiki - TWiki の lib/TWiki/Sandbox.pm におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-7237 2014-10-28 14:32 2014-10-1 Show GitHub Exploit DB Packet Storm
216665 9.3 危険 F5 Networks - 複数の F5 BIG-IP 製品の rsync デーモンにおける任意のファイルを読まれる脆弱性 CWE-287
不適切な認証
CVE-2014-2927 2014-10-28 14:31 2014-08-28 Show GitHub Exploit DB Packet Storm
216666 6.8 警告 Claws Mail - Claws Mail の plugins/rssyl/feed.c におけるサーバになりすまされる脆弱性 CWE-310
暗号の問題
CVE-2014-2576 2014-10-28 11:46 2014-03-11 Show GitHub Exploit DB Packet Storm
216667 3.5 注意 Drupal - Drupal 用 Marketo MA モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-8379 2014-10-28 11:34 2014-08-20 Show GitHub Exploit DB Packet Storm
216668 3.5 注意 Drupal - TableField モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-8378 2014-10-28 11:34 2014-08-12 Show GitHub Exploit DB Packet Storm
216669 3.5 注意 Site Banner project - Drupal 用 Site Banner モジュールのコンテキスト管理サブパネルにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-8376 2014-10-28 11:33 2014-08-19 Show GitHub Exploit DB Packet Storm
216670 3.5 注意 FOG Project - FOG におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-3111 2014-10-28 10:58 2014-04-29 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 27, 2026, 4:52 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
296561 - oracle database_server
primavera_p6_enterprise_project_portfolio_management
The authentication protocol in Oracle Database Server 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, and 11.2.0.3 allows remote attackers to obtain the session key and salt for arbitrary users, wh… CWE-287
Improper Authentication
CVE-2012-3137 2024-11-21 10:40 2012-09-22 Show GitHub Exploit DB Packet Storm
296562 - apache wicket Cross-site scripting (XSS) vulnerability in Apache Wicket 1.4.x before 1.4.21 and 1.5.x before 1.5.8 allows remote attackers to inject arbitrary web script or HTML via vectors involving a %00 sequenc… CWE-79
Cross-site Scripting
CVE-2012-3373 2024-11-21 10:40 2012-09-20 Show GitHub Exploit DB Packet Storm
296563 - oscommerce
paypal
online_merchant
website_payments_standard_module
The PayPal (aka MODULE_PAYMENT_PAYPAL_STANDARD) module before 1.1 in osCommerce Online Merchant before 2.3.4 allows remote attackers to set the payment recipient via a modified value of the merchant'… NVD-CWE-Other
CVE-2012-2991 2024-11-21 10:40 2012-09-20 Show GitHub Exploit DB Packet Storm
296564 - hp operations_orchestration Unspecified vulnerability in HP Operations Orchestration 9.0 before 9.03 allows remote attackers to execute arbitrary code via unknown vectors. NVD-CWE-noinfo
CVE-2012-3258 2024-11-21 10:40 2012-09-19 Show GitHub Exploit DB Packet Storm
296565 - siemens simatic_pcs7
wincc
WebNavigator in Siemens WinCC 7.0 SP3 and earlier, as used in SIMATIC PCS7 and other products, allows remote attackers to discover a username and password via crafted parameters to unspecified method… CWE-200
Information Exposure
CVE-2012-3034 2024-11-21 10:40 2012-09-18 Show GitHub Exploit DB Packet Storm
296566 - siemens simatic_pcs7
wincc
SQL injection vulnerability in WebNavigator in Siemens WinCC 7.0 SP3 and earlier, as used in SIMATIC PCS7 and other products, allows remote attackers to execute arbitrary SQL commands via a crafted S… CWE-89
SQL Injection
CVE-2012-3032 2024-11-21 10:40 2012-09-18 Show GitHub Exploit DB Packet Storm
296567 - siemens simatic_pcs7
wincc
Multiple cross-site scripting (XSS) vulnerabilities in WebNavigator in Siemens WinCC 7.0 SP3 and earlier, as used in SIMATIC PCS7 and other products, allow remote attackers to inject arbitrary web sc… CWE-79
Cross-site Scripting
CVE-2012-3031 2024-11-21 10:40 2012-09-18 Show GitHub Exploit DB Packet Storm
296568 - siemens simatic_pcs7
wincc
WebNavigator in Siemens WinCC 7.0 SP3 and earlier, as used in SIMATIC PCS7 and other products, stores sensitive information under the web root with insufficient access control, which allows remote at… CWE-264
Permissions, Privileges, and Access Controls
CVE-2012-3030 2024-11-21 10:40 2012-09-18 Show GitHub Exploit DB Packet Storm
296569 - siemens simatic_pcs7
wincc
Cross-site request forgery (CSRF) vulnerability in WebNavigator in Siemens WinCC 7.0 SP3 and earlier, as used in SIMATIC PCS7 and other products, allows remote attackers to hijack the authentication … CWE-352
 Origin Validation Error
CVE-2012-3028 2024-11-21 10:40 2012-09-18 Show GitHub Exploit DB Packet Storm
296570 - cososys endpoint_protector_appliace_4 The CoSoSys Endpoint Protector 4 appliance establishes an EPProot password based entirely on the appliance serial number, which makes it easier for remote attackers to obtain access via a brute-force… CWE-264
Permissions, Privileges, and Access Controls
CVE-2012-2994 2024-11-21 10:40 2012-09-18 Show GitHub Exploit DB Packet Storm