Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 16, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
216721 6.5 警告 Brad Hawkins - WordPress 用 stripShow プラグインの stripshow-storylines ページにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2014-5184 2014-08-8 18:44 2014-05-28 Show GitHub Exploit DB Packet Storm
216722 6.5 警告 Jesse Cortez - WordPress 用 Simple Retail Menus プラグインの includes/mode-edit.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2014-5183 2014-08-8 18:43 2014-02-19 Show GitHub Exploit DB Packet Storm
216723 6 警告 ostenta - WordPress 用 yawpp プラグインにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2014-5182 2014-08-8 18:42 2014-01-7 Show GitHub Exploit DB Packet Storm
216724 5 警告 Last.fm Rotation plugin project - WordPress 用 Last.fm Rotation プラグインの lastfm-proxy.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2014-5181 2014-08-8 18:40 2014-05-28 Show GitHub Exploit DB Packet Storm
216725 6.5 警告 HDW Player - WordPress 用 HDW Player プラグインのビデオページにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2014-5180 2014-08-8 18:39 2014-05-28 Show GitHub Exploit DB Packet Storm
216726 7.5 危険 Vinoth Kumar - WordPress 用 All Video Gallery プラグインにおける脆弱性 CWE-noinfo
情報不足 		CVE-2012-6653 2014-08-8 18:36 2012-11-7 Show GitHub Exploit DB Packet Storm
216727 4.3 警告 Lyris - Lyris ListManager の doemailpassword.tml におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-5188 2014-08-8 18:32 2014-07-29 Show GitHub Exploit DB Packet Storm
216728 6.8 警告 エンバカデロ・テクノロジーズ - Embarcadero ER/Studio Data Architect の TSVisualization ActiveX コントロールにおけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2014-4647 2014-08-8 18:32 2014-07-9 Show GitHub Exploit DB Packet Storm
216729 10 危険 Rocket Software - Rocket Servergraph の Tivoli Storage Manager 用 Admin Center におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2014-3914 2014-08-8 18:31 2014-06-2 Show GitHub Exploit DB Packet Storm
216730 5 警告 Steve Breuning - Pyplate の download.py におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2014-3855 2014-08-8 18:31 2014-05-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 16, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
294181 - isc inn The STARTTLS implementation in nnrpd in INN before 2.5.3 does not properly restrict I/O buffering, which allows man-in-the-middle attackers to insert commands into encrypted sessions by sending a cle… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2012-3523 2024-11-21 10:41 2012-11-11 Show GitHub Exploit DB Packet Storm
294182 - apple quicktime Buffer overflow in Apple QuickTime before 7.7.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted transform attribute in a text3GTrack e… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2012-3758 2024-11-21 10:41 2012-11-10 Show GitHub Exploit DB Packet Storm
294183 - apple quicktime Apple QuickTime before 7.7.3 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted PICT file. NVD-CWE-noinfo
CVE-2012-3757 2024-11-21 10:41 2012-11-10 Show GitHub Exploit DB Packet Storm
294184 - apple quicktime Buffer overflow in Apple QuickTime before 7.7.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted rnet box in an MP4 movie file. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2012-3756 2024-11-21 10:41 2012-11-10 Show GitHub Exploit DB Packet Storm
294185 - apple quicktime Buffer overflow in Apple QuickTime before 7.7.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted Targa image. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2012-3755 2024-11-21 10:41 2012-11-10 Show GitHub Exploit DB Packet Storm
294186 - apple quicktime Use-after-free vulnerability in the Clear method in the ActiveX control in Apple QuickTime before 7.7.3 allows remote attackers to execute arbitrary code or cause a denial of service (application cra… CWE-399
 Resource Management Errors 		CVE-2012-3754 2024-11-21 10:41 2012-11-10 Show GitHub Exploit DB Packet Storm
294187 - apple quicktime Buffer overflow in the plugin in Apple QuickTime before 7.7.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted MIME type. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2012-3753 2024-11-21 10:41 2012-11-10 Show GitHub Exploit DB Packet Storm
294188 - apple quicktime Multiple buffer overflows in Apple QuickTime before 7.7.3 allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted style element in a QuickTime … CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2012-3752 2024-11-21 10:41 2012-11-10 Show GitHub Exploit DB Packet Storm
294189 - apple quicktime Use-after-free vulnerability in the plugin in Apple QuickTime before 7.7.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via an HTML document with… CWE-399
 Resource Management Errors 		CVE-2012-3751 2024-11-21 10:41 2012-11-10 Show GitHub Exploit DB Packet Storm
294190 - apple iphone_os The Passcode Lock implementation in Apple iOS before 6.0.1 does not properly manage the lock state, which allows physically proximate attackers to bypass an intended passcode requirement and access P… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2012-3750 2024-11-21 10:41 2012-11-4 Show GitHub Exploit DB Packet Storm