Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 10, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
216751 4.3 警告 Digital Zoom Studio - WordPress 用 Digital Zoom Studio Video Gallery プラグインにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-3923 2014-06-3 17:48 2014-05-28 Show GitHub Exploit DB Packet Storm
216752 4.3 警告 Simple Popup Project - WordPress 用 Simple Popup Images プラグインにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-3921 2014-06-3 17:47 2014-05-22 Show GitHub Exploit DB Packet Storm
216753 5 警告 Moodle - Moodle の blocks/html/lib.php 内の block_html_pluginfile 関数の My Home の実装における重要な情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-0216 2014-06-3 17:23 2014-05-19 Show GitHub Exploit DB Packet Storm
216754 6 警告 Dotclear - Dotclear の admin/categories.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2014-3783 2014-06-3 17:20 2014-05-16 Show GitHub Exploit DB Packet Storm
216755 6.8 警告 UserCake - Usercake の user_settings.php におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2014-3866 2014-06-3 17:19 2014-05-21 Show GitHub Exploit DB Packet Storm
216756 - - 富士通
Apache Software Foundation
- ** 削除 ** Apache Struts の ParametersInterceptor における ClassLoader を操作される脆弱性 - CVE-2014-0094 2014-06-3 17:17 2014-03-6 Show GitHub Exploit DB Packet Storm
216757 5 警告 レッドハット - Red Hat Enterprise Linux 5 上で稼動する Red Hat sos の sosreport における重要な情報を取得される脆弱性 CWE-255
証明書・パスワード管理
CVE-2014-3925 2014-06-3 15:48 2014-05-30 Show GitHub Exploit DB Packet Storm
216758 2.1 注意 レッドハット - Red Hat Enterprise Virtualization Manager データウェアハウスパッケージで使用される ovirt-engine-dwh における重要な情報を取得される脆弱性 CWE-255
証明書・パスワード管理
CVE-2014-0202 2014-06-3 15:47 2014-05-27 Show GitHub Exploit DB Packet Storm
216759 4.3 警告 IBM - IBM WebSphere Service Registry and Repository の Web UI におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-3010 2014-06-3 15:43 2014-05-19 Show GitHub Exploit DB Packet Storm
216760 3.5 注意 IBM - IBM Sterling Control Center におけるオープンリダイレクトの脆弱性 CWE-Other
その他
CVE-2014-0925 2014-06-3 15:42 2014-05-16 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 10, 2026, 4:58 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
293361 - symantec web_gateway SQL injection vulnerability in the management console in Symantec Web Gateway 5.0.x before 5.0.3.18 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. CWE-89
SQL Injection
CVE-2012-2961 2024-11-21 10:40 2012-07-24 Show GitHub Exploit DB Packet Storm
293362 - symantec web_gateway The management console in Symantec Web Gateway 5.0.x before 5.0.3.18 allows local users to gain privileges by modifying files, related to a "file inclusion" issue. CWE-264
Permissions, Privileges, and Access Controls
CVE-2012-2957 2024-11-21 10:40 2012-07-24 Show GitHub Exploit DB Packet Storm
293363 - symantec web_gateway The management console in Symantec Web Gateway 5.0.x before 5.0.3.18 allows remote attackers to execute arbitrary commands via crafted input to application scripts. CWE-78
OS Command 
CVE-2012-2953 2024-11-21 10:40 2012-07-24 Show GitHub Exploit DB Packet Storm
293364 - wordpress wordpress WordPress before 3.4.1 does not properly restrict access to post contents such as private or draft posts, which allows remote authors or contributors to obtain sensitive information via unknown vecto… CWE-264
Permissions, Privileges, and Access Controls
CVE-2012-3385 2024-11-21 10:40 2012-07-23 Show GitHub Exploit DB Packet Storm
293365 - wordpress wordpress Cross-site request forgery (CSRF) vulnerability in the customizer in WordPress before 3.4.1 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors. CWE-352
 Origin Validation Error
CVE-2012-3384 2024-11-21 10:40 2012-07-23 Show GitHub Exploit DB Packet Storm
293366 - wordpress wordpress The map_meta_cap function in wp-includes/capabilities.php in WordPress 3.4.x before 3.4.2, when the multisite feature is enabled, does not properly assign the unfiltered_html capability, which allows… CWE-264
Permissions, Privileges, and Access Controls
CVE-2012-3383 2024-11-21 10:40 2012-07-23 Show GitHub Exploit DB Packet Storm
293367 - openstack essex
folsom
diablo
virt/disk/api.py in OpenStack Compute (Nova) Folsom (2012.2), Essex (2012.1), and Diablo (2011.3) allows remote authenticated users to overwrite arbitrary files via a symlink attack on a file in an i… CWE-264
Permissions, Privileges, and Access Controls
CVE-2012-3361 2024-11-21 10:40 2012-07-23 Show GitHub Exploit DB Packet Storm
293368 - openstack essex
folsom
Directory traversal vulnerability in virt/disk/api.py in OpenStack Compute (Nova) Folsom (2012.2) and Essex (2012.1), when used over libvirt-based hypervisors, allows remote authenticated users to wr… CWE-22
Path Traversal
CVE-2012-3360 2024-11-21 10:40 2012-07-23 Show GitHub Exploit DB Packet Storm
293369 - viewvc viewvc The SVN revision view (lib/vclib/svn/svn_repos.py) in ViewVC before 1.1.15 does not properly handle log messages when a readable path is copied from an unreadable path, which allows remote attackers … CWE-200
Information Exposure
CVE-2012-3357 2024-11-21 10:40 2012-07-23 Show GitHub Exploit DB Packet Storm
293370 - viewvc viewvc The remote SVN views functionality (lib/vclib/svn/svn_ra.py) in ViewVC before 1.1.15 does not properly perform authorization, which allows remote attackers to bypass intended access restrictions via … CWE-287
Improper Authentication
CVE-2012-3356 2024-11-21 10:40 2012-07-23 Show GitHub Exploit DB Packet Storm