Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 8, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
216781 2.1 注意 レッドハット - Red Hat Enterprise Virtualization Manager reports パッケージで使用される ovirt-engine-reports の setup スクリプトにおける重要な情報を取得される脆弱性 CWE-310
暗号の問題 		CVE-2014-0199 2014-06-2 16:40 2014-05-27 Show GitHub Exploit DB Packet Storm
216782 6.5 警告 Jasig - uPortal における任意のポートレットを設定される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2014-3417 2014-06-2 15:18 2014-05-23 Show GitHub Exploit DB Packet Storm
216783 6.5 警告 Jasig - uPortal における任意のポートレットを管理される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2014-3416 2014-06-2 15:17 2014-05-22 Show GitHub Exploit DB Packet Storm
216784 5 警告 Attiks - Drupal 用 Google Authenticator login モジュールにおけるアクセス権を取得される脆弱性 CWE-287
不適切な認証 		CVE-2013-4178 2014-06-2 15:05 2013-05-15 Show GitHub Exploit DB Packet Storm
216785 5 警告 Attiks - Drupal 用 Google Authenticator login モジュールにおける二要素認証の要件を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-4177 2014-06-2 15:05 2013-05-15 Show GitHub Exploit DB Packet Storm
216786 5 警告 シスコシステムズ - Cisco Wide Area Application Services におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2014-3285 2014-06-2 14:26 2014-05-28 Show GitHub Exploit DB Packet Storm
216787 5.8 警告 シスコシステムズ - Cisco Unified Communications Domain Manager の VOSS の Web フレームワークにおけるオープンリダイレクトの脆弱性 CWE-Other
その他 		CVE-2014-3283 2014-06-2 14:25 2014-05-28 Show GitHub Exploit DB Packet Storm
216788 4 警告 シスコシステムズ - Cisco Unified Communications Domain Manager の VOSS の Web フレームワークにおける重要な番号変換情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2014-3282 2014-06-2 14:24 2014-05-28 Show GitHub Exploit DB Packet Storm
216789 5 警告 シスコシステムズ - Cisco Unified Communications Domain Manager の VOSS の Web フレームワークにおけるアカウント名を列挙される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2014-3279 2014-06-2 14:22 2014-05-28 Show GitHub Exploit DB Packet Storm
216790 4 警告 シスコシステムズ - Cisco Unified Communications Domain Manager の VOSS における重要なユーザおよびグループ情報を取得される脆弱性 CWE-287
不適切な認証 		CVE-2014-3277 2014-06-2 14:21 2014-05-28 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 8, 2026, 4:54 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
292931 9.8 CRITICAL
Network 		ffmpeg ffmpeg Unspecified vulnerability in FFmpeg before 0.10.3 has unknown impact and attack vectors, a different vulnerability than CVE-2012-2771, CVE-2012-2778, CVE-2012-2780, and CVE-2012-2781. NVD-CWE-noinfo
CVE-2012-2773 2024-11-21 10:39 2017-08-10 Show GitHub Exploit DB Packet Storm
292932 9.8 CRITICAL
Network 		ffmpeg ffmpeg Unspecified vulnerability in FFmpeg before 0.10.3 has unknown impact and attack vectors, a different vulnerability than CVE-2012-2773, CVE-2012-2778, CVE-2012-2780, and CVE-2012-2781. NVD-CWE-noinfo
CVE-2012-2771 2024-11-21 10:39 2017-08-10 Show GitHub Exploit DB Packet Storm
292933 - tinywebgallery tinywebgallery Multiple cross-site scripting (XSS) vulnerabilities in TinyWebGallery (TWG) before 1.8.8 allow remote attackers to inject arbitrary web script or HTML via the selitems[] parameter in a (1) copy, (2) … CWE-79
Cross-site Scripting 		CVE-2012-2932 2024-11-21 10:39 2015-04-24 Show GitHub Exploit DB Packet Storm
292934 - tinywebgallery tinywebgallery Multiple cross-site request forgery (CSRF) vulnerabilities in TinyWebGallery (TWG) before 1.8.8 allow remote attackers to hijack the authentication of administrators for requests that (1) add a user … CWE-352
 Origin Validation Error 		CVE-2012-2930 2024-11-21 10:39 2015-04-24 Show GitHub Exploit DB Packet Storm
292935 - google bionic The PRNG implementation in the DNS resolver in Bionic in Android before 4.1.1 incorrectly uses time and PID information during the generation of random numbers for query ID values and UDP source port… NVD-CWE-Other
CVE-2012-2808 2024-11-21 10:39 2015-04-1 Show GitHub Exploit DB Packet Storm
292936 - joomla joomla\! Cross-site scripting (XSS) vulnerability in the ja_purity template for Joomla! 1.5.26 and earlier allows remote attackers to inject arbitrary web script or HTML via the Mod* cookie parameter to html/… CWE-79
Cross-site Scripting 		CVE-2012-2413 2024-11-21 10:39 2014-10-20 Show GitHub Exploit DB Packet Storm
292937 - mailenable mailenable Multiple cross-site scripting (XSS) vulnerabilities in MailEnable Enterprise 6.5 allow remote attackers to inject arbitrary web script or HTML via the (1) From, (2) To, or (3) Subject header or (4) b… CWE-79
Cross-site Scripting 		CVE-2012-2588 2024-11-21 10:39 2014-09-19 Show GitHub Exploit DB Packet Storm
292938 - mini_mail_dashboard_widget_project mini_mail_dashboard_widget Cross-site scripting (XSS) vulnerability in Mini Mail Dashboard Widget plugin 1.42 for WordPress allows remote attackers to inject arbitrary web script or HTML via the body of an email. CWE-79
Cross-site Scripting 		CVE-2012-2583 2024-11-21 10:39 2014-09-17 Show GitHub Exploit DB Packet Storm
292939 - redhat enterprise_mrg Cumin (aka MRG Management Console), as used in Red Hat Enterprise MRG 2.5, allows attackers with certain database privileges to cause a denial of service (inaccessible page) via a non-ASCII character… CWE-20
 Improper Input Validation  		CVE-2012-2682 2024-11-21 10:39 2014-07-20 Show GitHub Exploit DB Packet Storm
292940 - emailarchitect emailarchitect_email_server Multiple cross-site scripting (XSS) vulnerabilities in EmailArchitect Email Server 10.0 and 10.0.0.3 allow remote attackers to inject arbitrary web script or HTML via the (1) From or (2) Date field i… CWE-79
Cross-site Scripting 		CVE-2012-2591 2024-11-21 10:39 2014-06-20 Show GitHub Exploit DB Packet Storm