Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 8, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
216821	9.3	危険	Michael Uplawski	-	Ruby 用 Creme Fraiche gem の lib/cremefraiche.rb における任意のコマンドを実行される脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2013-2090	2014-05-29 13:41	2013-05-14	Show	GitHub Exploit DB Packet Storm

216822	6.8	警告	Zemanta	-	WordPress 用 Related Posts by Zemanta プラグインにおけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2013-3477	2014-05-29 13:39	2013-05-14	Show	GitHub Exploit DB Packet Storm

216823	6.8	警告	Kieran O'Shea	-	WordPress 用 Calendar プラグインにおけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2013-2698	2014-05-29 13:39	2013-04-28	Show	GitHub Exploit DB Packet Storm

216824	7.5	危険	WP Shop Styling	-	WordPress 用 WP e-Commerce Shop Styling プラグインにおける PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2013-0724	2014-05-29 13:38	2013-02-6	Show	GitHub Exploit DB Packet Storm

216825	4.3	警告	bib2html Project	-	WordPress 用 bib2html プラグインにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2014-3870	2014-05-29 13:38	2014-05-22	Show	GitHub Exploit DB Packet Storm

216826	3.6	注意	Mislav Marohnic	-	hub の lib/hub/commands.rb の am 関数における任意のファイルを上書きされる脆弱性	CWE-310 暗号の問題	CVE-2014-0177	2014-05-29 12:09	2014-04-15	Show	GitHub Exploit DB Packet Storm

216827	5	警告	Kernel 42	-	Drupal 用 Groups, Communities and Co モジュールにおける設定ページにアクセスされる脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2013-4598	2014-05-29 11:59	2013-11-13	Show	GitHub Exploit DB Packet Storm

216828	5	警告	OpenBSD	-	OpenSMTPD におけるサービス運用妨害 (DoS) の脆弱性	CWE-310 暗号の問題	CVE-2013-2125	2014-05-29 11:34	2013-05-16	Show	GitHub Exploit DB Packet Storm

216829	4.3	警告	Moodle	-	Moodle の repository/url/lib.php の URL ダウンローダリポジトリにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2014-0218	2014-05-28 18:29	2014-05-19	Show	GitHub Exploit DB Packet Storm

216830	4.3	警告	Moodle	-	Moodle の enrol/index.php における重要な名前および概要の情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2014-0217	2014-05-28 18:29	2014-05-19	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 8, 2026, 4:54 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
295451	-	php	php	PHP before 5.3.9 has improper libxslt security settings, which allows remote attackers to create arbitrary files via a crafted XSLT stylesheet that uses the libxslt output extension.	CWE-264 Permissions, Privileges, and Access Controls	CVE-2012-0057	2024-11-21 10:34	2012-02-2	Show	GitHub Exploit DB Packet Storm

295452	-	mozilla	firefox seamonkey	Mozilla Firefox 4.x through 9.0 and SeaMonkey before 2.7 on Linux and Mac OS X set weak permissions for Firefox Recovery Key.html, which might allow local users to read a Firefox Sync key via standar…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2012-0450	2024-11-21 10:34	2012-02-2	Show	GitHub Exploit DB Packet Storm

295453	-	mozilla debian suse opensuse	thunderbird seamonkey firefox debian_linux linux_enterprise_server linux_enterprise_desktop opensuse linux_enterprise_software_development_kit	Mozilla Firefox before 3.6.26 and 4.x through 9.0, Thunderbird before 3.1.18 and 5.0 through 9.0, and SeaMonkey before 2.7 allow remote attackers to cause a denial of service (memory corruption and a…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2012-0449	2024-11-21 10:34	2012-02-2	Show	GitHub Exploit DB Packet Storm

295454	-	mozilla	firefox thunderbird seamonkey	Mozilla Firefox 4.x through 9.0, Thunderbird 5.0 through 9.0, and SeaMonkey before 2.7 do not properly initialize data for image/vnd.microsoft.icon images, which allows remote attackers to obtain pot…	CWE-200 Information Exposure	CVE-2012-0447	2024-11-21 10:34	2012-02-2	Show	GitHub Exploit DB Packet Storm

295455	-	mozilla	firefox thunderbird seamonkey	Multiple cross-site scripting (XSS) vulnerabilities in Mozilla Firefox 4.x through 9.0, Thunderbird 5.0 through 9.0, and SeaMonkey before 2.7 allow remote attackers to inject arbitrary web script or …	CWE-79 Cross-site Scripting	CVE-2012-0446	2024-11-21 10:34	2012-02-2	Show	GitHub Exploit DB Packet Storm

295456	-	mozilla	firefox thunderbird seamonkey	Mozilla Firefox 4.x through 9.0, Thunderbird 5.0 through 9.0, and SeaMonkey before 2.7 allow remote attackers to bypass the HTML5 frame-navigation policy and replace arbitrary sub-frames by creating …	CWE-264 Permissions, Privileges, and Access Controls	CVE-2012-0445	2024-11-21 10:34	2012-02-2	Show	GitHub Exploit DB Packet Storm

295457	-	mozilla debian suse opensuse canonical	thunderbird seamonkey firefox debian_linux linux_enterprise_server linux_enterprise_desktop opensuse linux_enterprise_software_development_kit ubuntu_linux	Mozilla Firefox before 3.6.26 and 4.x through 9.0, Thunderbird before 3.1.18 and 5.0 through 9.0, and SeaMonkey before 2.7 do not properly initialize nsChildView data structures, which allows remote …	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2012-0444	2024-11-21 10:34	2012-02-2	Show	GitHub Exploit DB Packet Storm

295458	-	mozilla	firefox thunderbird seamonkey	Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 4.x through 9.0, Thunderbird 5.0 through 9.0, and SeaMonkey before 2.7 allow remote attackers to cause a denial of servic…	NVD-CWE-noinfo	CVE-2012-0443	2024-11-21 10:34	2012-02-2	Show	GitHub Exploit DB Packet Storm

295459	-	mozilla debian suse opensuse	thunderbird seamonkey firefox debian_linux linux_enterprise_server linux_enterprise_desktop opensuse linux_enterprise_software_development_kit	Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.6.26 and 4.x through 9.0, Thunderbird before 3.1.18 and 5.0 through 9.0, and SeaMonkey before 2.7 allow remote a…	NVD-CWE-noinfo	CVE-2012-0442	2024-11-21 10:34	2012-02-2	Show	GitHub Exploit DB Packet Storm

295460	-	apache debian opensuse suse redhat	http_server debian_linux opensuse linux_enterprise_software_development_kit linux_enterprise_server enterprise_linux_desktop enterprise_linux_server enterprise_linux_workstation<…	protocol.c in the Apache HTTP Server 2.2.x through 2.2.21 does not properly restrict header information during construction of Bad Request (aka 400) error documents, which allows remote attackers to …	NVD-CWE-noinfo	CVE-2012-0053	2024-11-21 10:34	2012-01-28	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed