Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 25, 2026, 2:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
216821 7.5 危険 Drupal - Drupal core の データベース抽象化 API の expandArguments 関数における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2014-3704 2014-10-22 14:54 2014-10-15 Show GitHub Exploit DB Packet Storm
216822 9.3 危険 マイクロソフト - 複数の Microsoft Windows 製品のカーネルモードドライバの win32k.sys における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2014-4148 2014-10-22 11:29 2014-10-14 Show GitHub Exploit DB Packet Storm
216823 7.8 危険 ジュニパーネットワークス - Juniper Junos におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他 		CVE-2014-6380 2014-10-21 16:10 2014-10-10 Show GitHub Exploit DB Packet Storm
216824 7.5 危険 ジュニパーネットワークス - Juniper Junos における認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2014-6379 2014-10-21 16:09 2014-10-8 Show GitHub Exploit DB Packet Storm
216825 7.8 危険 ジュニパーネットワークス - Juniper Junos におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2014-6378 2014-10-21 16:09 2014-10-16 Show GitHub Exploit DB Packet Storm
216826 7.8 危険 ジュニパーネットワークス - Juniper JunosE におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2014-6377 2014-10-21 16:08 2014-10-9 Show GitHub Exploit DB Packet Storm
216827 5.5 警告 Huawei - Huawei E5332 におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2014-5328 2014-10-21 15:15 2014-10-10 Show GitHub Exploit DB Packet Storm
216828 5.5 警告 Huawei - Huawei E5332 におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2014-5327 2014-10-21 15:12 2014-10-10 Show GitHub Exploit DB Packet Storm
216829 7.7 危険 Cryoserver FCS (UK) Limited. - Cryoserver における権限昇格の脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2014-4867 2014-10-21 15:03 2014-10-7 Show GitHub Exploit DB Packet Storm
216830 4.6 警告 アドビシステムズ - Adobe ColdFusion における IP ベースのアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2014-0572 2014-10-21 14:18 2014-10-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 25, 2026, 4:01 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
296611 - unijimpe captcha Cross-site scripting (XSS) vulnerability in captchademo.php in Unijimpe Captcha allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO. CWE-79
Cross-site Scripting 		CVE-2012-2914 2024-11-21 10:39 2012-05-22 Show GitHub Exploit DB Packet Storm
296612 - mapsmarker leaflet_maps_marker_plugin Multiple cross-site scripting (XSS) vulnerabilities in the Leaflet plugin 0.0.1 for WordPress allow remote attackers to inject arbitrary web script or HTML via the id parameter to (1) leaflet_layer.p… CWE-79
Cross-site Scripting 		CVE-2012-2913 2024-11-21 10:39 2012-05-22 Show GitHub Exploit DB Packet Storm
296613 - kolja_schleich leaguemanager Multiple cross-site scripting (XSS) vulnerabilities in the LeagueManager plugin 3.7 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) group parameter in the show… CWE-79
Cross-site Scripting 		CVE-2012-2912 2024-11-21 10:39 2012-05-22 Show GitHub Exploit DB Packet Storm
296614 - silisoftware backupdb\(\) Cross-site scripting (XSS) vulnerability in backupDB.php in SiliSoftware backupDB() 1.2.7a allows remote attackers to inject arbitrary web script or HTML via the onlyDB parameter. CWE-79
Cross-site Scripting 		CVE-2012-2911 2024-11-21 10:39 2012-05-22 Show GitHub Exploit DB Packet Storm
296615 - silisoftware phpthumb\(\) Multiple cross-site scripting (XSS) vulnerabilities in SiliSoftware phpThumb() 1.7.11 allow remote attackers to inject arbitrary web script or HTML via the (1) dir parameter to demo/phpThumb.demo.ran… CWE-79
Cross-site Scripting 		CVE-2012-2910 2024-11-21 10:39 2012-05-22 Show GitHub Exploit DB Packet Storm
296616 - viscacha viscacha Multiple cross-site scripting (XSS) vulnerabilities in Viscacha 0.8.1.1 allow remote attackers to inject arbitrary web script or HTML via the (1) text field in the Private Messages System, (2) Bad Wo… CWE-79
Cross-site Scripting 		CVE-2012-2909 2024-11-21 10:39 2012-05-22 Show GitHub Exploit DB Packet Storm
296617 - viscacha viscacha Multiple SQL injection vulnerabilities in admin/bbcodes.php in Viscacha 0.8.1.1 allow remote attackers to execute arbitrary SQL commands via the (1) bbcodeexample, (2) buttonimage, or (3) bbcodetag p… CWE-89
SQL Injection 		CVE-2012-2908 2024-11-21 10:39 2012-05-22 Show GitHub Exploit DB Packet Storm
296618 - ishmael_sanchez aberdeen Cross-site scripting (XSS) vulnerability in the aberdeen_breadcrumb function in template.php in the Aberdeen theme 6.x-1.x before 6.x-1.11 for Drupal, when set to append the content title to the brea… CWE-79
Cross-site Scripting 		CVE-2012-2907 2024-11-21 10:39 2012-05-22 Show GitHub Exploit DB Packet Storm
296619 - artiphp artiphp_cms Multiple cross-site scripting (XSS) vulnerabilities in artpublic/recommandation/index.php in Artiphp CMS 5.5.0 Neo (r422) allow remote attackers to inject arbitrary web script or HTML via the (1) add… CWE-79
Cross-site Scripting 		CVE-2012-2906 2024-11-21 10:39 2012-05-22 Show GitHub Exploit DB Packet Storm
296620 - artiphp artiphp_cms Artiphp CMS 5.5.0 Neo (r422) stores database backups with predictable names under the web root with insufficient access control, which allows remote attackers to obtain sensitive information via a di… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2012-2905 2024-11-21 10:39 2012-05-22 Show GitHub Exploit DB Packet Storm