Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 8, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
216831	4	警告	Moodle	-	Moodle の blind-marking の実装における学生 ID の匿名性が失われる脆弱性	CWE-200 情報漏えい	CVE-2014-0215	2014-05-28 18:28	2014-05-19	Show	GitHub Exploit DB Packet Storm

216832	6.8	警告	Moodle	-	Moodle の login/token.php におけるセッションをハイジャックされる脆弱性	CWE-287 不適切な認証	CVE-2014-0214	2014-05-28 18:28	2014-05-19	Show	GitHub Exploit DB Packet Storm

216833	6.8	警告	Moodle	-	Moodle の Assignment サブシステムの mod/assign/locallib.php におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2014-0213	2014-05-28 18:27	2014-05-19	Show	GitHub Exploit DB Packet Storm

216834	4.3	警告	iMember360	-	WordPress 用 iMember360 プラグインにおける任意のユーザを削除される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2014-3849	2014-05-28 18:26	2014-04-24	Show	GitHub Exploit DB Packet Storm

216835	5	警告	iMember360	-	WordPress 用 iMember360 プラグインにおけるデータベースの資格情報を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2014-3848	2014-05-28 18:26	2014-04-17	Show	GitHub Exploit DB Packet Storm

216836	7.2	危険	Panda Security	-	複数の Panda Security 製品における権限を取得される脆弱性	CWE-noinfo 情報不足	CVE-2014-3450	2014-05-28 18:25	2014-05-20	Show	GitHub Exploit DB Packet Storm

216837	4.3	警告	OpalVOIP Ekiga.org Novell	-	Ekiga で使用される Portable Tool Library におけるサービス運用妨害 (DoS) の脆弱性	CWE-119 バッファエラー	CVE-2013-1864	2014-05-28 18:21	2013-01-12	Show	GitHub Exploit DB Packet Storm

216838	6.8	警告	Ivan Zahariev	-	IZArc におけるファイル拡張子を偽装する攻撃を実行される脆弱性	CWE-94 コード・インジェクション	CVE-2014-2720	2014-05-28 18:20	2014-05-5	Show	GitHub Exploit DB Packet Storm

216839	4.9	警告	Linux	-	Linux kernel の kernel/futex.c 内の futex_wait_requeue_pi 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2012-6647	2014-05-28 18:19	2012-08-9	Show	GitHub Exploit DB Packet Storm

216840	7.6	危険	シスコシステムズ	-	Cisco NX-OS の Smart Call Home の実装におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2014-3261	2014-05-28 18:15	2014-05-21	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 8, 2026, 4:54 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
295451	-	php	php	PHP before 5.3.9 has improper libxslt security settings, which allows remote attackers to create arbitrary files via a crafted XSLT stylesheet that uses the libxslt output extension.	CWE-264 Permissions, Privileges, and Access Controls	CVE-2012-0057	2024-11-21 10:34	2012-02-2	Show	GitHub Exploit DB Packet Storm

295452	-	mozilla	firefox seamonkey	Mozilla Firefox 4.x through 9.0 and SeaMonkey before 2.7 on Linux and Mac OS X set weak permissions for Firefox Recovery Key.html, which might allow local users to read a Firefox Sync key via standar…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2012-0450	2024-11-21 10:34	2012-02-2	Show	GitHub Exploit DB Packet Storm

295453	-	mozilla debian suse opensuse	thunderbird seamonkey firefox debian_linux linux_enterprise_server linux_enterprise_desktop opensuse linux_enterprise_software_development_kit	Mozilla Firefox before 3.6.26 and 4.x through 9.0, Thunderbird before 3.1.18 and 5.0 through 9.0, and SeaMonkey before 2.7 allow remote attackers to cause a denial of service (memory corruption and a…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2012-0449	2024-11-21 10:34	2012-02-2	Show	GitHub Exploit DB Packet Storm

295454	-	mozilla	firefox thunderbird seamonkey	Mozilla Firefox 4.x through 9.0, Thunderbird 5.0 through 9.0, and SeaMonkey before 2.7 do not properly initialize data for image/vnd.microsoft.icon images, which allows remote attackers to obtain pot…	CWE-200 Information Exposure	CVE-2012-0447	2024-11-21 10:34	2012-02-2	Show	GitHub Exploit DB Packet Storm

295455	-	mozilla	firefox thunderbird seamonkey	Multiple cross-site scripting (XSS) vulnerabilities in Mozilla Firefox 4.x through 9.0, Thunderbird 5.0 through 9.0, and SeaMonkey before 2.7 allow remote attackers to inject arbitrary web script or …	CWE-79 Cross-site Scripting	CVE-2012-0446	2024-11-21 10:34	2012-02-2	Show	GitHub Exploit DB Packet Storm

295456	-	mozilla	firefox thunderbird seamonkey	Mozilla Firefox 4.x through 9.0, Thunderbird 5.0 through 9.0, and SeaMonkey before 2.7 allow remote attackers to bypass the HTML5 frame-navigation policy and replace arbitrary sub-frames by creating …	CWE-264 Permissions, Privileges, and Access Controls	CVE-2012-0445	2024-11-21 10:34	2012-02-2	Show	GitHub Exploit DB Packet Storm

295457	-	mozilla debian suse opensuse canonical	thunderbird seamonkey firefox debian_linux linux_enterprise_server linux_enterprise_desktop opensuse linux_enterprise_software_development_kit ubuntu_linux	Mozilla Firefox before 3.6.26 and 4.x through 9.0, Thunderbird before 3.1.18 and 5.0 through 9.0, and SeaMonkey before 2.7 do not properly initialize nsChildView data structures, which allows remote …	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2012-0444	2024-11-21 10:34	2012-02-2	Show	GitHub Exploit DB Packet Storm

295458	-	mozilla	firefox thunderbird seamonkey	Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 4.x through 9.0, Thunderbird 5.0 through 9.0, and SeaMonkey before 2.7 allow remote attackers to cause a denial of servic…	NVD-CWE-noinfo	CVE-2012-0443	2024-11-21 10:34	2012-02-2	Show	GitHub Exploit DB Packet Storm

295459	-	mozilla debian suse opensuse	thunderbird seamonkey firefox debian_linux linux_enterprise_server linux_enterprise_desktop opensuse linux_enterprise_software_development_kit	Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.6.26 and 4.x through 9.0, Thunderbird before 3.1.18 and 5.0 through 9.0, and SeaMonkey before 2.7 allow remote a…	NVD-CWE-noinfo	CVE-2012-0442	2024-11-21 10:34	2012-02-2	Show	GitHub Exploit DB Packet Storm

295460	-	apache debian opensuse suse redhat	http_server debian_linux opensuse linux_enterprise_software_development_kit linux_enterprise_server enterprise_linux_desktop enterprise_linux_server enterprise_linux_workstation<…	protocol.c in the Apache HTTP Server 2.2.x through 2.2.21 does not properly restrict header information during construction of Bad Request (aka 400) error documents, which allows remote attackers to …	NVD-CWE-noinfo	CVE-2012-0053	2024-11-21 10:34	2012-01-28	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed