Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 8, 2026, noon

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
216841 5.8 警告 フォーティネット - Fortinet Fortiweb におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2014-3115 2014-05-12 17:43 2014-05-7 Show GitHub Exploit DB Packet Storm
216842 4.3 警告 Google - Google 検索アプライアンス ダイナミック ナビゲーションにクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-0362 2014-05-12 17:43 2014-05-1 Show GitHub Exploit DB Packet Storm
216843 4.3 警告 Bradesco Gateway Plugin project - WP e-Commerce プラグインで使用される Wordpress 用 Bradesco Gateway プラグインにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-5916 2014-05-12 17:42 2013-09-23 Show GitHub Exploit DB Packet Storm
216844 2.1 注意 WpGetReady - WordPress 用 NextCellent Gallery プラグインの admin/manage-images.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-3123 2014-05-12 17:23 2014-04-23 Show GitHub Exploit DB Packet Storm
216845 3.5 注意 OpenStack - OpenStack Compute のインスタンスレスキューモードにおける特定の compute ホストファイルを読まれる脆弱性 CWE-200
情報漏えい
CVE-2014-0134 2014-05-12 17:20 2014-03-31 Show GitHub Exploit DB Packet Storm
216846 4.3 警告 Fedora Project
Digia
- Qt の QtGui の GIF デコーダにおけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2014-0190 2014-05-12 17:15 2014-04-24 Show GitHub Exploit DB Packet Storm
216847 1.9 注意 The Foreman - Foreman で使用される Kafo におけるパスワードおよびその他の重要な情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-0135 2014-05-12 17:02 2014-04-9 Show GitHub Exploit DB Packet Storm
216848 5 警告 The Foreman - Foreman における重要な情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-0192 2014-05-12 17:02 2014-04-24 Show GitHub Exploit DB Packet Storm
216849 6.8 警告 The Foreman - Foreman における Web セッションをハイジャックされる脆弱性 CWE-287
不適切な認証
CVE-2014-0090 2014-05-12 17:00 2014-02-26 Show GitHub Exploit DB Packet Storm
216850 4.3 警告 Slashes and Dots Sdn Bhd - Offiria におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-2689 2014-05-12 16:57 2014-05-7 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 8, 2026, 4:54 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
293171 - mediawiki mediawiki Cross-site scripting (XSS) vulnerability in the outputPage function in includes/SkinTemplate.php in MediaWiki before 1.17.5, 1.18.x before 1.18.4, and 1.19.x before 1.19.1 allows remote attackers to … CWE-79
Cross-site Scripting
CVE-2012-2698 2024-11-21 10:39 2012-06-30 Show GitHub Exploit DB Packet Storm
293172 - libguestfs libguestfs virt-edit in libguestfs before 1.18.0 does not preserve the permissions from the original file and saves the new file with world-readable permissions when editing, which might allow local guest users… CWE-255
Credentials Management
CVE-2012-2690 2024-11-21 10:39 2012-06-30 Show GitHub Exploit DB Packet Storm
293173 - redhat sos The sosreport utility in the Red Hat sos package before 2.2-29 does not remove the root user password information from the Kickstart configuration file (/root/anaconda-ks.cfg) when creating an archiv… CWE-255
Credentials Management
CVE-2012-2664 2024-11-21 10:39 2012-06-30 Show GitHub Exploit DB Packet Storm
293174 - mikel_olasagasti revelation Revelation 0.4.13-2 and earlier does not iterate through SHA hashing algorithms for AES encryption, which makes it easier for context-dependent attackers to guess passwords via a brute force attack. CWE-255
Credentials Management
CVE-2012-2743 2024-11-21 10:39 2012-06-28 Show GitHub Exploit DB Packet Storm
293175 - mikel_olasagasti revelation Revelation 0.4.13-2 and earlier uses only the first 32 characters of a password followed by a sequence of zeros, which reduces the entropy and makes it easier for context-dependent attackers to crack… CWE-255
Credentials Management
CVE-2012-2742 2024-11-21 10:39 2012-06-28 Show GitHub Exploit DB Packet Storm
293176 - mathew_winstone mobile_tools Multiple cross-site scripting (XSS) vulnerabilities in the Mobile Tools module 6.x-2.x before 6.x-2.3 for Drupal allow remote attackers to inject arbitrary web script or HTML via the (1) Mobile URL f… CWE-79
Cross-site Scripting
CVE-2012-2717 2024-11-21 10:39 2012-06-28 Show GitHub Exploit DB Packet Storm
293177 - shlomi_fish config-inifiles The Config::IniFiles module before 2.71 for Perl creates temporary files with predictable names, which allows local users to overwrite arbitrary files via a symlink attack. NOTE: some of these detai… NVD-CWE-Other
CVE-2012-2451 2024-11-21 10:39 2012-06-28 Show GitHub Exploit DB Packet Storm
293178 - strongswan strongswan The GMP Plugin in strongSwan 4.2.0 through 4.6.3 allows remote attackers to bypass authentication via a (1) empty or (2) zeroed RSA signature, aka "RSA signature verification vulnerability." CWE-287
Improper Authentication
CVE-2012-2388 2024-11-21 10:39 2012-06-28 Show GitHub Exploit DB Packet Storm
293179 - google chrome Integer overflow in Google Chrome before 20.0.1132.43 allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted data in the Matroska container format. CWE-189
Numeric Errors
CVE-2012-2834 2024-11-21 10:39 2012-06-27 Show GitHub Exploit DB Packet Storm
293180 - google chrome Buffer overflow in the JS API in the PDF functionality in Google Chrome before 20.0.1132.43 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown … CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2012-2833 2024-11-21 10:39 2012-06-27 Show GitHub Exploit DB Packet Storm