Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 11, 2026, 12:16 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
216881 4.3 警告 Castor Project - Castor の Xerces SAX パーサのデフォルト設定における XML 外部エンティティ攻撃を実行される脆弱性 CWE-16
環境設定
CVE-2014-3004 2014-06-16 15:45 2014-05-27 Show GitHub Exploit DB Packet Storm
216882 7.5 危険 Another Awesome Stuff - ZeroCMS の zero_view_article.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2014-4034 2014-06-16 14:22 2014-06-9 Show GitHub Exploit DB Packet Storm
216883 4.3 警告 eFront Learning - Epignosis eFront の libraries/includes/personal/profile.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-4033 2014-06-16 14:21 2014-05-26 Show GitHub Exploit DB Packet Storm
216884 4.3 警告 Fiyo CMS - Fiyo CMS の apps/app_comment/form_comment.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-4032 2014-06-16 14:21 2014-05-30 Show GitHub Exploit DB Packet Storm
216885 3.3 注意 Fedora Project
レッドハット
- System Security Services Daemon におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-0249 2014-06-16 14:06 2014-05-13 Show GitHub Exploit DB Packet Storm
216886 9.3 危険 Ricardo Villalba
mplayer2 project
- SMPlayer で使用される MPlayer2 の subreader.c におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2011-3625 2014-06-16 13:59 2011-06-29 Show GitHub Exploit DB Packet Storm
216887 4.6 警告 Daiki Ueno - libfep における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-3980 2014-06-16 13:52 2014-06-4 Show GitHub Exploit DB Packet Storm
216888 10 危険 Rocket Software - Rocket Servergraph の Tivoli Storage Manager 用 Admin Center における任意のコマンドを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2014-3915 2014-06-16 13:48 2014-06-2 Show GitHub Exploit DB Packet Storm
216889 9.3 危険 サムスン - Samsung iPOLiS Device Manager における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2014-3911 2014-06-16 12:42 2014-06-4 Show GitHub Exploit DB Packet Storm
216890 6.8 警告 Member Approval project - WordPress 用 Member Approval プラグインにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2014-3850 2014-06-16 12:15 2014-06-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 11, 2026, 4:09 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
293621 - microsoft ftp_service Microsoft FTP Service 7.0 and 7.5 for Internet Information Services (IIS) processes unspecified commands before TLS is enabled for a session, which allows remote attackers to obtain sensitive informa… CWE-200
Information Exposure
CVE-2012-2532 2024-11-21 10:39 2012-11-14 Show GitHub Exploit DB Packet Storm
293622 - - - Microsoft Internet Information Services (IIS) 7.5 uses weak permissions for the Operational log, which allows local users to discover credentials by reading this file, aka "Password Disclosure Vulner… CWE-200
Information Exposure
CVE-2012-2531 2024-11-21 10:39 2012-11-14 Show GitHub Exploit DB Packet Storm
293623 - microsoft windows_server_2008
windows_xp
windows_7
windows_server_2003
windows_vista
Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Win… CWE-399
 Resource Management Errors
CVE-2012-2530 2024-11-21 10:39 2012-11-14 Show GitHub Exploit DB Packet Storm
293624 - microsoft .net_framework Untrusted search path vulnerability in Entity Framework in ADO.NET in Microsoft .NET Framework 1.0 SP3, 1.1 SP1, 2.0 SP2, 3.5, 3.5.1, and 4 allows local users to gain privileges via a Trojan horse DL… NVD-CWE-Other
CVE-2012-2519 2024-11-21 10:39 2012-11-14 Show GitHub Exploit DB Packet Storm
293625 - advance_productivity_software dte_axiom Advanced Productivity Software DTE Axiom before 12.3.3 does not validate the registration ID, which allows remote attackers to bypass authentication and read or modify data about users, customers, an… CWE-264
Permissions, Privileges, and Access Controls
CVE-2012-2455 2024-11-21 10:39 2012-11-10 Show GitHub Exploit DB Packet Storm
293626 - xen xen
xen-unstable
The PyGrub boot loader in Xen unstable before changeset 25589:60f09d1ab1fe, 4.2.x, and 4.1.x allows local para-virtualized guest users to cause a denial of service (memory consumption) via a large (1… CWE-20
 Improper Input Validation 
CVE-2012-2625 2024-11-21 10:39 2012-11-1 Show GitHub Exploit DB Packet Storm
293627 - redhat rhncfg Red Hat Network (RHN) Configuration Client (rhncfg-client) in rhncfg before 5.10.27-8 uses weak permissions (world-readable) for /var/log/rhncfg-actions, which allows local users to obtain sensitive … CWE-264
Permissions, Privileges, and Access Controls
CVE-2012-2679 2024-11-21 10:39 2012-10-23 Show GitHub Exploit DB Packet Storm
293628 - microsoft sql_server
sql_server_reporting_services
Cross-site scripting (XSS) vulnerability in the SQL Server Report Manager in Microsoft SQL Server 2000 Reporting Services SP2 and SQL Server 2005 SP4, 2008 SP2 and SP3, 2008 R2 SP1, and 2012 allows r… CWE-79
Cross-site Scripting
CVE-2012-2552 2024-11-21 10:39 2012-10-10 Show GitHub Exploit DB Packet Storm
293629 - microsoft windows_server_2008
windows_7
The server in Kerberos in Microsoft Windows Server 2008 R2 and R2 SP1, and Windows 7 Gold and SP1, allows remote attackers to cause a denial of service (NULL pointer dereference and reboot) via a cra… NVD-CWE-Other
CVE-2012-2551 2024-11-21 10:39 2012-10-10 Show GitHub Exploit DB Packet Storm
293630 - microsoft works Microsoft Works 9 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted Word .doc file, aka "Works Heap Vulnerability." CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2012-2550 2024-11-21 10:39 2012-10-10 Show GitHub Exploit DB Packet Storm