Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 6, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
216921 7.8 危険 The Prosody Team - Prosody におけるサービス運用妨害 (DoS) の脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2014-2745 2014-04-15 19:44 2014-04-2 Show GitHub Exploit DB Packet Storm
216922 7.8 危険 The Prosody Team
Lightwitch		 - Prosody および Lightwitch Metronome の plugins/mod_compression.lua におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2014-2744 2014-04-15 19:41 2014-04-2 Show GitHub Exploit DB Packet Storm
216923 7.8 危険 Lightwitch - Lightwitch Metronome の plugins/mod_compression.lua におけるサービス運用妨害 (DoS) の脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2014-2743 2014-04-15 19:34 2014-04-4 Show GitHub Exploit DB Packet Storm
216924 10 危険 Alex Saveliev - J2K-Codec に複数の脆弱性 - CVE-2014-0349 2014-04-15 18:51 2014-04-8 Show GitHub Exploit DB Packet Storm
216925 3.5 注意 ウェブセンス - Websense TRITON Unified Security Center に情報漏えいの脆弱性 CWE-200
情報漏えい 		CVE-2014-0347 2014-04-15 18:50 2014-04-7 Show GitHub Exploit DB Packet Storm
216926 6 警告 IBM - IBM Business Process Manager のユーザ属性の実装における重要な情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2014-0908 2014-04-15 18:27 2014-04-4 Show GitHub Exploit DB Packet Storm
216927 4 警告 IBM - IBM SPSS Analytic Server における重要な情報を取得される脆弱性 CWE-255
証明書・パスワード管理 		CVE-2014-0920 2014-04-15 18:25 2014-04-8 Show GitHub Exploit DB Packet Storm
216928 6.8 警告 Cambridge Enterprise - JBIG-KIT の libjbig/jbig.c の jbg_dec_in 関数におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2013-6369 2014-04-15 18:18 2013-11-19 Show GitHub Exploit DB Packet Storm
216929 4.3 警告 Beanbag - Review Board の Submitters リストにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-4795 2014-04-15 18:13 2013-07-28 Show GitHub Exploit DB Packet Storm
216930 4.7 警告 OSIsoft - DNP3 用 OSIsoft PI Interface の DNP Master Driver におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2013-2828 2014-04-15 18:11 2013-04-11 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 7, 2026, 4:22 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
293091 - redhat
squirrelmail 		enterprise_linux
squirrelmail 		functions/imap_general.php in SquirrelMail, as used in Red Hat Enterprise Linux (RHEL) 4 and 5, does not properly handle 8-bit characters in passwords, which allows remote attackers to cause a denial… CWE-399
 Resource Management Errors 		CVE-2012-2124 2024-11-21 10:38 2013-01-18 Show GitHub Exploit DB Packet Storm
293092 - pizzashack rssh Incomplete blacklist vulnerability in rssh before 2.3.4, when the rsync protocol is enabled, allows local users to bypass intended restricted shell access via the --rsh command line option. NVD-CWE-Other
CVE-2012-2252 2024-11-21 10:38 2013-01-11 Show GitHub Exploit DB Packet Storm
293093 - pizzashack rssh rssh 2.3.2, as used by Debian, Fedora, and others, when the rsync protocol is enabled, allows local users to bypass intended restricted shell access via a (1) "-e" or (2) "--" command line option. CWE-20
 Improper Input Validation  		CVE-2012-2251 2024-11-21 10:38 2013-01-11 Show GitHub Exploit DB Packet Storm
293094 - apache cxf Apache CXF 2.4.5 through 2.4.7, 2.5.1 through 2.5.3, and 2.6.x before 2.6.1, does not properly enforce child policies of a WS-SecurityPolicy 1.1 SupportingToken policy on the client side, which allow… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2012-2378 2024-11-21 10:38 2013-01-5 Show GitHub Exploit DB Packet Storm
293095 - apache cxf Apache CXF 2.4.x before 2.4.8, 2.5.x before 2.5.4, and 2.6.x before 2.6.1, when a Supporting Token specifies a child WS-SecurityPolicy 1.1 or 1.2 policy, does not properly ensure that an XML element … NVD-CWE-noinfo
CVE-2012-2379 2024-11-21 10:38 2013-01-3 Show GitHub Exploit DB Packet Storm
293096 - mahara mahara Cross-site scripting (XSS) vulnerability in group/members.php in Mahara 1.5.x before 1.5.7 and 1.6.x before 1.6.2 allows remote attackers to inject arbitrary web script or HTML via the query paramete… CWE-79
Cross-site Scripting 		CVE-2012-2253 2024-11-21 10:38 2012-11-25 Show GitHub Exploit DB Packet Storm
293097 - mahara mahara Cross-site scripting (XSS) vulnerability in Mahara 1.4.x before 1.4.5 and 1.5.x before 1.5.4 allows remote attackers to inject arbitrary web script or HTML via vectors related to artefact/file/ and a… CWE-79
Cross-site Scripting 		CVE-2012-2247 2024-11-21 10:38 2012-11-25 Show GitHub Exploit DB Packet Storm
293098 - mahara mahara Mahara 1.4.x before 1.4.5 and 1.5.x before 1.5.4 allows remote attackers to conduct clickjacking attacks to delete arbitrary users and bypass CSRF protection via account/delete.php. CWE-20
 Improper Input Validation  		CVE-2012-2246 2024-11-21 10:38 2012-11-25 Show GitHub Exploit DB Packet Storm
293099 - mahara mahara Mahara 1.4.x before 1.4.5 and 1.5.x before 1.5.4 allows remote authenticated administrators to execute arbitrary programs by modifying the path to clamav. NOTE: this can be exploited without authent… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2012-2244 2024-11-21 10:38 2012-11-25 Show GitHub Exploit DB Packet Storm
293100 - mahara mahara Cross-site scripting (XSS) vulnerability in Mahara 1.4.x before 1.4.5 and 1.5.x before 1.5.4 allows remote attackers to inject arbitrary web script or HTML by uploading an XML file with the xhtml ext… CWE-79
Cross-site Scripting 		CVE-2012-2243 2024-11-21 10:38 2012-11-25 Show GitHub Exploit DB Packet Storm