Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 7, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
216991 4.3 警告 Neo Technology - Neo4J におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
CWE-78
CVE-2013-7259 2014-05-2 10:44 2013-08-6 Show GitHub Exploit DB Packet Storm
216992 7.5 危険 Simple Machines - Simple Machines Forum における任意のユーザを偽装される脆弱性 CWE-20
不適切な入力確認
CVE-2013-7236 2014-05-2 10:34 2013-12-13 Show GitHub Exploit DB Packet Storm
216993 7.5 危険 Simple Machines - Simple Machines Forum における任意のユーザを偽装される脆弱性 CWE-20
不適切な入力確認
CVE-2013-7235 2014-05-2 10:34 2013-12-13 Show GitHub Exploit DB Packet Storm
216994 4.3 警告 Simple Machines - Simple Machines Forum におけるクリックジャッキング攻撃を実行される脆弱性 CWE-20
不適切な入力確認
CVE-2013-7234 2014-05-2 10:34 2013-12-13 Show GitHub Exploit DB Packet Storm
216995 10 危険 Mozilla Foundation - Windows 上で稼動する Mozilla Firefox および SeaMonkey の Cairo で使用される Pixman における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2014-1528 2014-05-1 19:40 2014-04-29 Show GitHub Exploit DB Packet Storm
216996 5 警告 Mozilla Foundation - Android 上で稼動する Mozilla Firefox におけるアドレスバーを偽装される脆弱性 CWE-noinfo
情報不足
CVE-2014-1527 2014-05-1 19:35 2014-04-29 Show GitHub Exploit DB Packet Storm
216997 5.8 警告 Mozilla Foundation - Mozilla Firefox および SeaMonkey の XrayWrapper 実装におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-1526 2014-05-1 19:28 2014-04-29 Show GitHub Exploit DB Packet Storm
216998 9.3 危険 Mozilla Foundation - Mozilla Firefox および SeaMonkey の mozilla::dom::TextTrack::AddCue 関数における任意のコードを実行される脆弱性 CWE-399
リソース管理の問題
CVE-2014-1525 2014-05-1 19:12 2014-04-29 Show GitHub Exploit DB Packet Storm
216999 10 危険 Mozilla Foundation - Mozilla Firefox および SeaMonkey の Web Audio サブシステムの mozilla::dom::OscillatorNodeEngine::ComputeCustom 関数における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2014-1522 2014-05-1 18:38 2014-04-29 Show GitHub Exploit DB Packet Storm
217000 6.9 警告 Mozilla Foundation - Windows 上で稼働する Mozilla Firefox の Maintenance Service Installer の maintenservice_installer.exe における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-1520 2014-05-1 18:35 2014-04-29 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 7, 2026, 4:22 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
293261 - moodle moodle Moodle 1.9.x before 1.9.18, 2.0.x before 2.0.9, 2.1.x before 2.1.6, and 2.2.x before 2.2.3 allows remote authenticated users to bypass the moodle/calendar:manageownentries capability requirement and … CWE-264
Permissions, Privileges, and Access Controls
CVE-2012-2367 2024-11-21 10:38 2012-07-21 Show GitHub Exploit DB Packet Storm
293262 - moodle moodle mod/data/preset.php in Moodle 2.1.x before 2.1.6 and 2.2.x before 2.2.3 does not properly iterate through an array, which allows remote authenticated users to overwrite arbitrary database activity pr… NVD-CWE-Other
CVE-2012-2366 2024-11-21 10:38 2012-07-21 Show GitHub Exploit DB Packet Storm
293263 - moodle moodle Cross-site scripting (XSS) vulnerability in Moodle 2.0.x before 2.0.9, 2.1.x before 2.1.6, and 2.2.x before 2.2.3 allows remote authenticated users to inject arbitrary web script or HTML via the idnu… CWE-79
Cross-site Scripting
CVE-2012-2365 2024-11-21 10:38 2012-07-21 Show GitHub Exploit DB Packet Storm
293264 - moodle moodle Cross-site scripting (XSS) vulnerability in lib/filelib.php in Moodle 2.0.x before 2.0.9, 2.1.x before 2.1.6, and 2.2.x before 2.2.3 allows remote authenticated users to inject arbitrary web script o… CWE-79
Cross-site Scripting
CVE-2012-2364 2024-11-21 10:38 2012-07-21 Show GitHub Exploit DB Packet Storm
293265 - moodle moodle SQL injection vulnerability in calendar/event.php in the calendar implementation in Moodle 1.9.x before 1.9.18 allows remote authenticated users to execute arbitrary SQL commands via a crafted calend… CWE-89
SQL Injection
CVE-2012-2363 2024-11-21 10:38 2012-07-21 Show GitHub Exploit DB Packet Storm
293266 - moodle moodle Cross-site scripting (XSS) vulnerability in blog/lib.php in the blog implementation in Moodle 1.9.x before 1.9.18, when Internet Explorer is used, allows remote attackers to inject arbitrary web scri… CWE-79
Cross-site Scripting
CVE-2012-2362 2024-11-21 10:38 2012-07-21 Show GitHub Exploit DB Packet Storm
293267 - moodle moodle Cross-site scripting (XSS) vulnerability in admin/webservice/forms.php in the web services implementation in Moodle 2.0.x before 2.0.9, 2.1.x before 2.1.6, and 2.2.x before 2.2.3 allows remote authen… CWE-79
Cross-site Scripting
CVE-2012-2361 2024-11-21 10:38 2012-07-21 Show GitHub Exploit DB Packet Storm
293268 - moodle moodle Cross-site scripting (XSS) vulnerability in the Wiki subsystem in Moodle 2.0.x before 2.0.9, 2.1.x before 2.1.6, and 2.2.x before 2.2.3 allows remote authenticated users to inject arbitrary web scrip… CWE-79
Cross-site Scripting
CVE-2012-2360 2024-11-21 10:38 2012-07-21 Show GitHub Exploit DB Packet Storm
293269 - moodle moodle admin/roles/override.php in Moodle 2.0.x before 2.0.9, 2.1.x before 2.1.6, and 2.2.x before 2.2.3 allows remote authenticated users to gain privileges by leveraging the teacher role and modifying the… CWE-264
Permissions, Privileges, and Access Controls
CVE-2012-2359 2024-11-21 10:38 2012-07-21 Show GitHub Exploit DB Packet Storm
293270 - moodle moodle Moodle 2.0.x before 2.0.9, 2.1.x before 2.1.6, and 2.2.x before 2.2.3 allows remote authenticated users to bypass an activity's read-only state and modify the database by leveraging the student role … CWE-264
Permissions, Privileges, and Access Controls
CVE-2012-2358 2024-11-21 10:38 2012-07-21 Show GitHub Exploit DB Packet Storm