Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 11, 2026, 6:01 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
217011 5.5 警告 シスコシステムズ - Cisco Unified Communications Manager の Real Time Monitoring Tool の実装における任意のファイルを読まれる脆弱性 CWE-20
不適切な入力確認
CVE-2014-3292 2014-06-11 17:10 2014-06-10 Show GitHub Exploit DB Packet Storm
217012 4 警告 シスコシステムズ - Cisco Unified Communications Domain Manager の Java インターフェースにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2014-3287 2014-06-11 17:09 2014-06-9 Show GitHub Exploit DB Packet Storm
217013 4.3 警告 シスコシステムズ - Cisco AsyncOS 製品にクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-3289 2014-06-11 16:37 2014-06-10 Show GitHub Exploit DB Packet Storm
217014 6 警告 (複数のベンダ) - 複数製品の UEFI ファームウェアの実装に脆弱性 - CVE-2014-2961 2014-06-11 16:19 2014-06-9 Show GitHub Exploit DB Packet Storm
217015 4.3 警告 Misery Project - Drupal 用 Misery モジュールにおけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2013-4599 2014-06-11 15:55 2013-11-13 Show GitHub Exploit DB Packet Storm
217016 4 警告 Rik de Boer - Drupal 用 Revisioning モジュールにおける重要な情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2013-4597 2014-06-11 15:54 2013-11-13 Show GitHub Exploit DB Packet Storm
217017 5 警告 Gordon Heydon - Drupal 用 Secure Pages モジュールにおける重要な情報を取得される脆弱性 CWE-310
暗号の問題
CVE-2013-4595 2014-06-11 15:54 2013-11-6 Show GitHub Exploit DB Packet Storm
217018 4 警告 Marc Ferran - Drupal 用 Autocomplete Widgets for Text and Number Fields モジュールにおける重要なフィールドの値を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2013-1973 2014-06-11 15:53 2013-04-17 Show GitHub Exploit DB Packet Storm
217019 4.3 警告 Jojo Open Source Content Management System - Jojo CMS の plugins/jojo_core/forgot_password.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-3082 2014-06-11 15:32 2013-05-7 Show GitHub Exploit DB Packet Storm
217020 7.5 危険 Jojo Open Source Content Management System - Jojo CMS の plugins/jojo_core/classes/Jojo.php の checkEmailFormat 関数における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2013-3081 2014-06-11 15:32 2013-05-7 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 11, 2026, 4:09 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
292211 - flatnux flatnux Multiple cross-site scripting (XSS) vulnerabilities in FlatnuX CMS 2012-03.08 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) title_en, (2) summary_en, or (3) bo… CWE-79
Cross-site Scripting
CVE-2012-4892 2024-11-21 10:43 2012-09-11 Show GitHub Exploit DB Packet Storm
292212 - manageengine firewall_analyzer Cross-site scripting (XSS) vulnerability in fw/index2.do in ManageEngine Firewall Analyzer 7.2 allows remote attackers to inject arbitrary web script or HTML via the url parameter, a different vector… CWE-79
Cross-site Scripting
CVE-2012-4891 2024-11-21 10:43 2012-09-11 Show GitHub Exploit DB Packet Storm
292213 - flatnux flatnux Multiple cross-site scripting (XSS) vulnerabilities in FlatnuX CMS 2011 08.09.2 and earlier allow remote attackers to inject arbitrary web script or HTML via a (1) comment to the news, (2) title to t… CWE-79
Cross-site Scripting
CVE-2012-4890 2024-11-21 10:43 2012-09-11 Show GitHub Exploit DB Packet Storm
292214 - manageengine firewall_analyzer Multiple cross-site scripting (XSS) vulnerabilities in ManageEngine Firewall Analyzer 7.2 allow remote attackers to inject arbitrary web script or HTML via the (1) subTab or (2) tab parameter to crea… CWE-79
Cross-site Scripting
CVE-2012-4889 2024-11-21 10:43 2012-09-11 Show GitHub Exploit DB Packet Storm
292215 - mediawiki mediawiki The wikitext parser in MediaWiki 1.17.x before 1.17.3 and 1.18.x before 1.18.2 allows remote attackers to cause a denial of service (infinite loop) via certain input, as demonstrated by the padleft f… NVD-CWE-noinfo
CVE-2012-4885 2024-11-21 10:43 2012-09-10 Show GitHub Exploit DB Packet Storm
292216 - 3ds 3dvia_composer Multiple untrusted search path vulnerabilities in 3DVIA Composer V6R2012 HF1 Build 6.8.1.1652 allow local users to gain privileges via a Trojan horse (1) dwmapi.dll or (2) ibfs32.dll file in the curr… NVD-CWE-Other
CVE-2012-4883 2024-11-21 10:43 2012-09-7 Show GitHub Exploit DB Packet Storm
292217 - 3ds 3d_xml_player Multiple untrusted search path vulnerabilities in 3D XML Player 6.212.13.12076 allow local users to gain privileges via a Trojan horse (1) dwmapi.dll or (2) JT0DevPhase.dll file in the current workin… NVD-CWE-Other
CVE-2012-4882 2024-11-21 10:43 2012-09-7 Show GitHub Exploit DB Packet Storm
292218 - sony moviez_hd Untrusted search path vulnerability in moviEZ HD 1.0 Build 2554-29894-A allows local users to gain privileges via a Trojan horse avrt.dll file in the current working directory, as demonstrated by a d… NVD-CWE-Other
CVE-2012-4881 2024-11-21 10:43 2012-09-7 Show GitHub Exploit DB Packet Storm
292219 - sony dvd_architect_pro
dvd_architect_studio
Multiple untrusted search path vulnerabilities in DVD Architect Pro 5.2 Build 133 and DVD Architect Studio 5.0 Build 156 allow local users to gain privileges via a Trojan horse (1) enc_mp2v.200 or (2… NVD-CWE-Other
CVE-2012-4880 2024-11-21 10:43 2012-09-7 Show GitHub Exploit DB Packet Storm
292220 - wago wago_i\/o_system_758_industrial_pc_device The Linux Console on the WAGO I/O System 758 model 758-870, 758-874, 758-875, and 758-876 Industrial PC (IPC) devices has a default password of wago for the (1) root and (2) admin accounts, (3) a def… CWE-255
Credentials Management
CVE-2012-4879 2024-11-21 10:43 2012-09-7 Show GitHub Exploit DB Packet Storm