Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 5, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
217041 6.8 警告 Mozilla Foundation - 複数の Mozilla 製品の mozilla::WaveReader::DecodeAudioData 機能における重要な情報を取得される脆弱性 CWE-119
バッファエラー 		CVE-2014-1497 2014-04-8 17:02 2014-03-18 Show GitHub Exploit DB Packet Storm
217042 9.3 危険 Mozilla Foundation - 複数の Mozilla 製品のブラウザエンジンにおけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2014-1493 2014-04-8 17:01 2014-03-18 Show GitHub Exploit DB Packet Storm
217043 4.3 警告 Huawei - Huawei Echo Life 光ルータにクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-0337 2014-04-8 16:56 2014-04-2 Show GitHub Exploit DB Packet Storm
217044 5 警告 Net-SNMP - Net-SNMP の ICMP-MIB の Linux の実装におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2014-2284 2014-04-8 15:54 2014-02-19 Show GitHub Exploit DB Packet Storm
217045 7.1 危険 Linux - Linux Kernel の net/sctp/sm_statefuns.c 内の sctp_sf_do_5_1D_ce 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2014-0101 2014-04-8 15:53 2014-03-3 Show GitHub Exploit DB Packet Storm
217046 6.2 警告 Linux - Linux Kernel の fs/cifs/file.c 内の cifs_iovec_write 関数における重要な情報を取得される脆弱性 CWE-119
バッファエラー 		CVE-2014-0069 2014-04-8 15:52 2014-02-14 Show GitHub Exploit DB Packet Storm
217047 4.3 警告 Ruby on Rails project - Ruby on Rails の actionview/lib/action_view/helpers/number_helper.rb におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-0081 2014-04-8 15:48 2014-02-18 Show GitHub Exploit DB Packet Storm
217048 4.3 警告 Horde - Horde Groupware Webmail Edition で使用される Horde Internet Mail Program におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-6640 2014-04-8 14:40 2012-06-26 Show GitHub Exploit DB Packet Storm
217049 4.3 警告 Horde - Horde Groupware Webmail Edition で使用される Horde Kronolith Calendar Application H4 におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-5567 2014-04-8 14:39 2012-11-14 Show GitHub Exploit DB Packet Storm
217050 4.3 警告 Horde - Horde Groupware Webmail Edition で使用される Horde Kronolith Calendar Application H4 におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-5566 2014-04-8 14:33 2012-05-29 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 5, 2026, 4:51 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
292931 - opera opera_browser Opera before 11.62 allows remote attackers to spoof the address field by triggering the launch of a dialog window associated with a different domain. CWE-20
 Improper Input Validation  		CVE-2012-1927 2024-11-21 10:38 2012-03-28 Show GitHub Exploit DB Packet Storm
292932 - opera opera_browser Opera before 11.62 allows remote attackers to bypass the Same Origin Policy via the (1) history.pushState and (2) history.replaceState functions in conjunction with cross-domain frames, leading to un… CWE-200
Information Exposure 		CVE-2012-1926 2024-11-21 10:38 2012-03-28 Show GitHub Exploit DB Packet Storm
292933 - opera opera_browser Opera before 11.62 does not ensure that a dialog window is placed on top of content windows, which makes it easier for user-assisted remote attackers to trick users into downloading and executing arb… NVD-CWE-Other
CVE-2012-1925 2024-11-21 10:38 2012-03-28 Show GitHub Exploit DB Packet Storm
292934 - opera opera_browser Opera before 11.62 allows user-assisted remote attackers to trick users into downloading and executing arbitrary files via a small window for the download dialog. CWE-94
Code Injection 		CVE-2012-1924 2024-11-21 10:38 2012-03-28 Show GitHub Exploit DB Packet Storm
292935 - atmail atmail_open @Mail WebMail Client in AtMail Open-Source 1.04 and earlier allows remote attackers to obtain configuration information via a direct request to install/info.php, which calls the phpinfo function. CWE-200
Information Exposure 		CVE-2012-1920 2024-11-21 10:38 2012-03-28 Show GitHub Exploit DB Packet Storm
292936 - atmail atmail_open CRLF injection vulnerability in mime.php in @Mail WebMail Client in AtMail Open-Source before 1.05 allows remote attackers to conduct directory traversal attacks and read arbitrary files via a %0A se… CWE-94
Code Injection 		CVE-2012-1919 2024-11-21 10:38 2012-03-28 Show GitHub Exploit DB Packet Storm
292937 - atmail atmail_open Multiple directory traversal vulnerabilities in (1) compose.php and (2) libs/Atmail/SendMsg.php in @Mail WebMail Client in AtMail Open-Source before 1.05 allow remote attackers to read arbitrary file… CWE-22
Path Traversal 		CVE-2012-1918 2024-11-21 10:38 2012-03-28 Show GitHub Exploit DB Packet Storm
292938 - atmail atmail_open compose.php in @Mail WebMail Client in AtMail Open-Source before 1.05 does not properly handle ../ (dot dot slash) sequences in the unique parameter, which allows remote attackers to conduct director… CWE-22
Path Traversal 		CVE-2012-1917 2024-11-21 10:38 2012-03-28 Show GitHub Exploit DB Packet Storm
292939 - atmail atmail_open @Mail WebMail Client in AtMail Open-Source before 1.05 allows remote attackers to execute arbitrary code via an e-mail attachment with an executable extension, leading to the creation of an executabl… NVD-CWE-Other
CVE-2012-1916 2024-11-21 10:38 2012-03-28 Show GitHub Exploit DB Packet Storm
292940 5.4 MEDIUM
Network 		atlassian jira
greenhopper 		Stored XSS vulnerability in UpdateFieldJson.jspa in JIRA 4.4.3 and GreenHopper before 5.9.8 allows an attacker to inject arbitrary script code. CWE-79
Cross-site Scripting 		CVE-2012-1500 2024-11-21 10:37 2020-02-14 Show GitHub Exploit DB Packet Storm