Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 6, 2026, 2 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
217041	6.8	警告	Mozilla Foundation	-	複数の Mozilla 製品の mozilla::WaveReader::DecodeAudioData 機能における重要な情報を取得される脆弱性	CWE-119 バッファエラー	CVE-2014-1497	2014-04-8 17:02	2014-03-18	Show	GitHub Exploit DB Packet Storm

217042	9.3	危険	Mozilla Foundation	-	複数の Mozilla 製品のブラウザエンジンにおけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2014-1493	2014-04-8 17:01	2014-03-18	Show	GitHub Exploit DB Packet Storm

217043	4.3	警告	Huawei	-	Huawei Echo Life 光ルータにクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2014-0337	2014-04-8 16:56	2014-04-2	Show	GitHub Exploit DB Packet Storm

217044	5	警告	Net-SNMP	-	Net-SNMP の ICMP-MIB の Linux の実装におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2014-2284	2014-04-8 15:54	2014-02-19	Show	GitHub Exploit DB Packet Storm

217045	7.1	危険	Linux	-	Linux Kernel の net/sctp/sm_statefuns.c 内の sctp_sf_do_5_1D_ce 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2014-0101	2014-04-8 15:53	2014-03-3	Show	GitHub Exploit DB Packet Storm

217046	6.2	警告	Linux	-	Linux Kernel の fs/cifs/file.c 内の cifs_iovec_write 関数における重要な情報を取得される脆弱性	CWE-119 バッファエラー	CVE-2014-0069	2014-04-8 15:52	2014-02-14	Show	GitHub Exploit DB Packet Storm

217047	4.3	警告	Ruby on Rails project	-	Ruby on Rails の actionview/lib/action_view/helpers/number_helper.rb におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2014-0081	2014-04-8 15:48	2014-02-18	Show	GitHub Exploit DB Packet Storm

217048	4.3	警告	Horde	-	Horde Groupware Webmail Edition で使用される Horde Internet Mail Program におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-6640	2014-04-8 14:40	2012-06-26	Show	GitHub Exploit DB Packet Storm

217049	4.3	警告	Horde	-	Horde Groupware Webmail Edition で使用される Horde Kronolith Calendar Application H4 におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-5567	2014-04-8 14:39	2012-11-14	Show	GitHub Exploit DB Packet Storm

217050	4.3	警告	Horde	-	Horde Groupware Webmail Edition で使用される Horde Kronolith Calendar Application H4 におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-5566	2014-04-8 14:33	2012-05-29	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 6, 2026, 4:08 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
295121	-	pidgin	pidgin	The pidgin_conv_chat_rename_user function in gtkconv.c in Pidgin before 2.10.2 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) by changing a nick…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2011-4939	2024-11-21 10:33	2012-03-15	Show	GitHub Exploit DB Packet Storm

295122	-	ibm	maximo_asset_management_essentials maximo_asset_management	Multiple cross-site scripting (XSS) vulnerabilities in IBM Maximo Asset Management and Asset Management Essentials 6.2, 7.1, and 7.5 allow remote attackers to inject arbitrary web script or HTML via …	CWE-79 Cross-site Scripting	CVE-2011-4819	2024-11-21 10:33	2012-03-13	Show	GitHub Exploit DB Packet Storm

295123	-	ibm	maximo_asset_management_essentials maximo_asset_management	Open redirect vulnerability in IBM Maximo Asset Management and Asset Management Essentials 6.2, 7.1, and 7.5 allows remote authenticated users to redirect users to arbitrary web sites and conduct phi…	CWE-20 Improper Input Validation	CVE-2011-4818	2024-11-21 10:33	2012-03-13	Show	GitHub Exploit DB Packet Storm

295124	-	ibm	maximo_asset_management maximo_asset_management_essentials tivoli_asset_management_for_it trivoli_service_request_manager maximo_service_desk tivoli_change_and_configuration_management…	The About option on the Help menu in IBM Maximo Asset Management and Asset Management Essentials 6.2, 7.1, and 7.5; IBM Tivoli Asset Management for IT 6.2, 7.1, and 7.2; IBM Tivoli Service Request Ma…	CWE-200 Information Exposure	CVE-2011-4817	2024-11-21 10:33	2012-03-13	Show	GitHub Exploit DB Packet Storm

295125	-	ibm	maximo_asset_management maximo_asset_management_essentials tivoli_asset_management_for_it trivoli_service_request_manager maximo_service_desk tivoli_change_and_configuration_management…	SQL injection vulnerability in the KPI component in IBM Maximo Asset Management and Asset Management Essentials 6.2, 7.1, and 7.5; IBM Tivoli Asset Management for IT 6.2, 7.1, and 7.2; IBM Tivoli Ser…	CWE-89 SQL Injection	CVE-2011-4816	2024-11-21 10:33	2012-03-13	Show	GitHub Exploit DB Packet Storm

295126	-	ibm	soliddb	The server in IBM solidDB 6.5 before FP9 and 7.0 before FP1 allows remote authenticated users to cause a denial of service (daemon crash) via a SELECT statement with a ROWNUM condition involving a su…	CWE-20 Improper Input Validation	CVE-2011-4890	2024-11-21 10:33	2012-02-21	Show	GitHub Exploit DB Packet Storm

295127	-	craig_barratt	backuppc	Cross-site scripting (XSS) vulnerability in RestoreFile.pm in BackupPC 3.1.0, 3.2.1, and possibly other earlier versions allows remote attackers to inject arbitrary web script or HTML via the share p…	CWE-79 Cross-site Scripting	CVE-2011-5081	2024-11-21 10:33	2012-02-18	Show	GitHub Exploit DB Packet Storm

295128	-	craig_barratt	backuppc	Cross-site scripting (XSS) vulnerability in View.pm in BackupPC 3.0.0, 3.1.0, 3.2.0, 3.2.1, and possibly earlier allows remote attackers to inject arbitrary web script or HTML via the num parameter i…	CWE-79 Cross-site Scripting	CVE-2011-4923	2024-11-21 10:33	2012-02-18	Show	GitHub Exploit DB Packet Storm

295129	-	juergen_furrer	jftcaforms	Cross-site scripting (XSS) vulnerability in lib/class.tx_jftcaforms_tceFunc.php in the Additional TCA Forms (jftcaforms) extension before 0.2.1 for TYPO3 allows remote attackers to inject arbitrary w…	CWE-79 Cross-site Scripting	CVE-2011-5080	2024-11-21 10:33	2012-02-15	Show	GitHub Exploit DB Packet Storm

295130	-	netcreators	irfaq	Open redirect vulnerability in the Modern FAQ (irfaq) extension 1.1.2 and other versions before 1.1.4 for TYPO3 allows remote attackers to redirect users to arbitrary web sites and conduct phishing a…	CWE-20 Improper Input Validation	CVE-2011-5079	2024-11-21 10:33	2012-02-15	Show	GitHub Exploit DB Packet Storm