Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 8, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
217051 4.3 警告 VideoLAN - VideoLAN VLC media player の codec\libpng_plugin.dll におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2014-3441 2014-05-19 09:55 2014-05-9 Show GitHub Exploit DB Packet Storm
217052 5.8 警告 DELL EMC (旧 EMC Corporation)
日立
- EMC RSA BSAFE Micro Edition Suite における SSL サーバになりすまされる脆弱性 CWE-310
暗号の問題
CVE-2014-0636 2014-05-16 18:39 2014-04-11 Show GitHub Exploit DB Packet Storm
217053 5 警告 DELL EMC (旧 EMC Corporation)
日立
- EMC RSA BSAFE Micro Edition Suite のサーバにおけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2014-0628 2014-05-16 18:38 2014-03-24 Show GitHub Exploit DB Packet Storm
217054 7.8 危険 Ignite Realtime - Ignite Realtime Openfire におけるサービス運用妨害 (DoS) の脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-2741 2014-05-16 18:32 2014-04-3 Show GitHub Exploit DB Packet Storm
217055 4.3 警告 JetAudio - JetAudio の JetMPAd.ax におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2014-3443 2014-05-16 17:41 2014-05-9 Show GitHub Exploit DB Packet Storm
217056 7.5 危険 GLPI-PROJECT.ORG - GLPI における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2013-2226 2014-05-16 17:29 2013-06-20 Show GitHub Exploit DB Packet Storm
217057 4.3 警告 The GetSimple Team - GetSimple CMS におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-1603 2014-05-16 17:25 2014-05-12 Show GitHub Exploit DB Packet Storm
217058 6.5 警告 レッドハット - Red Hat CloudForms Management Engine の ReportController の saved_report_delete アクションにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2014-0137 2014-05-16 17:22 2014-05-12 Show GitHub Exploit DB Packet Storm
217059 4 警告 レッドハット - Red Hat CloudForms Management Engine の CatalogController における任意のカタログを削除される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-0078 2014-05-16 17:21 2014-05-12 Show GitHub Exploit DB Packet Storm
217060 2.1 注意 Katello Project - Katello Installer における秘密鍵を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2013-4455 2014-05-16 17:16 2013-10-22 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 8, 2026, 4:54 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
293531 - ubercart ubercart The Ubercart module 6.x-2.x before 6.x-2.8 and 7.x-3.x before 7.x-3.1 for Drupal stores passwords for new customers in plaintext during checkout, which allows local users to obtain sensitive informat… CWE-255
Credentials Management
CVE-2012-2299 2024-11-21 10:38 2012-08-15 Show GitHub Exploit DB Packet Storm
293532 - drupal
nancy_wichmann
realname Multiple cross-site scripting (XSS) vulnerabilities in the RealName module 6.x-1.x before 6.x-1.5 for Drupal allow remote attackers to inject arbitrary web script or HTML via vectors related to (1) "… CWE-79
Cross-site Scripting
CVE-2012-2298 2024-11-21 10:38 2012-08-15 Show GitHub Exploit DB Packet Storm
293533 - piwigo piwigo Multiple cross-site scripting (XSS) vulnerabilities in admin.php in Piwigo before 2.3.4 allow remote attackers to inject arbitrary web script or HTML via the (1) section parameter in the configuratio… CWE-79
Cross-site Scripting
CVE-2012-2209 2024-11-21 10:38 2012-08-15 Show GitHub Exploit DB Packet Storm
293534 - piwigo piwigo Directory traversal vulnerability in upgrade.php in Piwigo before 2.3.4 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the language parameter. CWE-22
Path Traversal
CVE-2012-2208 2024-11-21 10:38 2012-08-15 Show GitHub Exploit DB Packet Storm
293535 - spip spip Multiple cross-site scripting (XSS) vulnerabilities in SPIP 1.9.x before 1.9.2.o, 2.0.x before 2.0.18, and 2.1.x before 2.1.13 allow remote attackers to inject arbitrary web script or HTML via unspec… CWE-79
Cross-site Scripting
CVE-2012-2151 2024-11-21 10:38 2012-08-15 Show GitHub Exploit DB Packet Storm
293536 - net-snmp net-snmp Array index error in the handle_nsExtendOutput2Table function in agent/mibgroup/agent/extend.c in Net-SNMP 5.7.1 allows remote authenticated users to cause a denial of service (out-of-bounds read and… NVD-CWE-Other
CVE-2012-2141 2024-11-21 10:38 2012-08-15 Show GitHub Exploit DB Packet Storm
293537 - python
canonical
debian
python
ubuntu_linux
debian_linux
The utf-16 decoder in Python 3.1 through 3.3 does not update the aligned_end variable after calling the unicode_decode_call_errorhandler function, which allows remote attackers to obtain sensitive in… NVD-CWE-Other
CVE-2012-2135 2024-11-21 10:38 2012-08-15 Show GitHub Exploit DB Packet Storm
293538 - larry_garfield autosave Cross-site request forgery (CSRF) vulnerability in the Autosave module 6.x before 6.x-2.10 and 7.x-2.x before 7.x-2.0 for Drupal allows remote attackers to hijack the authentication of arbitrary user… CWE-352
 Origin Validation Error
CVE-2012-2097 2024-11-21 10:38 2012-08-15 Show GitHub Exploit DB Packet Storm
293539 - lullabot fivestar_module_for_drupal The Fivestar module 6.x-1.x before 6.x-1.20 for Drupal does not properly validate voting data, which allows remote attackers to manipulate voting averages via a negative value in the vote parameter. CWE-20
 Improper Input Validation 
CVE-2012-2096 2024-11-21 10:38 2012-08-15 Show GitHub Exploit DB Packet Storm
293540 - s9y serendipity SQL injection vulnerability in serendipity/serendipity_admin.php in Serendipity before 1.6.1 allows remote attackers to execute arbitrary SQL commands via the serendipity[plugin_to_conf] parameter. … CWE-89
SQL Injection
CVE-2012-2332 2024-11-21 10:38 2012-08-14 Show GitHub Exploit DB Packet Storm