Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 6, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
217061 6.8 警告 FFmpeg - FFmpeg の libavcodec/dsputil.c における整数符号エラーの脆弱性 CWE-189
数値処理の問題 		CVE-2013-7010 2014-04-8 09:42 2013-08-30 Show GitHub Exploit DB Packet Storm
217062 2.6 注意 オラクル - Oracle Java SE および JavaFX における脆弱性 CWE-noinfo
情報不足 		CVE-2013-5854 2014-04-7 18:06 2013-10-15 Show GitHub Exploit DB Packet Storm
217063 5 警告 マイクロソフト
アドビシステムズ
Google		 - Adobe Flash Player におけるクリップボードを読まれる脆弱性 CWE-200
情報漏えい 		CVE-2014-0504 2014-04-7 18:06 2014-03-11 Show GitHub Exploit DB Packet Storm
217064 6.9 警告 freedesktop.org
Canonical		 - udisks におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2014-0004 2014-04-7 18:05 2014-03-10 Show GitHub Exploit DB Packet Storm
217065 6.4 警告 マイクロソフト
アドビシステムズ
Google		 - Adobe Flash Player における同一生成元ポリシーを回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2014-0503 2014-04-7 18:04 2014-03-11 Show GitHub Exploit DB Packet Storm
217066 7.6 危険 サン・マイクロシステムズ
オラクル		 - Oracle Java SE および Java SE Embedded における Deployment に関する脆弱性 CWE-noinfo
情報不足 		CVE-2013-5852 2014-04-7 18:03 2013-10-15 Show GitHub Exploit DB Packet Storm
217067 5 警告 Mutt - Mutt の copy.c におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2014-0467 2014-04-7 18:02 2014-03-12 Show GitHub Exploit DB Packet Storm
217068 9.3 危険 オラクル - Oracle Java SE および JavaFX における JavaFX に関する脆弱性 CWE-noinfo
情報不足 		CVE-2013-5846 2014-04-7 18:02 2013-10-15 Show GitHub Exploit DB Packet Storm
217069 9.3 危険 Mozilla Foundation - 複数の Mozilla 製品における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2013-6671 2014-04-7 18:01 2013-12-10 Show GitHub Exploit DB Packet Storm
217070 6.4 警告 Apache Software Foundation - Apache Solr の DocumentAnalysisRequestHandler における脆弱性 CWE-noinfo
情報不足 		CVE-2013-6408 2014-04-7 17:57 2013-05-30 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 6, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
293251 - giantrobot zipcart The ZipCart module 6.x before 6.x-1.4 for Drupal checks the "access content" permission instead of the "access ZipCart downloads" permission when building archives, which allows remote authenticated … CWE-264
Permissions, Privileges, and Access Controls 		CVE-2012-1650 2024-11-21 10:37 2012-08-29 Show GitHub Exploit DB Packet Storm
293252 - mediafront mediafront Multiple cross-site scripting (XSS) vulnerabilities in the "stand alone PHP application for the OSM Player," as used in the MediaFront module 6.x-1.x before 6.x-1.5 and 7.x-1.x before 7.x-1.5 for Dru… CWE-79
Cross-site Scripting 		CVE-2012-1647 2024-11-21 10:37 2012-08-29 Show GitHub Exploit DB Packet Storm
293253 - wimleers cdn The CDN module 6.x-2.2 and 7.x-2.2 for Drupal, when running in Origin Pull mode with the "Far Future expiration" option enabled, allows remote attackers to read arbitrary PHP files via unspecified ve… CWE-200
Information Exposure 		CVE-2012-1645 2024-11-21 10:37 2012-08-29 Show GitHub Exploit DB Packet Storm
293254 - gizra og_vocab The Organic Groups (OG) Vocabulary module 6.x-1.x before 6.x-1.2 for Drupal allows remote authenticated users with certain administrator permissions to modify the vocabularies of other groups via uns… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2012-1644 2024-11-21 10:37 2012-08-29 Show GitHub Exploit DB Packet Storm
293255 - jason_savino fp The Faster Permissions module 7.x-2.x before 7.x-1.2 for Drupal does not check the "administer permissions" permission, which allows remote attackers to modify access permissions via unspecified vect… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2012-1643 2024-11-21 10:37 2012-08-29 Show GitHub Exploit DB Packet Storm
293256 - yaml-fuer-drupal linkchecker includes/linkchecker.pages.inc in the Link checker module 6.x-2.x before 6.x-2.5 for Drupal does not properly enforce access permissions on broken links, which allows remote attackers to obtain sensi… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2012-1642 2024-11-21 10:37 2012-08-29 Show GitHub Exploit DB Packet Storm
293257 - danielb finder The finder_import function in the Finder module 6.x-1.x before 6.x-1.26, 7.x-1.x, and 7.x-2.x before 7.x-2.0-alpha8 for Drupal allows remote authenticated users with the administer finder permission … CWE-264
Permissions, Privileges, and Access Controls 		CVE-2012-1641 2024-11-21 10:37 2012-08-29 Show GitHub Exploit DB Packet Storm
293258 - rik_de_boer revisioning The hook_node_access function in the revisioning module 7.x-1.x before 7.x-1.3 for Drupal checks the permissions of the current user even when it is called to check permissions of other users, which … CWE-264
Permissions, Privileges, and Access Controls 		CVE-2012-1635 2024-11-21 10:37 2012-08-29 Show GitHub Exploit DB Packet Storm
293259 - debian cifs-utils mount.cifs in cifs-utils 2.6 allows local users to determine the existence of arbitrary files or directories via the file path in the second argument, which reveals their existence in an error messag… CWE-200
Information Exposure 		CVE-2012-1586 2024-11-21 10:37 2012-08-28 Show GitHub Exploit DB Packet Storm
293260 - ez ezjscore Cross-site scripting (XSS) vulnerability in the textEncode function in classes/ezjscajaxcontent.php in eZ JS Core in eZ Publish before 1.5 allows remote attackers to inject arbitrary web script or HT… CWE-79
Cross-site Scripting 		CVE-2012-1597 2024-11-21 10:37 2012-08-17 Show GitHub Exploit DB Packet Storm