Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 8, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
217071 4.3 警告 Canonical - Software Properties の ppa.py におけるパッケージリポジトリのGPG 鍵を偽装される脆弱性 CWE-20
不適切な入力確認
CVE-2011-4407 2014-05-16 15:40 2011-11-7 Show GitHub Exploit DB Packet Storm
217072 7.6 危険 Marc Lehmann - rxvt-unicode における任意の X Window のプロパティを操作される脆弱性 CWE-78
OSコマンド・インジェクション
CVE-2014-3121 2014-05-16 15:29 2014-04-26 Show GitHub Exploit DB Packet Storm
217073 10 危険 オラクル - Debian GNU/Linux および Ubuntu 上で稼動する OpenJDK における脆弱性 CWE-noinfo
情報不足
CVE-2014-2405 2014-05-16 15:09 2014-04-24 Show GitHub Exploit DB Packet Storm
217074 10 危険 オラクル - Debian GNU/Linux および Ubuntu 上で稼動する OpenJDK における脆弱性 CWE-noinfo
情報不足
CVE-2014-0462 2014-05-16 15:09 2014-04-24 Show GitHub Exploit DB Packet Storm
217075 6.8 警告 レッドハット - IcedTea6 および IcedTea-Web の Java Network Launching Protocol の実装におけるローカルファイルへのアクセスを許可される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2011-2514 2014-05-16 14:47 2011-07-27 Show GitHub Exploit DB Packet Storm
217076 5 警告 レッドハット - IcedTea6 および IcedTea-Web の Java Network Launching Protocol の実装におけるユーザ名などを取得される脆弱性 CWE-200
情報漏えい
CVE-2011-2513 2014-05-16 14:47 2011-07-27 Show GitHub Exploit DB Packet Storm
217077 6.9 警告 BMC Software - BMC PATROL for AIX における権限を取得される脆弱性 CWE-Other
その他
CVE-2014-2591 2014-05-16 14:12 2014-04-9 Show GitHub Exploit DB Packet Storm
217078 6.8 警告 Open Assessment Technologies S.A. - Open Assessment Technologies TAO におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2014-2989 2014-05-16 12:24 2014-05-7 Show GitHub Exploit DB Packet Storm
217079 10 危険 ShenZhen Foscam Intelligent Technology - Foscam IP camera における任意のカメラを偽装またはハイジャックされる脆弱性 CWE-255
証明書・パスワード管理
CVE-2014-1849 2014-05-16 12:19 2014-05-8 Show GitHub Exploit DB Packet Storm
217080 6.8 警告 OpenVPN Technologies - OpenVPN Access Server の管理 Web インターフェースにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2013-2692 2014-05-16 12:18 2013-05-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 8, 2026, 4:54 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
293541 - s9y serendipity Cross-site scripting (XSS) vulnerability in serendipity/serendipity_admin_image_selector.php in Serendipity before 1.6.1 allows remote attackers to inject arbitrary web script or HTML via the serendi… CWE-79
Cross-site Scripting
CVE-2012-2331 2024-11-21 10:38 2012-08-14 Show GitHub Exploit DB Packet Storm
293542 - nodejs nodejs The Update method in src/node_http_parser.cc in Node.js before 0.6.17 and 0.7 before 0.7.8 does not properly check the length of a string, which allows remote attackers to obtain sensitive informatio… CWE-20
 Improper Input Validation 
CVE-2012-2330 2024-11-21 10:38 2012-08-14 Show GitHub Exploit DB Packet Storm
293543 - pivotx pivotx Cross-site scripting (XSS) vulnerability in pivotx/ajaxhelper.php in PivotX 2.3.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the file parameter. CWE-79
Cross-site Scripting
CVE-2012-2274 2024-11-21 10:38 2012-08-14 Show GitHub Exploit DB Packet Storm
293544 - mnt-tech wp-facethumb Cross-site scripting (XSS) vulnerability in index.php in the WP-FaceThumb plugin 0.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the pagination_wp_facethumb param… CWE-79
Cross-site Scripting
CVE-2012-2371 2024-11-21 10:38 2012-08-14 Show GitHub Exploit DB Packet Storm
293545 - gnome gdk-pixbuf Multiple integer overflows in the read_bitmap_file_data function in io-xbm.c in gdk-pixbuf before 2.26.1 allow remote attackers to cause a denial of service (application crash) via a negative (1) hei… CWE-189
Numeric Errors
CVE-2012-2370 2024-11-21 10:38 2012-08-14 Show GitHub Exploit DB Packet Storm
293546 - bytemark symbiosis Bytemark Symbiosis before Revision 1322 does not properly validate passwords, which allows remote attackers to gain access to email accounts via an arbitrary password. CWE-20
 Improper Input Validation 
CVE-2012-2368 2024-11-21 10:38 2012-08-14 Show GitHub Exploit DB Packet Storm
293547 - mybb mybb MyBB (aka MyBulletinBoard) before 1.6.7 allows remote attackers to obtain sensitive information via a malformed forumread cookie, which reveals the installation path in an error message. CWE-200
Information Exposure
CVE-2012-2327 2024-11-21 10:38 2012-08-14 Show GitHub Exploit DB Packet Storm
293548 - mybb mybb Cross-site scripting (XSS) vulnerability in the Admin Control Panel (ACP) in MyBB (aka MyBulletinBoard) before 1.6.7 allows remote administrators to inject arbitrary web script or HTML via a malforme… CWE-79
Cross-site Scripting
CVE-2012-2326 2024-11-21 10:38 2012-08-14 Show GitHub Exploit DB Packet Storm
293549 - mybb mybb SQL injection vulnerability in the User Inline Moderation feature in the Admin Control Panel (ACP) in MyBB (aka MyBulletinBoard) before 1.6.7 allows remote administrators to execute arbitrary SQL com… CWE-89
SQL Injection
CVE-2012-2325 2024-11-21 10:38 2012-08-14 Show GitHub Exploit DB Packet Storm
293550 - mybb mybb Multiple SQL injection vulnerabilities in MyBB (aka MyBulletinBoard) before 1.6.7 allow remote administrators to execute arbitrary SQL commands via unspecified vectors in the (1) user search or (2) M… CWE-89
SQL Injection
CVE-2012-2324 2024-11-21 10:38 2012-08-14 Show GitHub Exploit DB Packet Storm