Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 23, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
217101	6.8	警告	アドバンテック株式会社	-	Advantech WebAccess におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2014-0991	2014-09-24 16:14	2014-09-18	Show	GitHub Exploit DB Packet Storm

217102	6.8	警告	アドバンテック株式会社	-	Advantech WebAccess におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2014-0990	2014-09-24 16:13	2014-09-18	Show	GitHub Exploit DB Packet Storm

217103	6.8	警告	アドバンテック株式会社	-	Advantech WebAccess におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2014-0989	2014-09-24 16:13	2014-09-18	Show	GitHub Exploit DB Packet Storm

217104	6.8	警告	アドバンテック株式会社	-	Advantech WebAccess におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2014-0988	2014-09-24 16:12	2014-09-18	Show	GitHub Exploit DB Packet Storm

217105	6.8	警告	アドバンテック株式会社	-	Advantech WebAccess におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2014-0985	2014-09-24 16:12	2014-09-18	Show	GitHub Exploit DB Packet Storm

217106	6.8	警告	アドバンテック株式会社	-	Advantech WebAccess におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2014-0987	2014-09-24 16:09	2014-09-18	Show	GitHub Exploit DB Packet Storm

217107	6.8	警告	アドバンテック株式会社	-	Advantech WebAccess におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2014-0986	2014-09-24 16:09	2014-09-18	Show	GitHub Exploit DB Packet Storm

217108	4.3	警告	Phorum	-	Phorum の管理インターフェースにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-6659	2014-09-24 16:08	2012-08-24	Show	GitHub Exploit DB Packet Storm

217109	4.3	警告	MailEnable	-	MailEnable Enterprise におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-2588	2014-09-24 16:07	2012-08-8	Show	GitHub Exploit DB Packet Storm

217110	7.2	危険	The PHP Group アップル	-	PHP の FastCGI Process Manager の sapi/fpm/fpm/fpm_unix.c における権限を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2014-0185	2014-09-24 13:26	2014-05-1	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 23, 2026, 4:08 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
296821	-	emil_stjerneman	linkit	The Linkit module 7.x-2.x before 7.x-2.3 for Drupal, when using an entity access module, does not check permissions when searching for entities, which allows remote attackers to obtain sensitive info…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2012-2304	2024-11-21 10:38	2012-08-15	Show	GitHub Exploit DB Packet Storm

296822	-	ubercart	ubercart	Multiple cross-site scripting (XSS) vulnerabilities in the Ubercart module 6.x-2.x before 6.x-2.8 and 7.x-3.x before 7.x-3.1 for Drupal allow remote authenticated users with the administer product cl…	CWE-79 Cross-site Scripting	CVE-2012-2300	2024-11-21 10:38	2012-08-15	Show	GitHub Exploit DB Packet Storm

296823	-	ubercart	ubercart	The Ubercart module 6.x-2.x before 6.x-2.8 and 7.x-3.x before 7.x-3.1 for Drupal stores passwords for new customers in plaintext during checkout, which allows local users to obtain sensitive informat…	CWE-255 Credentials Management	CVE-2012-2299	2024-11-21 10:38	2012-08-15	Show	GitHub Exploit DB Packet Storm

296824	-	drupal nancy_wichmann	realname	Multiple cross-site scripting (XSS) vulnerabilities in the RealName module 6.x-1.x before 6.x-1.5 for Drupal allow remote attackers to inject arbitrary web script or HTML via vectors related to (1) "…	CWE-79 Cross-site Scripting	CVE-2012-2298	2024-11-21 10:38	2012-08-15	Show	GitHub Exploit DB Packet Storm

296825	-	piwigo	piwigo	Multiple cross-site scripting (XSS) vulnerabilities in admin.php in Piwigo before 2.3.4 allow remote attackers to inject arbitrary web script or HTML via the (1) section parameter in the configuratio…	CWE-79 Cross-site Scripting	CVE-2012-2209	2024-11-21 10:38	2012-08-15	Show	GitHub Exploit DB Packet Storm

296826	-	piwigo	piwigo	Directory traversal vulnerability in upgrade.php in Piwigo before 2.3.4 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the language parameter.	CWE-22 Path Traversal	CVE-2012-2208	2024-11-21 10:38	2012-08-15	Show	GitHub Exploit DB Packet Storm

296827	-	spip	spip	Multiple cross-site scripting (XSS) vulnerabilities in SPIP 1.9.x before 1.9.2.o, 2.0.x before 2.0.18, and 2.1.x before 2.1.13 allow remote attackers to inject arbitrary web script or HTML via unspec…	CWE-79 Cross-site Scripting	CVE-2012-2151	2024-11-21 10:38	2012-08-15	Show	GitHub Exploit DB Packet Storm

296828	-	net-snmp	net-snmp	Array index error in the handle_nsExtendOutput2Table function in agent/mibgroup/agent/extend.c in Net-SNMP 5.7.1 allows remote authenticated users to cause a denial of service (out-of-bounds read and…	NVD-CWE-Other	CVE-2012-2141	2024-11-21 10:38	2012-08-15	Show	GitHub Exploit DB Packet Storm

296829	-	python canonical debian	python ubuntu_linux debian_linux	The utf-16 decoder in Python 3.1 through 3.3 does not update the aligned_end variable after calling the unicode_decode_call_errorhandler function, which allows remote attackers to obtain sensitive in…	NVD-CWE-Other	CVE-2012-2135	2024-11-21 10:38	2012-08-15	Show	GitHub Exploit DB Packet Storm

296830	-	larry_garfield	autosave	Cross-site request forgery (CSRF) vulnerability in the Autosave module 6.x before 6.x-2.10 and 7.x-2.x before 7.x-2.0 for Drupal allows remote attackers to hijack the authentication of arbitrary user…	CWE-352 Origin Validation Error	CVE-2012-2097	2024-11-21 10:38	2012-08-15	Show	GitHub Exploit DB Packet Storm