Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 6, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
217131 7.5 危険 Horde - Horde Application Framework の Util ライブラリにおけるオブジェクトインジェクション攻撃を実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2014-1691 2014-04-3 17:00 2014-01-28 Show GitHub Exploit DB Packet Storm
217132 7.5 危険 Vtiger - Vtiger CRM における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2013-3213 2014-04-3 16:41 2013-03-26 Show GitHub Exploit DB Packet Storm
217133 9.3 危険 オートデスク株式会社 - 複数の Autodesk SketchBook 製品におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2013-5365 2014-04-3 16:34 2013-08-21 Show GitHub Exploit DB Packet Storm
217134 4.3 警告 Ganglia - Ganglia Web の views_view.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-1770 2014-04-3 15:54 2013-03-7 Show GitHub Exploit DB Packet Storm
217135 4.9 警告 Xen プロジェクト - Xen の libvchan の io.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2014-1896 2014-04-3 15:49 2014-02-6 Show GitHub Exploit DB Packet Storm
217136 5.8 警告 Xen プロジェクト - Xen の xsm/flask/flask_op.c 内の flask_security_avc_cachestats 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-189
数値処理の問題 		CVE-2014-1895 2014-04-3 15:49 2014-02-6 Show GitHub Exploit DB Packet Storm
217137 5.2 警告 Xen プロジェクト - Xen の flask ハイパーコールにおける整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2014-1894 2014-04-3 15:49 2014-02-6 Show GitHub Exploit DB Packet Storm
217138 5.2 警告 Xen プロジェクト - Xen の flask ハイパーコールにおける整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2014-1893 2014-04-3 15:49 2014-02-6 Show GitHub Exploit DB Packet Storm
217139 5.2 警告 Xen プロジェクト - Xen におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2014-1892 2014-04-3 15:48 2014-02-6 Show GitHub Exploit DB Packet Storm
217140 5.2 警告 Xen プロジェクト - Xen の flask ハイパーコールにおける整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2014-1891 2014-04-3 15:48 2014-02-6 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 6, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
292541 - blaine_lang filedepot The filedepot module 6.x-1.x before 6.x-1.3 for Drupal, when accessed using multiple different browsers from the same IP address, causes Internet Explorer sessions to "switch users" when uploading a … CWE-264
Permissions, Privileges, and Access Controls 		CVE-2012-2719 2024-11-21 10:39 2012-06-27 Show GitHub Exploit DB Packet Storm
292542 - jason_moore amadou Cross-site scripting (XSS) vulnerability in the themes_links function in template.php in the Amadou theme module 6.x-1.x before 6.x-1.3 for Drupal allows remote attackers to inject arbitrary web scri… CWE-79
Cross-site Scripting 		CVE-2012-2715 2024-11-21 10:39 2012-06-27 Show GitHub Exploit DB Packet Storm
292543 - browserid_project browserid Cross-site request forgery (CSRF) vulnerability in the BrowserID (Mozilla Persona) module 7.x-1.x before 7.x-1.3 for Drupal allows remote attackers to hijack the authentication of arbitrary users for… CWE-352
 Origin Validation Error 		CVE-2012-2713 2024-11-21 10:39 2012-06-27 Show GitHub Exploit DB Packet Storm
292544 - thomas_seidl search_api Multiple cross-site scripting (XSS) vulnerabilities in the Search API module 7.x-1.x before 7.x-1.1 for Drupal, when supporting manual entry of field identifiers, allow remote attackers to inject arb… CWE-79
Cross-site Scripting 		CVE-2012-2712 2024-11-21 10:39 2012-06-27 Show GitHub Exploit DB Packet Storm
292545 - nancy_wichmann taxonomy_list Multiple cross-site scripting (XSS) vulnerabilities in the Taxonomy List module 6.x-1.x before 6.x-1.4 for Drupal allow remote authenticated users with create or edit taxonomy terms permissions to in… CWE-79
Cross-site Scripting 		CVE-2012-2711 2024-11-21 10:39 2012-06-27 Show GitHub Exploit DB Packet Storm
292546 - john_albin zen Cross-site scripting (XSS) vulnerability in the Zen module 6.x-1.x before 6.x-1.1 for Drupal, when "Append the content title to the end of the breadcrumb" is enabled, allows remote attackers to injec… CWE-79
Cross-site Scripting 		CVE-2012-2710 2024-11-21 10:39 2012-06-27 Show GitHub Exploit DB Packet Storm
292547 - antoine_beaupre hostmaster Cross-site scripting (XSS) vulnerability in the _hosting_task_log_table function in modules/hosting/task/hosting_task.module in the Hostmaster (Aegir) module 6.x-1.x before 6.x-1.9 for Drupal allows … CWE-79
Cross-site Scripting 		CVE-2012-2708 2024-11-21 10:39 2012-06-27 Show GitHub Exploit DB Packet Storm
292548 - antoine_beaupre hostmaster The Hostmaster (Aegir) module 6.x-1.x before 6.x-1.9 for Drupal does not properly exit when users do not have access to package/task nodes, which allows remote attackers to bypass intended access res… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2012-2707 2024-11-21 10:39 2012-06-27 Show GitHub Exploit DB Packet Storm
292549 - peter_pokrivcak post_affiliate_pro Cross-site scripting (XSS) vulnerability in the Post Affiliate Pro (PAP) module for Drupal allows remote attackers to inject arbitrary web script or HTML via vectors related to user registration. CWE-79
Cross-site Scripting 		CVE-2012-2706 2024-11-21 10:39 2012-06-27 Show GitHub Exploit DB Packet Storm
292550 - christopher_mitchell smart_breadcrumb The filter_titles function in the Smart Breadcrumb module 6.x-1.x before 6.x-1.3 for Drupal does not properly convert a title to plain-text, which allows remote authenticated users with create or edi… CWE-20
 Improper Input Validation  		CVE-2012-2705 2024-11-21 10:39 2012-06-27 Show GitHub Exploit DB Packet Storm