Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 12, 2026, 4:01 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
217171 6.8 警告 Zemanta - WordPress 用 WordPress Related Posts プラグインにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2013-3476 2014-06-4 16:08 2013-05-14 Show GitHub Exploit DB Packet Storm
217172 6.8 警告 Zemanta - WordPress 用 Related Posts プラグインにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2013-3257 2014-06-4 16:07 2013-05-14 Show GitHub Exploit DB Packet Storm
217173 6.8 警告 bufferapp - WordPress 用 Digg Digg プラグインにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2013-3258 2014-06-4 16:07 2013-05-14 Show GitHub Exploit DB Packet Storm
217174 4.3 警告 レッドハット - Red Hat Enterprise Linux OpenStack Platform で使用される OpenStack Heat Templates における任意のパッケージをインストールされる脆弱性 CWE-310
暗号の問題
CVE-2014-0042 2014-06-4 15:52 2014-05-29 Show GitHub Exploit DB Packet Storm
217175 4.3 警告 レッドハット - Red Hat Enterprise Linux OpenStack Platform で使用される OpenStack Heat Templates におけるアップデートを制限される脆弱性 CWE-310
暗号の問題
CVE-2014-0041 2014-06-4 15:51 2014-05-29 Show GitHub Exploit DB Packet Storm
217176 4.3 警告 レッドハット - Red Hat Enterprise Linux OpenStack Platform で使用される OpenStack Heat Templates におけるアップデートを制限される脆弱性 CWE-noinfo
情報不足
CVE-2014-0040 2014-06-4 15:50 2014-05-29 Show GitHub Exploit DB Packet Storm
217177 5 警告 レッドハット - Red Hat Enterprise Linux OpenStack Platform で使用される openstack-foreman-installer におけるアクセス権を取得される脆弱性 CWE-287
不適切な認証
CVE-2013-6470 2014-06-4 15:50 2013-11-4 Show GitHub Exploit DB Packet Storm
217178 7.6 危険 OpenStack
レッドハット
- Red Hat openstack-neutron パッケージのデフォルト設定における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2013-6433 2014-06-4 15:49 2013-12-9 Show GitHub Exploit DB Packet Storm
217179 4 警告 シスコシステムズ - Cisco Unified Communications Domain Manager の VOSS の Web フレームワークにおける重要なユーザ情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-3280 2014-06-4 15:41 2014-05-28 Show GitHub Exploit DB Packet Storm
217180 6.8 警告 DLEVIET - DataLife Engine における Web セッションをハイジャックされる脆弱性 CWE-Other
その他
CVE-2013-7387 2014-06-4 15:24 2013-01-19 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 12, 2026, 5:06 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
296281 - microsoft windows_server_2008
windows_xp
windows_7
windows_server_2003
windows_vista
Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Win… CWE-399
 Resource Management Errors
CVE-2012-0154 2024-11-21 10:34 2012-02-15 Show GitHub Exploit DB Packet Storm
296282 - microsoft windows_server_2008
windows_7
windows_vista
Buffer overflow in msvcrt.dll in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to execute arbitrary code via a crafted media… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2012-0150 2024-11-21 10:34 2012-02-15 Show GitHub Exploit DB Packet Storm
296283 - microsoft windows_server_2003 afd.sys in the Ancillary Function Driver in Microsoft Windows Server 2003 SP2 does not properly validate user-mode input passed to kernel mode, which allows local users to gain privileges via a craft… CWE-20
 Improper Input Validation 
CVE-2012-0149 2024-11-21 10:34 2012-02-15 Show GitHub Exploit DB Packet Storm
296284 - microsoft windows_server_2008
windows_xp
windows_server_2003
windows_vista
windows_7
afd.sys in the Ancillary Function Driver in Microsoft Windows XP SP2, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 on 64-bit platfor… CWE-20
 Improper Input Validation 
CVE-2012-0148 2024-11-21 10:34 2012-02-15 Show GitHub Exploit DB Packet Storm
296285 - microsoft sharepoint_server
sharepoint_foundation
Cross-site scripting (XSS) vulnerability in wizardlist.aspx in Microsoft Office SharePoint Server 2010 Gold and SP1 and SharePoint Foundation 2010 Gold and SP1 allows remote attackers to inject arbit… CWE-79
Cross-site Scripting
CVE-2012-0145 2024-11-21 10:34 2012-02-15 Show GitHub Exploit DB Packet Storm
296286 - microsoft sharepoint_server
sharepoint_foundation
Cross-site scripting (XSS) vulnerability in themeweb.aspx in Microsoft Office SharePoint Server 2010 Gold and SP1 and SharePoint Foundation 2010 Gold and SP1 allows remote attackers to inject arbitra… CWE-79
Cross-site Scripting
CVE-2012-0144 2024-11-21 10:34 2012-02-15 Show GitHub Exploit DB Packet Storm
296287 - microsoft visio_viewer Microsoft Visio Viewer 2010 Gold and SP1 does not properly handle memory during the parsing of files, which allows remote attackers to execute arbitrary code via crafted attributes in a Visio file, a… CWE-94
Code Injection
CVE-2012-0138 2024-11-21 10:34 2012-02-15 Show GitHub Exploit DB Packet Storm
296288 - microsoft visio_viewer Microsoft Visio Viewer 2010 Gold and SP1 does not properly handle memory during the parsing of files, which allows remote attackers to execute arbitrary code via crafted attributes in a Visio file, a… CWE-94
Code Injection
CVE-2012-0137 2024-11-21 10:34 2012-02-15 Show GitHub Exploit DB Packet Storm
296289 - microsoft visio_viewer Microsoft Visio Viewer 2010 Gold and SP1 does not properly handle memory during the parsing of files, which allows remote attackers to execute arbitrary code via crafted attributes in a Visio file, a… CWE-94
Code Injection
CVE-2012-0136 2024-11-21 10:34 2012-02-15 Show GitHub Exploit DB Packet Storm
296290 - microsoft visio_viewer Microsoft Visio Viewer 2010 Gold and SP1 does not properly handle memory during the parsing of files, which allows remote attackers to execute arbitrary code via crafted attributes in a Visio file, a… CWE-94
Code Injection
CVE-2012-0020 2024-11-21 10:34 2012-02-15 Show GitHub Exploit DB Packet Storm