Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 4, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
217181 6.8 警告 マイクロソフト - Microsoft Windows Media Player におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2014-2671 2014-04-1 16:01 2014-03-24 Show GitHub Exploit DB Packet Storm
217182 4.3 警告 レッドハット - JBoss RichFaces の webapp/PushHandlerFilter.java の doFilter 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2014-0086 2014-04-1 14:27 2014-02-26 Show GitHub Exploit DB Packet Storm
217183 5.1 警告 Novell
Igor Sysoev		 - nginx の SPDY の実装におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2014-0133 2014-04-1 13:38 2014-03-18 Show GitHub Exploit DB Packet Storm
217184 4.3 警告 gpEasy - gpEasy CMS の include/tool/editing_page.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-0807 2014-04-1 12:24 2013-01-3 Show GitHub Exploit DB Packet Storm
217185 4.3 警告 WP Symposium - WordPress 用の WP Symposium プラグインの invite.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-2695 2014-04-1 12:24 2013-04-12 Show GitHub Exploit DB Packet Storm
217186 5.8 警告 WP Symposium - WordPress 用の WP Symposium プラグインの invite.php におけるオープンリダイレクトの脆弱性 CWE-20
不適切な入力確認 		CVE-2013-2694 2014-04-1 12:23 2013-04-12 Show GitHub Exploit DB Packet Storm
217187 4.3 警告 Cartpauj.com - WordPress 用 Mingle Forum プラグインにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-0734 2014-04-1 12:23 2013-02-20 Show GitHub Exploit DB Packet Storm
217188 5.8 警告 シーメンス - Siemens SIMATIC S7-1500 CPU PLC デバイスの統合 Web サーバにおけるヘッダを挿入される脆弱性 CWE-Other
その他 		CVE-2014-2247 2014-03-31 15:09 2014-03-12 Show GitHub Exploit DB Packet Storm
217189 6.8 警告 ownCloud - ownCloud における Web セッションをハイジャックされる脆弱性 CWE-287
不適切な認証 		CVE-2014-2047 2014-03-31 15:09 2014-03-7 Show GitHub Exploit DB Packet Storm
217190 4.3 警告 シスコシステムズ - Cisco Prime Security Manager のダッシュボード関連の HTML ドキュメントにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-2118 2014-03-31 15:07 2014-03-27 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 5, 2026, 4:51 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
292841 - adobe illustrator
illustrator_cs5.5 		Adobe Illustrator before CS6 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-0780, CVE-201… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2012-2042 2024-11-21 10:38 2012-05-25 Show GitHub Exploit DB Packet Storm
292842 - tornadoweb tornado CRLF injection vulnerability in the tornado.web.RequestHandler.set_header function in Tornado before 2.2.1 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting… CWE-20
 Improper Input Validation  		CVE-2012-2374 2024-11-21 10:38 2012-05-24 Show GitHub Exploit DB Packet Storm
292843 - cypherpunks pidgin-otr Format string vulnerability in the log_message_cb function in otr-plugin.c in the Off-the-Record Messaging (OTR) pidgin-otr plugin before 3.2.1 for Pidgin might allow remote attackers to execute arbi… CWE-134
Use of Externally-Controlled Format String 		CVE-2012-2369 2024-11-21 10:38 2012-05-24 Show GitHub Exploit DB Packet Storm
292844 - schneider-electric kerweb
kerwin 		Multiple cross-site scripting (XSS) vulnerabilities in Schneider Electric Kerweb before 3.0.1 and Kerwin before 6.0.1 allow remote attackers to inject arbitrary web script or HTML via (1) the evtvari… CWE-79
Cross-site Scripting 		CVE-2012-1990 2024-11-21 10:38 2012-05-23 Show GitHub Exploit DB Packet Storm
292845 - geoff_davies contact_forms The Contact Forms module 7.x-1.x before 7.x-1.2 for Drupal does not specify sufficiently restrictive permissions, which allows remote authenticated users with the "access the site-wide contact form" … CWE-264
Permissions, Privileges, and Access Controls 		CVE-2012-2340 2024-11-21 10:38 2012-05-22 Show GitHub Exploit DB Packet Storm
292846 - nancy_wichmann
drupal 		glossary
drupal 		Cross-site scripting (XSS) vulnerability in the Glossary module 6.x-1.x before 6.x-1.8 for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to "ta… CWE-79
Cross-site Scripting 		CVE-2012-2339 2024-11-21 10:38 2012-05-22 Show GitHub Exploit DB Packet Storm
292847 - johan_cwiklinski galette SQL injection vulnerability in includes/picture.class.php in Galette 0.63, 0.63.1, 0.63.2, 0.63.3, and 0.64rc1 allows remote attackers to execute arbitrary SQL commands via the id_adh parameter to pi… CWE-89
SQL Injection 		CVE-2012-2338 2024-11-21 10:38 2012-05-22 Show GitHub Exploit DB Packet Storm
292848 - skincrafter skincrafter Buffer overflow in the InitLicenKeys function in a certain ActiveX control in SkinCrafter3_vs2005.dll in SkinCrafter 3.0 allows remote attackers to execute arbitrary code via a long string in the fir… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2012-2271 2024-11-21 10:38 2012-05-22 Show GitHub Exploit DB Packet Storm
292849 - php php Buffer overflow in the com_print_typeinfo function in PHP 5.4.3 and earlier on Windows allows remote attackers to execute arbitrary code via crafted arguments that trigger incorrect handling of COM o… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2012-2376 2024-11-21 10:38 2012-05-22 Show GitHub Exploit DB Packet Storm
292850 - rahul_singla take_control Cross-site request forgery (CSRF) vulnerability in the Take Control module 6.x-2.x before 6.x-2.2 for Drupal allows remote attackers to hijack the authentication of unspecified users for Ajax request… CWE-352
 Origin Validation Error 		CVE-2012-2341 2024-11-21 10:38 2012-05-19 Show GitHub Exploit DB Packet Storm