Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 6, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
217181 6.8 警告 マイクロソフト - Microsoft Windows Media Player におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2014-2671 2014-04-1 16:01 2014-03-24 Show GitHub Exploit DB Packet Storm
217182 4.3 警告 レッドハット - JBoss RichFaces の webapp/PushHandlerFilter.java の doFilter 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2014-0086 2014-04-1 14:27 2014-02-26 Show GitHub Exploit DB Packet Storm
217183 5.1 警告 Novell
Igor Sysoev
- nginx の SPDY の実装におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2014-0133 2014-04-1 13:38 2014-03-18 Show GitHub Exploit DB Packet Storm
217184 4.3 警告 gpEasy - gpEasy CMS の include/tool/editing_page.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-0807 2014-04-1 12:24 2013-01-3 Show GitHub Exploit DB Packet Storm
217185 4.3 警告 WP Symposium - WordPress 用の WP Symposium プラグインの invite.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-2695 2014-04-1 12:24 2013-04-12 Show GitHub Exploit DB Packet Storm
217186 5.8 警告 WP Symposium - WordPress 用の WP Symposium プラグインの invite.php におけるオープンリダイレクトの脆弱性 CWE-20
不適切な入力確認
CVE-2013-2694 2014-04-1 12:23 2013-04-12 Show GitHub Exploit DB Packet Storm
217187 4.3 警告 Cartpauj.com - WordPress 用 Mingle Forum プラグインにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-0734 2014-04-1 12:23 2013-02-20 Show GitHub Exploit DB Packet Storm
217188 5.8 警告 シーメンス - Siemens SIMATIC S7-1500 CPU PLC デバイスの統合 Web サーバにおけるヘッダを挿入される脆弱性 CWE-Other
その他
CVE-2014-2247 2014-03-31 15:09 2014-03-12 Show GitHub Exploit DB Packet Storm
217189 6.8 警告 ownCloud - ownCloud における Web セッションをハイジャックされる脆弱性 CWE-287
不適切な認証
CVE-2014-2047 2014-03-31 15:09 2014-03-7 Show GitHub Exploit DB Packet Storm
217190 4.3 警告 シスコシステムズ - Cisco Prime Security Manager のダッシュボード関連の HTML ドキュメントにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-2118 2014-03-31 15:07 2014-03-27 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 6, 2026, 4:08 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
295471 9.8 CRITICAL
Network
adobe acrobat
reader
Adobe Reader and Acrobat before 9.5, and 10.x before 10.1.2, on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified ve… CWE-787
 Out-of-bounds Write
CVE-2011-4371 2024-11-21 10:32 2012-01-11 Show GitHub Exploit DB Packet Storm
295472 9.8 CRITICAL
Network
adobe acrobat
reader
Adobe Reader and Acrobat before 9.5, and 10.x before 10.1.2, on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors… CWE-787
 Out-of-bounds Write
CVE-2011-4370 2024-11-21 10:32 2012-01-11 Show GitHub Exploit DB Packet Storm
295473 - hp hp-chaisoe Directory traversal vulnerability in the HP-ChaiSOE/1.0 web server on the HP LaserJet P3015 printer with firmware before 07.080.3, LaserJet 4650 printer with firmware 07.006.0, and LaserJet 2430 prin… CWE-200
Information Exposure
CVE-2011-4785 2024-11-21 10:32 2012-01-10 Show GitHub Exploit DB Packet Storm
295474 - siemens automation_license_manager Absolute path traversal vulnerability in the ALMListView.ALMListCtrl ActiveX control in almaxcx.dll in the graphical user interface in Siemens Automation License Manager (ALM) 2.0 through 5.1+SP1+Upd… CWE-22
Path Traversal
CVE-2011-4532 2024-11-21 10:32 2012-01-9 Show GitHub Exploit DB Packet Storm
295475 - siemens automation_license_manager Siemens Automation License Manager (ALM) 4.0 through 5.1+SP1+Upd1 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via crafted content in a (1) get_tar… CWE-20
 Improper Input Validation 
CVE-2011-4531 2024-11-21 10:32 2012-01-9 Show GitHub Exploit DB Packet Storm
295476 - siemens automation_license_manager Siemens Automation License Manager (ALM) 4.0 through 5.1+SP1+Upd1 does not properly copy fields obtained from clients, which allows remote attackers to cause a denial of service (exception and daemon… CWE-20
 Improper Input Validation 
CVE-2011-4530 2024-11-21 10:32 2012-01-9 Show GitHub Exploit DB Packet Storm
295477 - siemens automation_license_manager Multiple buffer overflows in Siemens Automation License Manager (ALM) 4.0 through 5.1+SP1+Upd1 allow remote attackers to execute arbitrary code via a long serialid field in an _licensekey command, as… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2011-4529 2024-11-21 10:32 2012-01-9 Show GitHub Exploit DB Packet Storm
295478 - mediawiki
debian
mediawiki
debian_linux
MediaWiki before 1.17.1 does not check for read permission before handling action=ajax requests, which allows remote attackers to obtain sensitive information by (1) leveraging the SpecialUpload::aja… CWE-276
Incorrect Default Permissions 
CVE-2011-4361 2024-11-21 10:32 2012-01-8 Show GitHub Exploit DB Packet Storm
295479 - mediawiki
debian
mediawiki
debian_linux
MediaWiki before 1.17.1 allows remote attackers to obtain the page titles of all restricted pages via a series of requests involving the (1) curid or (2) oldid parameter. CWE-200
Information Exposure
CVE-2011-4360 2024-11-21 10:32 2012-01-8 Show GitHub Exploit DB Packet Storm
295480 - igor_vlasenko html-template-pro Cross-site scripting (XSS) vulnerability in the HTML-Template-Pro module before 0.9507 for Perl allows remote attackers to inject arbitrary web script or HTML via template parameters, related to impr… CWE-79
Cross-site Scripting
CVE-2011-4616 2024-11-21 10:32 2012-01-6 Show GitHub Exploit DB Packet Storm