Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 13, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
217291 4.3 警告 Lucid Crew - Pixie CMS の contact モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-3786 2014-06-5 13:32 2014-05-30 Show GitHub Exploit DB Packet Storm
217292 4 警告 TYPO3 Association - TYPO3 の Authentication コンポーネントにおける認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2014-3945 2014-06-5 12:22 2014-05-22 Show GitHub Exploit DB Packet Storm
217293 5.8 警告 TYPO3 Association - TYPO3 の Authentication コンポーネントにおける認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2014-3944 2014-06-5 12:21 2014-05-22 Show GitHub Exploit DB Packet Storm
217294 3.5 注意 TYPO3 Association - TYPO3 の不特定のバックエンドコンポーネントにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-3943 2014-06-5 12:20 2014-05-22 Show GitHub Exploit DB Packet Storm
217295 6 警告 TYPO3 Association - TYPO3 の Color Picker Wizard コンポーネントにおける任意の PHP コードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2014-3942 2014-06-5 12:20 2014-05-22 Show GitHub Exploit DB Packet Storm
217296 5 警告 TYPO3 Association - TYPO3 における脆弱性 CWE-20
不適切な入力確認 		CVE-2014-3941 2014-06-5 12:19 2014-05-22 Show GitHub Exploit DB Packet Storm
217297 4 警告 TYPO3 Association - TYPO3 の Extbase Framework コンポーネントのクエリキャッシュ機能における任意のクエリを読まれる脆弱性 CWE-200
情報漏えい 		CVE-2014-3946 2014-06-5 12:17 2014-05-22 Show GitHub Exploit DB Packet Storm
217298 5 警告 libpam-pgsql - libpam-pgsql における認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2013-0191 2014-06-5 11:52 2013-01-15 Show GitHub Exploit DB Packet Storm
217299 7.5 危険 マイクロソフト
アドビシステムズ
Google		 - Adobe Flash Player および Adobe AIR SDK におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2014-0520 2014-06-4 18:19 2014-05-13 Show GitHub Exploit DB Packet Storm
217300 7.5 危険 マイクロソフト
アドビシステムズ
Google		 - Adobe Flash Player および Adobe AIR SDK におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2014-0519 2014-06-4 18:19 2014-05-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 13, 2026, 5:05 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
296471 - irfanview irfanview Stack-based buffer overflow in the JPEG2000 plugin in IrfanView PlugIns before 4.33 allows remote attackers to execute arbitrary code via a JPEG2000 (JP2) file with a crafted Quantization Default (QC… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2012-0897 2024-11-21 10:35 2012-01-21 Show GitHub Exploit DB Packet Storm
296472 - count_per_day_project
tom_braider 		count_per_day Absolute path traversal vulnerability in download.php in the Count Per Day module before 3.1.1 for WordPress allows remote attackers to read arbitrary files via the f parameter. CWE-22
Path Traversal 		CVE-2012-0896 2024-11-21 10:35 2012-01-21 Show GitHub Exploit DB Packet Storm
296473 - tom_braider count_per_day Cross-site scripting (XSS) vulnerability in map/map.php in the Count Per Day module before 3.1.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the map parameter. CWE-79
Cross-site Scripting 		CVE-2012-0895 2024-11-21 10:35 2012-01-21 Show GitHub Exploit DB Packet Storm
296474 - oracle mysql Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.x allows remote authenticated users to affect confidentiality and integrity via unknown vectors. NVD-CWE-noinfo
CVE-2012-0496 2024-11-21 10:35 2012-01-19 Show GitHub Exploit DB Packet Storm
296475 - oracle mysql Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.x allows remote authenticated users to affect availability via unknown vectors, a different vulnerability than CVE-2012-011… NVD-CWE-noinfo
CVE-2012-0495 2024-11-21 10:35 2012-01-19 Show GitHub Exploit DB Packet Storm
296476 - oracle mysql Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.x allows local users to affect availability via unknown vectors. NVD-CWE-noinfo
CVE-2012-0494 2024-11-21 10:35 2012-01-19 Show GitHub Exploit DB Packet Storm
296477 - oracle mysql Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.x allows remote authenticated users to affect availability via unknown vectors, a different vulnerability than CVE-2012-011… NVD-CWE-noinfo
CVE-2012-0493 2024-11-21 10:35 2012-01-19 Show GitHub Exploit DB Packet Storm
296478 - oracle
mysql 		mysql Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.x and 5.5.x allows remote authenticated users to affect availability via unknown vectors, a different vulnerability than CV… NVD-CWE-noinfo
CVE-2012-0492 2024-11-21 10:35 2012-01-19 Show GitHub Exploit DB Packet Storm
296479 - oracle mysql Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.x allows remote authenticated users to affect availability via unknown vectors, a different vulnerability than CVE-2012-011… NVD-CWE-noinfo
CVE-2012-0491 2024-11-21 10:35 2012-01-19 Show GitHub Exploit DB Packet Storm
296480 - oracle
mysql 		mysql Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.0.x, 5.1.x, and 5.5.x allows remote authenticated users to affect availability via unknown vectors. NVD-CWE-noinfo
CVE-2012-0490 2024-11-21 10:35 2012-01-19 Show GitHub Exploit DB Packet Storm