Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 6, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
217331 5 警告 シスコシステムズ - Cisco Hosted Collaboration Solution の Java ベースのソフトウェアにおけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2014-2121 2014-03-20 16:33 2014-03-19 Show GitHub Exploit DB Packet Storm
217332 4.3 警告 シスコシステムズ - Cisco Adaptive Security Appliance ソフトウェアの WebVPN ログインページにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-2120 2014-03-20 16:32 2014-03-19 Show GitHub Exploit DB Packet Storm
217333 10 危険 ソフォス - Sophos Web Appliance の /opt/ws/bin/sblistpack の get_referers 関数における任意のコマンドを実行される脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2013-4983 2014-03-20 15:25 2013-09-9 Show GitHub Exploit DB Packet Storm
217334 2.6 注意 Mozilla Foundation - Mozilla Firefox および SeaMonkey のセッション復元機能におけるクロスサイトスクリプティングの脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2014-1504 2014-03-20 14:36 2014-03-18 Show GitHub Exploit DB Packet Storm
217335 6.8 警告 Mozilla Foundation - Mozilla Firefox および SeaMonkey における同一生成元ポリシーを回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2014-1502 2014-03-20 14:36 2014-03-18 Show GitHub Exploit DB Packet Storm
217336 5.8 警告 Mozilla Foundation - Android 上で稼働する Mozilla Firefox における同一生成元ポリシーを回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2014-1501 2014-03-20 14:36 2014-03-18 Show GitHub Exploit DB Packet Storm
217337 5 警告 Mozilla Foundation - Mozilla Firefox および SeaMonkey におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2014-1500 2014-03-20 14:36 2014-03-18 Show GitHub Exploit DB Packet Storm
217338 5.8 警告 Mozilla Foundation - Mozilla Firefox および SeaMonkey におけるドメイン名を偽装される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2014-1499 2014-03-20 14:36 2014-03-18 Show GitHub Exploit DB Packet Storm
217339 5 警告 Mozilla Foundation - Mozilla Firefox および SeaMonkey の crypto.generateCRMFRequest メソッドにおけるサービス運用妨害 (DoS) の脆弱性 CWE-20
CWE-310
CVE-2014-1498 2014-03-20 14:36 2014-03-18 Show GitHub Exploit DB Packet Storm
217340 9.3 危険 Mozilla Foundation - Mozilla Firefox OS の DeviceStorage API におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2014-1507 2014-03-20 14:36 2014-03-18 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 6, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
292401 - microsoft windows_server_2008
windows_xp
windows_7
windows_server_2003
windows_vista 		Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Win… CWE-399
 Resource Management Errors 		CVE-2012-2527 2024-11-21 10:39 2012-08-15 Show GitHub Exploit DB Packet Storm
292402 - microsoft windows_xp The Remote Desktop Protocol (RDP) implementation in Microsoft Windows XP SP3 does not properly process packets in memory, which allows remote attackers to execute arbitrary code by sending crafted RD… CWE-94
Code Injection 		CVE-2012-2526 2024-11-21 10:39 2012-08-15 Show GitHub Exploit DB Packet Storm
292403 - microsoft office Microsoft Office 2007 SP2 and SP3 and 2010 SP1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Computer Graphics Metafile (CGM) file, … CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2012-2524 2024-11-21 10:39 2012-08-15 Show GitHub Exploit DB Packet Storm
292404 - microsoft internet_explorer
jscript
vbscript 		Integer overflow in Microsoft Internet Explorer 8 and 9, JScript 5.8, and VBScript 5.8 on 64-bit platforms allows remote attackers to execute arbitrary code by leveraging an incorrect size calculatio… CWE-189
Numeric Errors 		CVE-2012-2523 2024-11-21 10:39 2012-08-15 Show GitHub Exploit DB Packet Storm
292405 - microsoft internet_explorer Microsoft Internet Explorer 6 through 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing a malformed virtual function table after this … CWE-94
Code Injection 		CVE-2012-2522 2024-11-21 10:39 2012-08-15 Show GitHub Exploit DB Packet Storm
292406 - microsoft internet_explorer Microsoft Internet Explorer 6 through 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing a deleted object, aka "Asynchronous NULL Objec… CWE-94
Code Injection 		CVE-2012-2521 2024-11-21 10:39 2012-08-15 Show GitHub Exploit DB Packet Storm
292407 - d.r.commander libjpeg-turbo Heap-based buffer overflow in the get_sos function in jdmarker.c in libjpeg-turbo 1.2.0 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code vi… CWE-787
 Out-of-bounds Write 		CVE-2012-2806 2024-11-21 10:39 2012-08-14 Show GitHub Exploit DB Packet Storm
292408 - redhat certificate_system
dogtag_certificate_system 		Multiple cross-site scripting (XSS) vulnerabilities in Red Hat Certificate System (RHCS) before 8.1.1 and Dogtag Certificate System allow remote attackers to inject arbitrary web script or HTML via u… CWE-79
Cross-site Scripting 		CVE-2012-2662 2024-11-21 10:39 2012-08-14 Show GitHub Exploit DB Packet Storm
292409 - e-supportportal escon_supportportal Multiple cross-site scripting (XSS) vulnerabilities in ESCON SupportPortal Professional Edition 3.0 allow remote attackers to inject arbitrary web script or HTML via an e-mail message body with (1) a… CWE-79
Cross-site Scripting 		CVE-2012-2590 2024-11-21 10:39 2012-08-13 Show GitHub Exploit DB Packet Storm
292410 - afterlogic mailsuite_pro Multiple cross-site scripting (XSS) vulnerabilities in AfterLogic MailSuite Pro 6.3 allow remote attackers to inject arbitrary web script or HTML via an e-mail message body with a crafted SRC attribu… CWE-79
Cross-site Scripting 		CVE-2012-2587 2024-11-21 10:39 2012-08-13 Show GitHub Exploit DB Packet Storm