Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 3, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
217331 5 警告 シスコシステムズ - Cisco Hosted Collaboration Solution の Java ベースのソフトウェアにおけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2014-2121 2014-03-20 16:33 2014-03-19 Show GitHub Exploit DB Packet Storm
217332 4.3 警告 シスコシステムズ - Cisco Adaptive Security Appliance ソフトウェアの WebVPN ログインページにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-2120 2014-03-20 16:32 2014-03-19 Show GitHub Exploit DB Packet Storm
217333 10 危険 ソフォス - Sophos Web Appliance の /opt/ws/bin/sblistpack の get_referers 関数における任意のコマンドを実行される脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2013-4983 2014-03-20 15:25 2013-09-9 Show GitHub Exploit DB Packet Storm
217334 2.6 注意 Mozilla Foundation - Mozilla Firefox および SeaMonkey のセッション復元機能におけるクロスサイトスクリプティングの脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2014-1504 2014-03-20 14:36 2014-03-18 Show GitHub Exploit DB Packet Storm
217335 6.8 警告 Mozilla Foundation - Mozilla Firefox および SeaMonkey における同一生成元ポリシーを回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2014-1502 2014-03-20 14:36 2014-03-18 Show GitHub Exploit DB Packet Storm
217336 5.8 警告 Mozilla Foundation - Android 上で稼働する Mozilla Firefox における同一生成元ポリシーを回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2014-1501 2014-03-20 14:36 2014-03-18 Show GitHub Exploit DB Packet Storm
217337 5 警告 Mozilla Foundation - Mozilla Firefox および SeaMonkey におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2014-1500 2014-03-20 14:36 2014-03-18 Show GitHub Exploit DB Packet Storm
217338 5.8 警告 Mozilla Foundation - Mozilla Firefox および SeaMonkey におけるドメイン名を偽装される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2014-1499 2014-03-20 14:36 2014-03-18 Show GitHub Exploit DB Packet Storm
217339 5 警告 Mozilla Foundation - Mozilla Firefox および SeaMonkey の crypto.generateCRMFRequest メソッドにおけるサービス運用妨害 (DoS) の脆弱性 CWE-20
CWE-310
CVE-2014-1498 2014-03-20 14:36 2014-03-18 Show GitHub Exploit DB Packet Storm
217340 9.3 危険 Mozilla Foundation - Mozilla Firefox OS の DeviceStorage API におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2014-1507 2014-03-20 14:36 2014-03-18 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 3, 2026, 4:06 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
292991 - microsoft dynamics_ax Cross-site scripting (XSS) vulnerability in the Enterprise Portal component in Microsoft Dynamics AX 2012 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka "Dynami… CWE-79
Cross-site Scripting 		CVE-2012-1857 2024-11-21 10:37 2012-06-13 Show GitHub Exploit DB Packet Storm
292992 - microsoft .net_framework Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4, and 4.5 does not properly handle function pointers, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application… CWE-94
Code Injection 		CVE-2012-1855 2024-11-21 10:37 2012-06-13 Show GitHub Exploit DB Packet Storm
292993 - microsoft lync Untrusted search path vulnerability in Microsoft Lync 2010, 2010 Attendee, and 2010 Attendant allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonst… NVD-CWE-Other
CVE-2012-1849 2024-11-21 10:37 2012-06-13 Show GitHub Exploit DB Packet Storm
292994 - microsoft internet_explorer Microsoft Internet Explorer 6 through 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing a deleted object, aka "Center Element Remote C… CWE-94
Code Injection 		CVE-2012-1523 2024-11-21 10:37 2012-06-13 Show GitHub Exploit DB Packet Storm
292995 - forescout counteract Multiple cross-site scripting (XSS) vulnerabilities in the status program on the ForeScout CounterACT appliance with software 6.3.3.2 through 6.3.4.10 allow remote attackers to inject arbitrary web s… CWE-79
Cross-site Scripting 		CVE-2012-1825 2024-11-21 10:37 2012-06-12 Show GitHub Exploit DB Packet Storm
292996 - emerson deltav
deltav_workstation
deltav_proessentials_scientific_graph 		An unspecified ActiveX control in Emerson DeltaV and DeltaV Workstations 9.3.1, 10.3.1, 11.3, and 11.3.1 and DeltaV ProEssentials Scientific Graph 5.0.0.6 allows remote attackers to overwrite arbitra… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2012-1818 2024-11-21 10:37 2012-06-9 Show GitHub Exploit DB Packet Storm
292997 - emerson deltav
deltav_workstation
deltav_proessentials_scientific_graph 		Buffer overflow in Emerson DeltaV and DeltaV Workstations 9.3.1, 10.3.1, 11.3, and 11.3.1 and DeltaV ProEssentials Scientific Graph 5.0.0.6 allows user-assisted remote attackers to execute arbitrary … CWE-20
 Improper Input Validation  		CVE-2012-1817 2024-11-21 10:37 2012-06-9 Show GitHub Exploit DB Packet Storm
292998 - emerson deltav
deltav_workstation
deltav_proessentials_scientific_graph 		PORTSERV.exe in Emerson DeltaV and DeltaV Workstations 9.3.1, 10.3.1, 11.3, and 11.3.1 and DeltaV ProEssentials Scientific Graph 5.0.0.6 allows remote attackers to cause a denial of service (daemon c… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2012-1816 2024-11-21 10:37 2012-06-9 Show GitHub Exploit DB Packet Storm
292999 - emerson deltav
deltav_workstation
deltav_proessentials_scientific_graph 		SQL injection vulnerability in Emerson DeltaV and DeltaV Workstations 9.3.1, 10.3.1, 11.3, and 11.3.1 and DeltaV ProEssentials Scientific Graph 5.0.0.6 allows remote attackers to execute arbitrary SQ… CWE-89
SQL Injection 		CVE-2012-1815 2024-11-21 10:37 2012-06-9 Show GitHub Exploit DB Packet Storm
293000 - emerson deltav
deltav_workstation
deltav_proessentials_scientific_graph 		Cross-site scripting (XSS) vulnerability in Emerson DeltaV and DeltaV Workstations 9.3.1, 10.3.1, 11.3, and 11.3.1 and DeltaV ProEssentials Scientific Graph 5.0.0.6 allows remote attackers to inject … CWE-79
Cross-site Scripting 		CVE-2012-1814 2024-11-21 10:37 2012-06-9 Show GitHub Exploit DB Packet Storm