Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 21, 2026, 6:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
217341	7.1	危険	IBM	-	IBM GCM16 および GCM32 Global Console Manager スイッチのファームウェアの systest.php における任意のコマンドを実行される脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2014-3085	2014-08-26 17:42	2014-07-14	Show	GitHub Exploit DB Packet Storm

217342	6.3	警告	IBM	-	IBM GCM16 および GCM32 Global Console Manager スイッチのファームウェアの prodtest.php における任意のファイルを読まれる脆弱性	CWE-200 情報漏えい	CVE-2014-3081	2014-08-26 17:42	2014-07-14	Show	GitHub Exploit DB Packet Storm

217343	6.8	警告	マイクロソフトアドビシステムズ Google	-	Adobe Flash Player および Adobe AIR におけるクロスサイトリクエストフォージェリ攻撃を実行される脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2014-5333	2014-08-26 17:40	2014-08-12	Show	GitHub Exploit DB Packet Storm

217344	6.8	警告	GNU Project IBM	-	GnuTLS の lib/gnutls_handshake.c の read_server_hello 関数におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2014-3466	2014-08-26 17:40	2014-05-29	Show	GitHub Exploit DB Packet Storm

217345	7.5	危険	Schrack	-	Schrack Technik microControl のファームウェアの Web インターフェースにおけるアクセス権を取得される脆弱性	CWE-255 証明書・パスワード管理	CVE-2014-5396	2014-08-26 17:32	2014-07-10	Show	GitHub Exploit DB Packet Storm

217346	5	警告	WP Content Source Control project	-	WordPress 用 WP Content Source Control プラグインの downloadfiles/download.php の file_get_contents 関数におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2014-5368	2014-08-26 16:13	2014-08-19	Show	GitHub Exploit DB Packet Storm

217347	7.2	危険	Little Kernel project	-	MSM デバイス用 Qualcomm Innovation Center Android コントリビューションなどで配布される Little Kernel ブートローダにおけるデバイスロックおよびカーネルの署名の制限を回避される脆弱性	CWE-287 不適切な認証	CVE-2014-4325	2014-08-26 15:45	2014-08-5	Show	GitHub Exploit DB Packet Storm

217348	1.9	注意	Little Kernel project	-	MSM デバイス用 Qualcomm Innovation Center Android コントリビューションなどで配布される Little Kernel ブートローダにおける制御可能なメモリ領域にデータを書き込まれる脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2014-0974	2014-08-26 15:39	2014-07-23	Show	GitHub Exploit DB Packet Storm

217349	7.2	危険	Little Kernel project	-	MSM デバイス用 Qualcomm Innovation Center Android コントリビューションなどで配布される Little Kernel ブートローダにおけるブートイメージの認証要件を回避される脆弱性	CWE-287 不適切な認証	CVE-2014-0973	2014-08-26 15:37	2014-06-13	Show	GitHub Exploit DB Packet Storm

217350	4.6	警告	SaltStack	-	Salt における脆弱性	CWE-59 リンク解釈の問題	CVE-2014-3563	2014-08-26 15:16	2014-08-1	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 22, 2026, 4:08 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
296961	-	teampass	teampass	Cross-site scripting (XSS) vulnerability in sources/users.queries.php in TeamPass before 2.1.6 allows remote authenticated users to inject arbitrary web script or HTML via the login parameter in an a…	CWE-79 Cross-site Scripting	CVE-2012-2234	2024-11-21 10:38	2012-04-22	Show	GitHub Exploit DB Packet Storm

296962	-	owncloud	owncloud	Open redirect vulnerability in index.php (aka the Login Page) in ownCloud before 3.0.3 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the r…	CWE-20 Improper Input Validation	CVE-2012-2270	2024-11-21 10:38	2012-04-20	Show	GitHub Exploit DB Packet Storm

296963	-	owncloud	owncloud	Multiple cross-site scripting (XSS) vulnerabilities in ownCloud before 3.0.3 allow remote attackers to inject arbitrary web script or HTML via (1) an arbitrary field to apps/contacts/ajax/addcard.php…	CWE-79 Cross-site Scripting	CVE-2012-2269	2024-11-21 10:38	2012-04-20	Show	GitHub Exploit DB Packet Storm

296964	-	ryan_walberg	php_gift_registry	SQL injection vulnerability in users.php in PHP Gift Registry 1.5.5 allows remote authenticated users to execute arbitrary SQL commands via the userid parameter in an edit action.	CWE-89 SQL Injection	CVE-2012-2236	2024-11-21 10:38	2012-04-20	Show	GitHub Exploit DB Packet Storm

296965	-	comodo	comodo_internet_security	Comodo Internet Security before 5.10.228257.2253 on Windows 7 x64 allows local users to cause a denial of service (system crash) via a crafted 32-bit Portable Executable (PE) file with a kernel Image…	CWE-94 Code Injection	CVE-2012-2273	2024-11-21 10:38	2012-04-20	Show	GitHub Exploit DB Packet Storm

296966	-	openssl redhat	openssl	The asn1_d2i_read_bio function in crypto/asn1/a_d2i_fp.c in OpenSSL before 0.9.8v, 1.0.0 before 1.0.0i, and 1.0.1 before 1.0.1a does not properly interpret integer data, which allows remote attackers…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2012-2110	2024-11-21 10:38	2012-04-20	Show	GitHub Exploit DB Packet Storm

296967	-	hp	system_management_homepage	Unspecified vulnerability in HP System Management Homepage (SMH) before 7.0 allows local users to modify data or obtain sensitive information via unknown vectors.	NVD-CWE-noinfo	CVE-2012-1993	2024-11-21 10:38	2012-04-18	Show	GitHub Exploit DB Packet Storm

296968	-	f5 fedoraproject	nginx fedora	Buffer overflow in ngx_http_mp4_module.c in the ngx_http_mp4_module module in nginx 1.0.7 through 1.0.14 and 1.1.3 through 1.1.18, when the mp4 directive is used, allows remote attackers to cause a d…	CWE-120 Classic Buffer Overflow	CVE-2012-2089	2024-11-21 10:38	2012-04-18	Show	GitHub Exploit DB Packet Storm

296969	-	syndeocms	syndeocms	Cross-site scripting (XSS) vulnerability in starnet/index.php in SyndeoCMS 3.0.01 and earlier allows remote authenticated users to inject arbitrary web script or HTML via the email parameter (aka Ema…	CWE-79 Cross-site Scripting	CVE-2012-1979	2024-11-21 10:38	2012-04-18	Show	GitHub Exploit DB Packet Storm

296970	-	realnetworks	helix_server helix_mobile_server	master.exe in the SNMP Master Agent in RealNetworks Helix Server and Helix Mobile Server 14.x before 14.3.x allows remote attackers to cause a denial of service (unhandled exception and daemon crash)…	CWE-20 Improper Input Validation	CVE-2012-2268	2024-11-21 10:38	2012-04-17	Show	GitHub Exploit DB Packet Storm