Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 8, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
217411 7.5 危険 MODX - MODX Revolution における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2014-2736 2014-04-28 14:43 2014-04-4 Show GitHub Exploit DB Packet Storm
217412 7.5 危険 レッドハット - Red Hat OpenShift Enterprise の openshift-origin-broker における認証を回避される脆弱性 CWE-287
不適切な認証
CVE-2014-0188 2014-04-28 14:36 2014-04-23 Show GitHub Exploit DB Packet Storm
217413 5 警告 Sixnet - Sixnet SixView Manager におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2014-2976 2014-04-28 14:24 2014-04-22 Show GitHub Exploit DB Packet Storm
217414 6.1 警告 シスコシステムズ - Cisco ASR 1000 シリーズのデバイスのソフトウェアにおけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2012-5723 2014-04-28 13:58 2012-11-2 Show GitHub Exploit DB Packet Storm
217415 5 警告 シスコシステムズ - Cisco IOS におけるインターフェース ACL 制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-3946 2014-04-28 13:58 2012-07-10 Show GitHub Exploit DB Packet Storm
217416 5 警告 シスコシステムズ - Cisco Adaptive Security Appliance ソフトウェアの SIP 検査エンジンにおけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2014-2154 2014-04-28 13:57 2014-04-23 Show GitHub Exploit DB Packet Storm
217417 6.4 警告 Applied Informatics Software Engineering GmbH - POCO C++ Libraries の NetSSL ライブラリにおけるワイルドカード証明書を適切に検証しない脆弱性 - CVE-2014-0350 2014-04-28 12:53 2014-04-24 Show GitHub Exploit DB Packet Storm
217418 4.3 警告 OTRS プロジェクト
Novell
- OTRS におけるクリックジャッキング攻撃を実行される脆弱性 CWE-20
不適切な入力確認
CVE-2014-2554 2014-04-28 12:03 2014-04-1 Show GitHub Exploit DB Packet Storm
217419 7.5 危険 The Cacti Group - Cacti の lib/rrd.php における任意のコマンドを実行される脆弱性 CWE-Other
その他
CVE-2014-2709 2014-04-28 11:57 2014-03-30 Show GitHub Exploit DB Packet Storm
217420 6.5 警告 The Cacti Group - Cacti の lib/graph_export.php における任意のコマンドを実行される脆弱性 CWE-Other
その他
CVE-2014-2328 2014-04-28 11:56 2014-03-30 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 8, 2026, 4:54 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
294331 - nih libzip Integer overflow in the _zip_readcdir function in zip_open.c in libzip 0.10 allows remote attackers to execute arbitrary code via the size and offset values for the central directory in a zip archive… CWE-189
Numeric Errors
CVE-2012-1163 2024-11-21 10:36 2012-07-13 Show GitHub Exploit DB Packet Storm
294332 - nih libzip Heap-based buffer overflow in the _zip_readcdir function in zip_open.c in libzip 0.10 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via … CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2012-1162 2024-11-21 10:36 2012-07-13 Show GitHub Exploit DB Packet Storm
294333 - glpi-project glpi PHP remote file inclusion vulnerability in front/popup.php in GLPI 0.78 through 0.80.61 allows remote authenticated users to execute arbitrary PHP code via a URL in the sub_type parameter. CWE-94
Code Injection
CVE-2012-1037 2024-11-21 10:36 2012-07-13 Show GitHub Exploit DB Packet Storm
294334 - libexpat_project
apple
libexpat
mac_os_x
Memory leak in the poolGrow function in expat/lib/xmlparse.c in expat before 2.1.0 allows context-dependent attackers to cause a denial of service (memory consumption) via a large number of crafted X… CWE-399
 Resource Management Errors
CVE-2012-1148 2024-11-21 10:36 2012-07-4 Show GitHub Exploit DB Packet Storm
294335 - apple
libexpat_project
mac_os_x
libexpat
readfilemap.c in expat before 2.1.0 allows context-dependent attackers to cause a denial of service (file descriptor consumption) via a large number of crafted XML files. CWE-20
 Improper Input Validation 
CVE-2012-1147 2024-11-21 10:36 2012-07-4 Show GitHub Exploit DB Packet Storm
294336 - redhat automatic_bug_reporting_tool The C handler plug-in in Automatic Bug Reporting Tool (ABRT), possibly 2.0.8 and earlier, does not properly set the group (GID) permissions on core dump files for setuid programs when the sysctl fs.s… CWE-264
Permissions, Privileges, and Access Controls
CVE-2012-1106 2024-11-21 10:36 2012-07-4 Show GitHub Exploit DB Packet Storm
294337 - openldap openldap slapd in OpenLDAP before 2.4.30 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via an LDAP search query with attrsOnly set to true, which causes empty attrib… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2012-1164 2024-11-21 10:36 2012-06-30 Show GitHub Exploit DB Packet Storm
294338 - mantisbt mantisbt The mci_check_login function in api/soap/mc_api.php in the SOAP API in MantisBT before 1.2.9 allows remote attackers to bypass authentication via a null password. CWE-287
Improper Authentication
CVE-2012-1123 2024-11-21 10:36 2012-06-30 Show GitHub Exploit DB Packet Storm
294339 - mantisbt mantisbt bug_actiongroup.php in MantisBT before 1.2.9 does not properly check the report_bug_threshold permission of the receiving project when moving a bug report, which allows remote authenticated users wit… CWE-264
Permissions, Privileges, and Access Controls
CVE-2012-1122 2024-11-21 10:36 2012-06-30 Show GitHub Exploit DB Packet Storm
294340 - mantisbt mantisbt MantisBT before 1.2.9 does not properly check permissions, which allows remote authenticated users with manager privileges to (1) modify or (2) delete global categories. CWE-264
Permissions, Privileges, and Access Controls
CVE-2012-1121 2024-11-21 10:36 2012-06-30 Show GitHub Exploit DB Packet Storm