Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 18, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
217421 3.5 注意 サイボウズ - サイボウズ ガルーンの地図検索機能におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-1995 2014-07-23 10:46 2014-07-15 Show GitHub Exploit DB Packet Storm
217422 5.5 警告 サイボウズ - サイボウズ ガルーン 3 連携API におけるアクセス制限回避の脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2014-1996 2014-07-23 10:45 2014-07-15 Show GitHub Exploit DB Packet Storm
217423 10 危険 サイボウズ - サイボウズ ガルーンにおいて任意のコマンドが実行される脆弱性 CWE-noinfo
情報不足 		CVE-2014-1987 2014-07-23 10:45 2014-07-15 Show GitHub Exploit DB Packet Storm
217424 2.6 注意 Webmin Project - Webmin におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-3886 2014-07-23 10:44 2014-06-20 Show GitHub Exploit DB Packet Storm
217425 3.5 注意 Webmin Project - Webmin におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-3885 2014-07-23 10:44 2014-06-20 Show GitHub Exploit DB Packet Storm
217426 4.3 警告 Webmin Project - Usermin におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-3884 2014-07-23 10:43 2014-06-20 Show GitHub Exploit DB Packet Storm
217427 7.5 危険 Cogent Real-Time Systems Inc. - Cogent Real-Time Systems Cogent DataHub の GetPermissions.asp における任意のコマンドを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2014-3789 2014-07-22 18:39 2014-04-29 Show GitHub Exploit DB Packet Storm
217428 5 警告 drunomics - Drupal 用 Entity API モジュールにおける制限されたエンティティを読まれる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-7391 2014-07-22 18:36 2013-08-14 Show GitHub Exploit DB Packet Storm
217429 4 警告 drunomics - Drupal 用 Entity API モジュールにおけるコメントを読まれる脆弱性 CWE-200
情報漏えい 		CVE-2013-4273 2014-07-22 18:36 2013-08-14 Show GitHub Exploit DB Packet Storm
217430 6.3 警告 IBM - IBM InfoSphere Master Data Management - Collaborative Edition および InfoSphere Master Data Management Server for Product Information Management の GDS コンポーネントにおける任意のファイルを読まれる脆弱性 CWE-200
情報漏えい 		CVE-2014-3064 2014-07-22 17:35 2014-06-24 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 19, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
296751 - gnu gnutls gnutls_cipher.c in libgnutls in GnuTLS before 2.12.17 and 3.x before 3.0.15 does not properly handle data encrypted with a block cipher, which allows remote attackers to cause a denial of service (he… CWE-310
Cryptographic Issues 		CVE-2012-1573 2024-11-21 10:37 2012-03-27 Show GitHub Exploit DB Packet Storm
296752 - gnu gnutls
libtasn1 		The asn1_get_length_der function in decoding.c in GNU Libtasn1 before 2.12, as used in GnuTLS before 3.0.16 and other products, does not properly handle certain large length values, which allows remo… CWE-189
Numeric Errors 		CVE-2012-1569 2024-11-21 10:37 2012-03-27 Show GitHub Exploit DB Packet Storm
296753 - google chrome Google Chrome 17.0.963.66 and earlier allows remote attackers to bypass the sandbox protection mechanism by leveraging access to a sandboxed process, as demonstrated by VUPEN during a Pwn2Own competi… CWE-668
 Exposure of Resource to Wrong Sphere 		CVE-2012-1846 2024-11-21 10:37 2012-03-23 Show GitHub Exploit DB Packet Storm
296754 - google chrome Use-after-free vulnerability in Google Chrome 17.0.963.66 and earlier allows remote attackers to bypass the DEP and ASLR protection mechanisms, and execute arbitrary code, via unspecified vectors, as… CWE-416
 Use After Free 		CVE-2012-1845 2024-11-21 10:37 2012-03-23 Show GitHub Exploit DB Packet Storm
296755 - quantum
dell
ibm 		scalar_i500_firmware
scalar_i500
powervault_ml6000_firmware
powervault_ml6000
powervault_ml6010
powervault_ml6020
powervault_ml6030
ts3310_tape_library_firmware
ts3310_tape_li… 		The Quantum Scalar i500 tape library with firmware before i7.0.3 (604G.GS00100), also distributed as the Dell ML6000 tape library with firmware before A20-00 (590G.GS00100) and the IBM TS3310 tape li… CWE-255
Credentials Management 		CVE-2012-1844 2024-11-21 10:37 2012-03-22 Show GitHub Exploit DB Packet Storm
296756 - quantum
dell 		scalar_i500_firmware
scalar_i500
powervault_ml6000_firmware
powervault_ml6000
powervault_ml6010
powervault_ml6020
powervault_ml6030 		Cross-site request forgery (CSRF) vulnerability in saveRestore.htm on the Quantum Scalar i500 tape library with firmware before i7.0.3 (604G.GS00100), also distributed as the Dell ML6000 tape library… CWE-352
 Origin Validation Error 		CVE-2012-1843 2024-11-21 10:37 2012-03-22 Show GitHub Exploit DB Packet Storm
296757 - quantum
dell 		scalar_i500_firmware
scalar_i500
powervault_ml6000_firmware
powervault_ml6000
powervault_ml6010
powervault_ml6020
powervault_ml6030 		Cross-site scripting (XSS) vulnerability in checkQKMProg.htm on the Quantum Scalar i500 tape library with firmware before i7.0.3 (604G.GS00100), also distributed as the Dell ML6000 tape library with … CWE-79
Cross-site Scripting 		CVE-2012-1842 2024-11-21 10:37 2012-03-22 Show GitHub Exploit DB Packet Storm
296758 - quantum
dell 		scalar_i500_firmware
scalar_i500
powervault_ml6000_firmware
powervault_ml6000
powervault_ml6010
powervault_ml6020
powervault_ml6030 		Absolute path traversal vulnerability in logShow.htm on the Quantum Scalar i500 tape library with firmware before i7.0.3 (604G.GS00100), also distributed as the Dell ML6000 tape library with firmware… CWE-22
Path Traversal 		CVE-2012-1841 2024-11-21 10:37 2012-03-22 Show GitHub Exploit DB Packet Storm
296759 - ajaxplorer ajaxplorer AjaXplorer 3.2.x before 3.2.5 and 4.0.x before 4.0.4 does not properly perform cookie authentication, which allows remote attackers to obtain login access by leveraging knowledge of a password hash. CWE-287
Improper Authentication 		CVE-2012-1840 2024-11-21 10:37 2012-03-22 Show GitHub Exploit DB Packet Storm
296760 - ajaxplorer ajaxplorer Multiple directory traversal vulnerabilities in the Get Template feature in plugins/gui.ajax/class.AJXP_ClientDriver.php in AjaXplorer 3.2.x before 3.2.5 and 4.0.x before 4.0.4 allow remote attackers… CWE-22
Path Traversal 		CVE-2012-1839 2024-11-21 10:37 2012-03-22 Show GitHub Exploit DB Packet Storm