Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 21, 2026, 6:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
217491 4.3 警告 Blackbam - WordPress 用 Improved user search in backend プラグインにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-5196 2014-08-14 17:13 2014-08-8 Show GitHub Exploit DB Packet Storm
217492 4.9 警告 ゾール・メディカル - ZOLL 除細動器 X シリーズにおけるデバイスの設定を変更される脆弱性 CWE-255
証明書・パスワード管理 		CVE-2013-7395 2014-08-14 17:08 2013-08-1 Show GitHub Exploit DB Packet Storm
217493 4.9 警告 ゾール・メディカル - ZOLL 除細動器の複数のシリーズにおけるデバイスの設定を変更される脆弱性 CWE-255
証明書・パスワード管理 		CVE-2007-6756 2014-08-14 17:07 2007-05-1 Show GitHub Exploit DB Packet Storm
217494 4 警告 ヒューレット・パッカード - HP NonStop Safeguard Security Software におけるプログラムのアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2014-2629 2014-08-14 16:12 2014-08-5 Show GitHub Exploit DB Packet Storm
217495 7.2 危険 IBM - IBM Security AppScan Source の Automation Server における権限を取得される脆弱性 CWE-noinfo
情報不足 		CVE-2014-3072 2014-08-14 15:59 2014-07-30 Show GitHub Exploit DB Packet Storm
217496 7.5 危険 MegaLab.it - MegaLab The Uploader の login.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2011-2944 2014-08-14 15:54 2011-07-28 Show GitHub Exploit DB Packet Storm
217497 6.8 警告 シトリックス・システムズ - Citrix Access Gateway Enterprise Edition Plug-in for Windows の nsepacom ActiveX コントロールの StartEpa メソッドにおける整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2011-2593 2014-08-14 15:48 2011-07-19 Show GitHub Exploit DB Packet Storm
217498 4.3 警告 Brian Nez - Microcart におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-4241 2014-08-14 15:42 2012-07-23 Show GitHub Exploit DB Packet Storm
217499 10 危険 マイクロソフト
アドビシステムズ
Google		 - Adobe Flash Player および Adobe AIR における ASLR 保護メカニズムを回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2014-0545 2014-08-14 14:46 2014-08-12 Show GitHub Exploit DB Packet Storm
217500 10 危険 マイクロソフト
アドビシステムズ
Google		 - Adobe Flash Player および Adobe AIR における ASLR 保護メカニズムを回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2014-0544 2014-08-14 14:46 2014-08-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 22, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
296931 - php php sapi/cgi/cgi_main.c in PHP before 5.3.13 and 5.4.x before 5.4.3, when configured as a CGI script (aka php-cgi), does not properly handle query strings that contain a %3D sequence but no = (equals sig… CWE-89
SQL Injection 		CVE-2012-2311 2024-11-21 10:38 2012-05-11 Show GitHub Exploit DB Packet Storm
296932 - hp performance_insight Unspecified vulnerability in HP Performance Insight for Networks 5.3.x, 5.41, 5.41.001, and 5.41.002 allows remote authenticated users to gain privileges via unknown vectors. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2012-2009 2024-11-21 10:38 2012-05-9 Show GitHub Exploit DB Packet Storm
296933 - hp performance_insight Cross-site scripting (XSS) vulnerability in HP Performance Insight for Networks 5.3.x, 5.41, 5.41.001, and 5.41.002 allows remote attackers to inject arbitrary web script or HTML via unspecified vect… CWE-79
Cross-site Scripting 		CVE-2012-2008 2024-11-21 10:38 2012-05-9 Show GitHub Exploit DB Packet Storm
296934 - hp performance_insight SQL injection vulnerability in HP Performance Insight for Networks 5.3.x, 5.41, 5.41.001, and 5.41.002 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. CWE-89
SQL Injection 		CVE-2012-2007 2024-11-21 10:38 2012-05-9 Show GitHub Exploit DB Packet Storm
296935 - wellintech kingview WellinTech KingSCADA 3.0 uses a cleartext base64 format for storage of passwords in user.db, which allows context-dependent attackers to obtain sensitive information by reading this file. CWE-255
Credentials Management 		CVE-2012-1977 2024-11-21 10:38 2012-05-9 Show GitHub Exploit DB Packet Storm
296936 - adobe shockwave_player Adobe Shockwave Player before 11.6.5.635 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-2… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2012-2033 2024-11-21 10:38 2012-05-9 Show GitHub Exploit DB Packet Storm
296937 - adobe shockwave_player Adobe Shockwave Player before 11.6.5.635 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-2… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2012-2032 2024-11-21 10:38 2012-05-9 Show GitHub Exploit DB Packet Storm
296938 - adobe shockwave_player Adobe Shockwave Player before 11.6.5.635 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-2… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2012-2031 2024-11-21 10:38 2012-05-9 Show GitHub Exploit DB Packet Storm
296939 - adobe shockwave_player Adobe Shockwave Player before 11.6.5.635 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-2… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2012-2030 2024-11-21 10:38 2012-05-9 Show GitHub Exploit DB Packet Storm
296940 - adobe shockwave_player Adobe Shockwave Player before 11.6.5.635 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-2… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2012-2029 2024-11-21 10:38 2012-05-9 Show GitHub Exploit DB Packet Storm