Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 7, 2026, 12:09 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
217661 3.5 注意 MySQL AB
オラクル
- Oracle MySQL の MySQL Server における Optimizer に関する脆弱性 CWE-noinfo
情報不足
CVE-2014-0437 2014-03-13 18:18 2014-01-14 Show GitHub Exploit DB Packet Storm
217662 10 危険 シスコシステムズ - Cisco Unified SIP Phone 3905 のファームウェアにおける root アクセス権を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-0721 2014-03-13 17:45 2014-02-19 Show GitHub Exploit DB Packet Storm
217663 7.5 危険 Raoul Proenca - Gnew の users/login.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2013-5639 2014-03-13 17:45 2013-10-2 Show GitHub Exploit DB Packet Storm
217664 7.8 危険 シスコシステムズ - Cisco IPS ソフトウェアのコントロールプレーンのアクセスリストの実装におけるサービス運用妨害 (DoS) の脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-0719 2014-03-13 17:42 2014-02-19 Show GitHub Exploit DB Packet Storm
217665 4.4 警告 Novell
Logilab.org
- logilab-common の shellutils の Execute クラスにおける脆弱性 CWE-noinfo
情報不足
CVE-2014-1839 2014-03-13 16:43 2014-02-11 Show GitHub Exploit DB Packet Storm
217666 4.4 警告 Novell
Logilab.org
- logilab-common における任意のファイルを上書きされる脆弱性 CWE-59
リンク解釈の問題
CVE-2014-1838 2014-03-13 16:42 2014-02-11 Show GitHub Exploit DB Packet Storm
217667 7.5 危険 MODX - MODX Revolution の modx.class.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2014-2311 2014-03-13 16:42 2014-03-7 Show GitHub Exploit DB Packet Storm
217668 6.5 警告 Thomas Abeel - Simple PHP Agenda の edit_event.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2013-3961 2014-03-13 16:32 2013-06-11 Show GitHub Exploit DB Packet Storm
217669 9.3 危険 John Paul Chacha's Lab - Chasys Draw IES の flt_BMP.dll の ReadFile 機能におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2013-3928 2014-03-13 16:03 2013-07-21 Show GitHub Exploit DB Packet Storm
217670 6.8 警告 Umisoft - Umisoft UMI.CMS におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2013-2754 2014-03-13 15:48 2013-05-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 7, 2026, 4:22 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
293911 6.1 MEDIUM
Network
plixer scrutinizer_netflow_\&_sflow_analyzer Cross-site scripting (XSS) vulnerability in cgi-bin/scrut_fa_exclusions.cgi in Plixer International Scrutinizer NetFlow and sFlow Analyzer 8.6.2.16204 and other versions before 9.0.1.19899 allows rem… CWE-79
Cross-site Scripting
CVE-2012-1261 2024-11-21 10:36 2020-01-10 Show GitHub Exploit DB Packet Storm
293912 6.1 MEDIUM
Network
plixer scrutinizer_netflow_\&_sflow_analyzer Cross-site scripting (XSS) vulnerability in cgi-bin/userprefs.cgi in Plixer International Scrutinizer NetFlow & sFlow Analyzer 8.6.2.16204, and possibly other versions before 9.0.1.19899, allows remo… CWE-79
Cross-site Scripting
CVE-2012-1260 2024-11-21 10:36 2020-01-10 Show GitHub Exploit DB Packet Storm
293913 9.8 CRITICAL
Network
plixer scrutinizer_netflow_\&_sflow_analyzer Multiple SQL injection vulnerabilities in Plixer International Scrutinizer NetFlow & sFlow Analyzer 8.6.2.16204, and possibly other versions before 9.0.1.19899, allow remote attackers to execute arbi… CWE-89
SQL Injection
CVE-2012-1259 2024-11-21 10:36 2020-01-10 Show GitHub Exploit DB Packet Storm
293914 6.5 MEDIUM
Network
plixer scrutinizer_netflow_\&_sflow_analyzer cgi-bin/userprefs.cgi in Plixer International Scrutinizer NetFlow & sFlow Analyzer before 9.0.1.19899 does not validate user permissions, which allow remote attackers to add user accounts with admini… CWE-287
Improper Authentication
CVE-2012-1258 2024-11-21 10:36 2020-01-10 Show GitHub Exploit DB Packet Storm
293915 6.1 MEDIUM
Network
ldap-account-manager
fedoraproject
debian
ldap_account_manager
fedora
debian_linux
A Cross-Site Scripting (XSS) vulnerability exists in LDAP Account Manager (LAM) Pro 3.6 in the export, add_value_form, and dn parameters to cmd.php. CWE-79
Cross-site Scripting
CVE-2012-1115 2024-11-21 10:36 2019-12-6 Show GitHub Exploit DB Packet Storm
293916 6.1 MEDIUM
Network
ldap-account-manager
fedoraproject
debian
ldap_account_manager
fedora
debian_linux
A Cross-Site Scripting (XSS) vulnerability exists in LDAP Account Manager (LAM) Pro 3.6 in the filter parameter to cmd.php in an export and exporter_id action. and the filteruid parameter to list.php. CWE-79
Cross-site Scripting
CVE-2012-1114 2024-11-21 10:36 2019-12-6 Show GitHub Exploit DB Packet Storm
293917 5.5 MEDIUM
Local
apereo
fedoraproject
debian
phpcas
fedora
debian_linux
An Information Disclosure vulnerability exists in the Jasig Project php-pear-CAS 1.2.2 package in the /tmp directory. The Central Authentication Service client library archives the debug logging file… CWE-200
Information Exposure
CVE-2012-1105 2024-11-21 10:36 2019-12-6 Show GitHub Exploit DB Packet Storm
293918 5.3 MEDIUM
Network
apereo
debian
phpcas
debian_linux
A Security Bypass vulnerability exists in the phpCAS 1.2.2 library from the jasig project due to the way proxying of services are managed. CWE-269
 Improper Privilege Management
CVE-2012-1104 2024-11-21 10:36 2019-12-6 Show GitHub Exploit DB Packet Storm
293919 6.1 MEDIUM
Network
chyrp chyrp Multiple cross-site scripting (XSS) vulnerabilities in Chyrp before 2.1.2 and before 2.5 Beta 2 allow remote attackers to inject arbitrary web script or HTML via the (1) content parameter to includes… CWE-79
Cross-site Scripting
CVE-2012-1001 2024-11-21 10:36 2019-11-22 Show GitHub Exploit DB Packet Storm
293920 5.5 MEDIUM
Local
pidgin pidgin Pidgin 2.10.0 uses DBUS for certain cleartext communication, which allows local users to obtain sensitive information via a dbus session monitor. CWE-319
Cleartext Transmission of Sensitive Information
CVE-2012-1257 2024-11-21 10:36 2019-11-21 Show GitHub Exploit DB Packet Storm