Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 4, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
217801 4.3 警告 ownCloud - ownCloud Server におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-1890 2014-03-11 17:29 2013-03-24 Show GitHub Exploit DB Packet Storm
217802 7.5 危険 Zemanta - WordPress 用 Search Everything プラグインの se_search_default における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2014-2316 2014-03-11 17:24 2014-02-11 Show GitHub Exploit DB Packet Storm
217803 4.3 警告 ShinePHP - WordPress 用 Thank You Counter Button プラグインにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-2315 2014-03-11 17:24 2014-02-25 Show GitHub Exploit DB Packet Storm
217804 4.3 警告 SFR - SFR Box ルータのファームウェアにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-1599 2014-03-11 15:46 2014-02-25 Show GitHub Exploit DB Packet Storm
217805 4.3 警告 Atlassian - Atlassian JIRA の Issue Collector プラグインにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2014-2314 2014-03-11 15:26 2014-02-26 Show GitHub Exploit DB Packet Storm
217806 4.3 警告 Atlassian - Atlassian JIRA の Importers プラグインにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2014-2313 2014-03-11 15:26 2014-02-26 Show GitHub Exploit DB Packet Storm
217807 4.9 警告 nongnu - OATH Toolkit の liboath の usersfile.c におけるリプレイ攻撃を実行される脆弱性 CWE-287
不適切な認証
CVE-2013-7322 2014-03-11 15:15 2013-12-9 Show GitHub Exploit DB Packet Storm
217808 5 警告 Puppet - Puppet Enterprise における重要な情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2013-4971 2014-03-11 14:43 2013-07-29 Show GitHub Exploit DB Packet Storm
217809 6.4 警告 Puppet - Puppet Enterprise のマスタの外部ノード分類スクリプトにおけるマスタに任意の分類を作成される脆弱性 CWE-287
不適切な認証
CVE-2013-4966 2014-03-11 14:42 2013-07-29 Show GitHub Exploit DB Packet Storm
217810 6.8 警告 Free Document Management Software - OpenDocMan の ajax_udf.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2014-2317 2014-03-11 14:39 2014-02-24 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 4, 2026, 4:06 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
293701 - sun sunos Unspecified vulnerability in Oracle Solaris 9, 10, and 11 allows local users to affect availability via unknown vectors related to Kerberos/klist. NVD-CWE-noinfo
CVE-2012-0563 2024-11-21 10:35 2012-07-18 Show GitHub Exploit DB Packet Storm
293702 - oracle
mariadb
redhat
mysql
mariadb
enterprise_linux_desktop
enterprise_linux_server
enterprise_linux_workstation
enterprise_linux_eus
Unspecified vulnerability in Oracle MySQL Server 5.1.62 and earlier and 5.5.23 and earlier allows remote authenticated users to affect availability, related to GIS Extension. NVD-CWE-noinfo
CVE-2012-0540 2024-11-21 10:35 2012-07-18 Show GitHub Exploit DB Packet Storm
293703 - moodle moodle lib/formslib.php in Moodle 2.1.x before 2.1.4 and 2.2.x before 2.2.1 does not properly handle multiple instances of a form element, which has unspecified impact and remote attack vectors. CWE-20
 Improper Input Validation 
CVE-2012-0801 2024-11-21 10:35 2012-07-17 Show GitHub Exploit DB Packet Storm
293704 - moodle moodle The form-autocompletion functionality in Moodle 2.0.x before 2.0.7, 2.1.x before 2.1.4, and 2.2.x before 2.2.1 makes it easier for physically proximate attackers to discover passwords by reading the … CWE-200
Information Exposure
CVE-2012-0800 2024-11-21 10:35 2012-07-17 Show GitHub Exploit DB Packet Storm
293705 - moodle moodle Moodle 2.0.x before 2.0.7 and 2.1.x before 2.1.4, when an anonymous front-page forum is enabled, allows remote attackers to obtain session keys for their sessions by visiting the front page. CWE-200
Information Exposure
CVE-2012-0799 2024-11-21 10:35 2012-07-17 Show GitHub Exploit DB Packet Storm
293706 - moodle moodle The self-enrolment functionality in Moodle 2.1.x before 2.1.4 and 2.2.x before 2.2.1 allows remote authenticated users to obtain the manager role by leveraging the teacher role. CWE-264
Permissions, Privileges, and Access Controls
CVE-2012-0798 2024-11-21 10:35 2012-07-17 Show GitHub Exploit DB Packet Storm
293707 - moodle moodle The webservices functionality in Moodle 2.0.x before 2.0.7, 2.1.x before 2.1.4, and 2.2.x before 2.2.1 allows remote authenticated users to bypass the deleted status and continue using a server via a… CWE-16
Configuration
CVE-2012-0797 2024-11-21 10:35 2012-07-17 Show GitHub Exploit DB Packet Storm
293708 - moodle moodle class.phpmailer.php in the PHPMailer library, as used in Moodle 1.9.x before 1.9.16, 2.0.x before 2.0.7, 2.1.x before 2.1.4, and 2.2.x before 2.2.1 and other products, allows remote authenticated use… CWE-94
Code Injection
CVE-2012-0796 2024-11-21 10:35 2012-07-17 Show GitHub Exploit DB Packet Storm
293709 - moodle moodle Moodle 1.9.x before 1.9.16, 2.0.x before 2.0.7, 2.1.x before 2.1.4, and 2.2.x before 2.2.1 does not validate e-mail address settings, which allows remote authenticated users to have an unspecified im… CWE-20
 Improper Input Validation 
CVE-2012-0795 2024-11-21 10:35 2012-07-17 Show GitHub Exploit DB Packet Storm
293710 - moodle moodle The rc4encrypt function in lib/moodlelib.php in Moodle 1.9.x before 1.9.16, 2.0.x before 2.0.7, 2.1.x before 2.1.4, and 2.2.x before 2.2.1 uses a hardcoded password of nfgjeingjk, which makes it easi… CWE-255
Credentials Management
CVE-2012-0794 2024-11-21 10:35 2012-07-17 Show GitHub Exploit DB Packet Storm