Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 9, 2026, 2 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
217801	4.3	警告	Ruby on Rails project	-	Ruby on Rails の actionview/lib/action_view/helpers/number_helper.rb におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2014-0081	2014-04-8 15:48	2014-02-18	Show	GitHub Exploit DB Packet Storm

217802	4.3	警告	Horde	-	Horde Groupware Webmail Edition で使用される Horde Internet Mail Program におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-6640	2014-04-8 14:40	2012-06-26	Show	GitHub Exploit DB Packet Storm

217803	4.3	警告	Horde	-	Horde Groupware Webmail Edition で使用される Horde Kronolith Calendar Application H4 におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-5567	2014-04-8 14:39	2012-11-14	Show	GitHub Exploit DB Packet Storm

217804	4.3	警告	Horde	-	Horde Groupware Webmail Edition で使用される Horde Kronolith Calendar Application H4 におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-5566	2014-04-8 14:33	2012-05-29	Show	GitHub Exploit DB Packet Storm

217805	4.3	警告	Horde	-	Horde Groupware Webmail Edition で使用される Horde Internet Mail Program におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-5565	2014-04-8 14:32	2012-11-14	Show	GitHub Exploit DB Packet Storm

217806	4	警告	シスコシステムズ	-	Cisco Unity Connection のメッセージング API におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2014-2145	2014-04-8 14:30	2014-04-7	Show	GitHub Exploit DB Packet Storm

217807	6.1	警告	シスコシステムズ	-	Cisco IOS XR におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2014-2144	2014-04-8 14:30	2014-04-4	Show	GitHub Exploit DB Packet Storm

217808	6.8	警告	Lee Howard	-	HylaFAX+ の hfaxd におけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2013-5680	2014-04-8 13:59	2013-08-6	Show	GitHub Exploit DB Packet Storm

217809	4.3	警告	Klaus Purer	-	Drupal 用 RESTful Web Services モジュールにおけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2013-1946	2014-04-8 13:36	2013-04-10	Show	GitHub Exploit DB Packet Storm

217810	4	警告	ヒューレット・パッカード	-	HP IceWall Identity Manager および IceWall SSO パスワードリセットオプションにおけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2014-2600	2014-04-8 12:27	2014-04-3	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 9, 2026, 5:07 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
296291	-	wpsymposium	wp_symposium	Multiple unrestricted file upload vulnerabilities in the WP Symposium plugin before 11.12.24 for WordPress allow remote attackers to execute arbitrary code by uploading a file with an executable exte…	NVD-CWE-Other	CVE-2011-5051	2024-11-21 10:33	2012-01-5	Show	GitHub Exploit DB Packet Storm

296292	-	elitecore	cyberoam_unified_threat_management	SQL injection vulnerability in corporate/Controller in Elitecore Technologies Cyberoam UTM before 10.01.2 build 059 allows remote authenticated administrators to execute arbitrary SQL commands via th…	CWE-89 SQL Injection	CVE-2011-5050	2024-11-21 10:33	2012-01-5	Show	GitHub Exploit DB Packet Storm

296293	-	-	-	MySQL 5.5.8, when running on Windows, allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted packet to TCP port 3306.	CWE-399 Resource Management Errors	CVE-2011-5049	2024-11-21 10:33	2012-01-5	Show	GitHub Exploit DB Packet Storm

296294	-	e107	e107	SQL injection vulnerability in usersettings.php in e107 0.7.26, and possibly other versions before 1.0.0, allows remote attackers to execute arbitrary SQL commands via the username parameter.	CWE-89 SQL Injection	CVE-2011-4921	2024-11-21 10:33	2012-01-5	Show	GitHub Exploit DB Packet Storm

296295	-	e107	e107	Multiple cross-site scripting (XSS) vulnerabilities in e107 0.7.26, and other versions before 1.0.0, allow remote attackers to inject arbitrary web script or HTML via the URL to (1) e107_images/thumb…	CWE-79 Cross-site Scripting	CVE-2011-4920	2024-11-21 10:33	2012-01-5	Show	GitHub Exploit DB Packet Storm

296296	-	ibm	web_experience_factory	Multiple cross-site scripting (XSS) vulnerabilities in IBM Web Experience Factory (aka WEF, formerly WebSphere Portlet Factory) 7.0 and 7.0.1 allow remote attackers to inject arbitrary web script or …	CWE-79 Cross-site Scripting	CVE-2011-5048	2024-11-21 10:33	2012-01-4	Show	GitHub Exploit DB Packet Storm

296297	-	pfsense	pfsense	Cross-site scripting (XSS) vulnerability in status_rrd_graph.php in pfSense before 2.0.1 allows remote attackers to inject arbitrary web script or HTML via the style parameter.	CWE-79 Cross-site Scripting	CVE-2011-5047	2024-11-21 10:33	2012-01-4	Show	GitHub Exploit DB Packet Storm

296298	-	microsoft	windows_xp windows_server_2008 windows_7 windows_server_2003 windows_vista	The Graphics Device Interface (GDI) in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, …	CWE-20 Improper Input Validation	CVE-2011-5046	2024-11-21 10:33	2011-12-31	Show	GitHub Exploit DB Packet Storm

296299	-	jjwdesign	php_booking_calendar	Cross-site scripting (XSS) vulnerability in details_view.php in PHP Booking Calendar 10e allows remote attackers to inject arbitrary web script or HTML via the page_info_message parameter.	CWE-79 Cross-site Scripting	CVE-2011-5045	2024-11-21 10:33	2011-12-31	Show	GitHub Exploit DB Packet Storm

296300	-	sopcast	sopcast	SopCast 3.4.7.45585 uses weak permissions (Everyone:Full Control) for Diagnose.exe, which allows local users to execute arbitrary code by replacing Diagnose.exe with a Trojan horse program.	CWE-264 Permissions, Privileges, and Access Controls	CVE-2011-5044	2024-11-21 10:33	2011-12-31	Show	GitHub Exploit DB Packet Storm