Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":April 30, 2026, 2:16 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
217811	9.3	危険	FFmpeg	-	FFmpeg の libavcodec/h264.c の decode_slice_header 関数における脆弱性	CWE-119 バッファエラー	CVE-2013-0850	2014-02-26 10:44	2013-07-16	Show	GitHub Exploit DB Packet Storm

217812	9.3	危険	FFmpeg	-	FFmpeg の libavcodec/huffyuv.c の decode_init 関数における脆弱性	CWE-119 バッファエラー	CVE-2013-0848	2014-02-25 18:18	2013-07-16	Show	GitHub Exploit DB Packet Storm

217813	9.3	危険	FFmpeg	-	FFmpeg の libavformat/id3v2.c の ff_id3v2_parse 関数における脆弱性	CWE-119 バッファエラー	CVE-2013-0847	2014-02-25 18:16	2013-07-16	Show	GitHub Exploit DB Packet Storm

217814	2.1	注意	マイクロソフトシマンテック IBM オラクル	-	Oracle Fusion Middleware の Oracle Outside In Technology における脆弱性	CWE-noinfo 情報不足	CVE-2012-3109	2014-02-25 17:48	2012-07-17	Show	GitHub Exploit DB Packet Storm

217815	10	危険	Mozilla Foundation	-	Mozilla Firefox および SeaMonkey の Web ワーカーの実装における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2014-1488	2014-02-25 17:42	2014-02-4	Show	GitHub Exploit DB Packet Storm

217816	5	警告	Mozilla Foundation	-	複数の Mozilla 製品の Web ワーカーの実装における同一生成元ポリシーを回避される脆弱性	CWE-255 証明書・パスワード管理	CVE-2014-1487	2014-02-25 17:41	2014-02-4	Show	GitHub Exploit DB Packet Storm

217817	10	危険	Mozilla Foundation	-	複数の Mozilla 製品の imgRequestProxy 関数における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2014-1486	2014-02-25 17:41	2014-02-4	Show	GitHub Exploit DB Packet Storm

217818	7.5	危険	Mozilla Foundation	-	Mozilla Firefox および SeaMonkey の Content Security Policy の実装における任意の XSLT コードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2014-1485	2014-02-25 17:40	2014-02-4	Show	GitHub Exploit DB Packet Storm

217819	4.3	警告	Mozilla Foundation	-	Mozilla Firefox および SeaMonkey における同一生成元ポリシーを回避される脆弱性	CWE-200 情報漏えい	CVE-2014-1483	2014-02-25 17:40	2014-02-4	Show	GitHub Exploit DB Packet Storm

217820	10	危険	Mozilla Foundation	-	複数の Mozilla 製品の RasterImage.cpp における任意のコードを実行される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2014-1482	2014-02-25 17:40	2014-02-4	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:April 30, 2026, 4:58 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
292961	-	mathopd	mathopd	Directory traversal vulnerability in Mathopd 1.4.x and 1.5.x before 1.5p7, when configured with the * construct for mass virtual hosting, allows remote attackers to read arbitrary files via a crafted…	CWE-22 Path Traversal	CVE-2012-1050	2024-11-21 10:36	2012-02-14	Show	GitHub Exploit DB Packet Storm

292962	-	manageengine	admanager_plus	Multiple cross-site scripting (XSS) vulnerabilities in ManageEngine ADManager Plus 5.2 Build 5210 allow remote attackers to inject arbitrary web script or HTML via the (1) domainName parameter to jsp…	CWE-79 Cross-site Scripting	CVE-2012-1049	2024-11-21 10:36	2012-02-14	Show	GitHub Exploit DB Packet Storm

292963	-	efrontlearning	efront_community_\+\+	Cross-site scripting (XSS) vulnerability in communityplusplus/www/administrator.php in eFront Community++ edition 3.6.10, and possibly other editions, allows remote attackers to inject arbitrary web …	CWE-79 Cross-site Scripting	CVE-2012-1048	2024-11-21 10:36	2012-02-13	Show	GitHub Exploit DB Packet Storm

292964	-	cyberoam	cyberoam_central_console	Directory traversal vulnerability in the WWWHELP Service (js/html/wwhelp.htm) in Cyberoam Central Console (CCC) 2.00.2 allows remote attackers to include and execute arbitrary local files via a .. (d…	CWE-22 Path Traversal	CVE-2012-1047	2024-11-21 10:36	2012-02-13	Show	GitHub Exploit DB Packet Storm

292965	-	ibm	cognos_tm1	Cross-site scripting (XSS) vulnerability in TM1 Web in IBM Cognos TM1 9.5.2 FP1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than …	CWE-79 Cross-site Scripting	CVE-2012-1046	2024-11-21 10:36	2012-02-11	Show	GitHub Exploit DB Packet Storm

292966	-	adacore	ada_web_services	AdaCore Ada Web Services (AWS) before 2.10.2 computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a …	CWE-20 Improper Input Validation	CVE-2012-1035	2024-11-21 10:36	2012-02-9	Show	GitHub Exploit DB Packet Storm

292967	-	isc	bind	The resolver in ISC BIND 9 through 9.8.1-P1 overwrites cached server names and TTL values in NS records during the processing of a response to an A record query, which allows remote attackers to trig…	NVD-CWE-Other	CVE-2012-1033	2024-11-21 10:36	2012-02-9	Show	GitHub Exploit DB Packet Storm

292968	-	episerver	episerver_cms	Multiple cross-site scripting (XSS) vulnerabilities in the admin interface in EPiServer CMS through 6R2 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.	CWE-79 Cross-site Scripting	CVE-2012-1034	2024-11-21 10:36	2012-02-8	Show	GitHub Exploit DB Packet Storm

292969	-	episerver	episerver_cms	Unspecified vulnerability in EPiServer CMS 5 and 6 through 6R2, in certain configurations using Forms Authentication, allows remote authenticated users to obtain WebAdmins access by leveraging Edit M…	NVD-CWE-noinfo	CVE-2012-1031	2024-11-21 10:36	2012-02-8	Show	GitHub Exploit DB Packet Storm

292970	-	officesip	officesip_server	OfficeSIP Server 3.1 allows remote attackers to cause a denial of service (daemon crash) via a crafted To header in a SIP INVITE message.	CWE-20 Improper Input Validation	CVE-2012-1008	2024-11-21 10:36	2012-02-8	Show	GitHub Exploit DB Packet Storm