Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 19, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
217831	4.3	警告	BIC Media Widget plugin	-	WordPress 用 BIC Media Widget プラグインの bicm-carousel-preview.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2014-4516	2014-07-3 15:45	2014-05-28	Show	GitHub Exploit DB Packet Storm

217832	4.3	警告	Aanyfont plugin project	-	WordPress 用 AnyFont プラグインの mce_anyfont/dialog.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2014-4515	2014-07-3 15:45	2014-05-28	Show	GitHub Exploit DB Packet Storm

217833	4.3	警告	ActiveHelper	-	WordPress 用 ActiveHelper LiveHelp Live Chat プラグインの server/offline.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2014-4513	2014-07-3 15:44	2014-05-28	Show	GitHub Exploit DB Packet Storm

217834	3.5	注意	DELL EMC (旧 EMC Corporation)	-	EMC Documentum eRoom におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2014-2512	2014-07-3 09:51	2014-06-30	Show	GitHub Exploit DB Packet Storm

217835	5.4	警告	DELL EMC (旧 EMC Corporation)	-	EMC Network Configuration Manager の Report Advisor コンポーネントにおける Web セッションをハイジャックされる脆弱性	CWE-Other その他	CVE-2014-2509	2014-07-3 09:47	2014-06-30	Show	GitHub Exploit DB Packet Storm

217836	4	警告	株式会社アイ・オー・データ機器	-	RockDisk におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-4713	2014-07-2 14:08	2013-10-29	Show	GitHub Exploit DB Packet Storm

217837	9.3	危険	マイクロソフト	-	Microsoft Internet Explorer 6 から 11 における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2014-1815	2014-07-2 12:52	2014-05-13	Show	GitHub Exploit DB Packet Storm

217838	8.5	危険	マイクロソフト	-	Microsoft Web Applications 2010 における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2014-1813	2014-07-2 12:50	2014-05-13	Show	GitHub Exploit DB Packet Storm

217839	9.3	危険	マイクロソフト	-	Microsoft Office における権限昇格の脆弱性	CWE-Other その他	CVE-2014-1756	2014-07-2 12:49	2014-05-13	Show	GitHub Exploit DB Packet Storm

217840	6.8	警告	IBM	-	IBM WebSphere Portal における重要な情報を取得される脆弱性	CWE-20 不適切な入力確認	CVE-2014-0954	2014-07-2 11:10	2014-05-13	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 19, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
296851	5.0	MEDIUM Local	nvidia	display_driver	A race condition was discovered in the Linux drivers for Nvidia graphics which allowed an attacker to exfiltrate kernel memory to userspace. This issue was fixed in version 295.53.	CWE-362 Race Condition	CVE-2012-0953	2024-11-21 10:36	2020-05-8	Show	GitHub Exploit DB Packet Storm

296852	5.0	MEDIUM Local	nvidia	display_driver	A heap buffer overflow was discovered in the device control ioctl in the Linux driver for Nvidia graphics cards, which may allow an attacker to overflow 49 bytes. This issue was fixed in version 295.…	CWE-787 Out-of-bounds Write	CVE-2012-0952	2024-11-21 10:36	2020-05-8	Show	GitHub Exploit DB Packet Storm

296853	5.5	MEDIUM Local	systemd_project	systemd	systemd 37-1 does not properly handle non-existent services, which causes a denial of service (failure of login procedure).	NVD-CWE-Other	CVE-2012-1101	2024-11-21 10:36	2020-03-12	Show	GitHub Exploit DB Packet Storm

296854	5.5	MEDIUM Local	gnome debian	networkmanager debian_linux	NetworkManager 0.9 and earlier allows local users to use other users' certificates or private keys when making a connection via the file path when adding a new connection.	CWE-295 Improper Certificate Validation	CVE-2012-1096	2024-11-21 10:36	2020-03-11	Show	GitHub Exploit DB Packet Storm

296855	7.5	HIGH Network	redhat	jboss_application_server	JBoss AS 7 prior to 7.1.1 and mod_cluster do not handle default hostname in the same way, which can cause the excluded-contexts list to be mismatched and the root context to be exposed.	CWE-200 Information Exposure	CVE-2012-1094	2024-11-21 10:36	2020-03-11	Show	GitHub Exploit DB Packet Storm

296856	7.8	HIGH Local	debian	debian_linux x11-common	The init script in the Debian x11-common package before 1:7.6+12 is vulnerable to a symlink attack that can lead to a privilege escalation during package installation.	CWE-59 Link Following	CVE-2012-1093	2024-11-21 10:36	2020-02-22	Show	GitHub Exploit DB Packet Storm

296857	7.8	HIGH Local	nvidia	display_driver	A Memory Corruption Vulnerability exists in NVIDIA Graphics Drivers 29549 due to an unknown function in the file proc/driver/nvidia/registry.	CWE-787 Out-of-bounds Write	CVE-2012-0951	2024-11-21 10:36	2020-02-13	Show	GitHub Exploit DB Packet Storm

296858	9.8	CRITICAL Network	phxeventmanager_project	phxeventmanager	SQL injection vulnerability in search.php in phxEventManager 2.0 beta 5 allows remote attackers to execute arbitrary SQL commands via the search_terms parameter.	CWE-89 SQL Injection	CVE-2012-1124	2024-11-21 10:36	2020-02-12	Show	GitHub Exploit DB Packet Storm

296859	7.4	HIGH Network	cisco	ironport_web_security_appliance	Cisco IronPort Web Security Appliance up to and including 7.5 does not validate the basic constraints of the certificate authority which could lead to MITM attacks	CWE-20 Improper Input Validation	CVE-2012-1326	2024-11-21 10:36	2020-01-15	Show	GitHub Exploit DB Packet Storm

296860	5.9	MEDIUM Network	cisco	ironport_web_security_appliance	Cisco IronPort Web Security Appliance does not check for certificate revocation which could lead to MITM attacks	CWE-295 Improper Certificate Validation	CVE-2012-1316	2024-11-21 10:36	2020-01-15	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed