Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 18, 2026, 10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
217851 5.8 警告 シスコシステムズ - Cisco Unified Communications Domain Manager の VOSS の Web フレームワークにおけるオープンリダイレクトの脆弱性 CWE-Other
その他
CVE-2014-3283 2014-06-2 14:25 2014-05-28 Show GitHub Exploit DB Packet Storm
217852 4 警告 シスコシステムズ - Cisco Unified Communications Domain Manager の VOSS の Web フレームワークにおける重要な番号変換情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-3282 2014-06-2 14:24 2014-05-28 Show GitHub Exploit DB Packet Storm
217853 5 警告 シスコシステムズ - Cisco Unified Communications Domain Manager の VOSS の Web フレームワークにおけるアカウント名を列挙される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-3279 2014-06-2 14:22 2014-05-28 Show GitHub Exploit DB Packet Storm
217854 4 警告 シスコシステムズ - Cisco Unified Communications Domain Manager の VOSS における重要なユーザおよびグループ情報を取得される脆弱性 CWE-287
不適切な認証
CVE-2014-3277 2014-06-2 14:21 2014-05-28 Show GitHub Exploit DB Packet Storm
217855 4.3 警告 Apache Software Foundation - Apache HBase における双方向認証を無効にされる脆弱性 CWE-287
不適切な認証
CVE-2013-2193 2014-06-2 14:14 2013-07-4 Show GitHub Exploit DB Packet Storm
217856 5 警告 レッドハット - FreeIPA のデフォルトの LDAP ACI におけるクロスレルムの Kerberos Trust 鍵を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2013-0199 2014-06-2 14:05 2013-01-23 Show GitHub Exploit DB Packet Storm
217857 6.5 警告 Sharetronix - Sharetronix における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2014-3415 2014-06-2 11:48 2014-05-28 Show GitHub Exploit DB Packet Storm
217858 6.8 警告 Sharetronix - Sharetronix におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2014-3414 2014-06-2 11:47 2014-05-28 Show GitHub Exploit DB Packet Storm
217859 4.3 警告 SOSreport project - SOSreport における重要な情報を取得される脆弱性 CWE-255
証明書・パスワード管理
CVE-2014-0246 2014-06-2 11:33 2014-05-27 Show GitHub Exploit DB Packet Storm
217860 6.8 警告 IBM - IBM Notes で使用される Autonomy KeyView IDOL の .mdb パーサにおけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2012-6349 2014-05-30 18:19 2013-03-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 18, 2026, 4:12 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
296771 9.8 CRITICAL
Network
phxeventmanager_project phxeventmanager SQL injection vulnerability in search.php in phxEventManager 2.0 beta 5 allows remote attackers to execute arbitrary SQL commands via the search_terms parameter. CWE-89
SQL Injection
CVE-2012-1124 2024-11-21 10:36 2020-02-12 Show GitHub Exploit DB Packet Storm
296772 7.4 HIGH
Network
cisco ironport_web_security_appliance Cisco IronPort Web Security Appliance up to and including 7.5 does not validate the basic constraints of the certificate authority which could lead to MITM attacks CWE-20
 Improper Input Validation 
CVE-2012-1326 2024-11-21 10:36 2020-01-15 Show GitHub Exploit DB Packet Storm
296773 5.9 MEDIUM
Network
cisco ironport_web_security_appliance Cisco IronPort Web Security Appliance does not check for certificate revocation which could lead to MITM attacks CWE-295
Improper Certificate Validation 
CVE-2012-1316 2024-11-21 10:36 2020-01-15 Show GitHub Exploit DB Packet Storm
296774 4.9 MEDIUM
Network
whoopsie-daisy_project whoopsie-daisy whoopsie-daisy before 0.1.26: Root user can remove arbitrary files CWE-428
 Unquoted Search Path or Element
CVE-2012-0945 2024-11-21 10:36 2020-01-15 Show GitHub Exploit DB Packet Storm
296775 6.1 MEDIUM
Network
plixer scrutinizer_netflow_\&_sflow_analyzer Cross-site scripting (XSS) vulnerability in cgi-bin/scrut_fa_exclusions.cgi in Plixer International Scrutinizer NetFlow and sFlow Analyzer 8.6.2.16204 and other versions before 9.0.1.19899 allows rem… CWE-79
Cross-site Scripting
CVE-2012-1261 2024-11-21 10:36 2020-01-10 Show GitHub Exploit DB Packet Storm
296776 6.1 MEDIUM
Network
plixer scrutinizer_netflow_\&_sflow_analyzer Cross-site scripting (XSS) vulnerability in cgi-bin/userprefs.cgi in Plixer International Scrutinizer NetFlow & sFlow Analyzer 8.6.2.16204, and possibly other versions before 9.0.1.19899, allows remo… CWE-79
Cross-site Scripting
CVE-2012-1260 2024-11-21 10:36 2020-01-10 Show GitHub Exploit DB Packet Storm
296777 9.8 CRITICAL
Network
plixer scrutinizer_netflow_\&_sflow_analyzer Multiple SQL injection vulnerabilities in Plixer International Scrutinizer NetFlow & sFlow Analyzer 8.6.2.16204, and possibly other versions before 9.0.1.19899, allow remote attackers to execute arbi… CWE-89
SQL Injection
CVE-2012-1259 2024-11-21 10:36 2020-01-10 Show GitHub Exploit DB Packet Storm
296778 6.5 MEDIUM
Network
plixer scrutinizer_netflow_\&_sflow_analyzer cgi-bin/userprefs.cgi in Plixer International Scrutinizer NetFlow & sFlow Analyzer before 9.0.1.19899 does not validate user permissions, which allow remote attackers to add user accounts with admini… CWE-287
Improper Authentication
CVE-2012-1258 2024-11-21 10:36 2020-01-10 Show GitHub Exploit DB Packet Storm
296779 6.1 MEDIUM
Network
ldap-account-manager
fedoraproject
debian
ldap_account_manager
fedora
debian_linux
A Cross-Site Scripting (XSS) vulnerability exists in LDAP Account Manager (LAM) Pro 3.6 in the export, add_value_form, and dn parameters to cmd.php. CWE-79
Cross-site Scripting
CVE-2012-1115 2024-11-21 10:36 2019-12-6 Show GitHub Exploit DB Packet Storm
296780 6.1 MEDIUM
Network
ldap-account-manager
fedoraproject
debian
ldap_account_manager
fedora
debian_linux
A Cross-Site Scripting (XSS) vulnerability exists in LDAP Account Manager (LAM) Pro 3.6 in the filter parameter to cmd.php in an export and exporter_id action. and the filteruid parameter to list.php. CWE-79
Cross-site Scripting
CVE-2012-1114 2024-11-21 10:36 2019-12-6 Show GitHub Exploit DB Packet Storm