Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 19, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
217951 4.3 警告 Openfiler - Openfiler におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-4309 2014-06-20 16:52 2014-06-11 Show GitHub Exploit DB Packet Storm
217952 4.3 警告 NICE Systems - NICE Recording eXpress におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-4308 2014-06-20 16:38 2014-05-28 Show GitHub Exploit DB Packet Storm
217953 7.5 危険 NICE Systems - NICE Recording eXpress における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2014-4305 2014-06-20 16:38 2014-05-28 Show GitHub Exploit DB Packet Storm
217954 9 危険 ヒューレット・パッカード - HP Executive Scorecard の fndwar Web アプリケーションにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2014-2611 2014-06-20 15:58 2014-06-17 Show GitHub Exploit DB Packet Storm
217955 7.1 危険 ヒューレット・パッカード - HP Executive Scorecard の Content Acceleration Pack Web アプリケーションにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2014-2610 2014-06-20 15:57 2014-06-17 Show GitHub Exploit DB Packet Storm
217956 10 危険 ヒューレット・パッカード - HP Executive Scorecard の Java Glassfish 管理コンソールにおける任意のコードを実行される脆弱性 CWE-287
不適切な認証 		CVE-2014-2609 2014-06-20 15:57 2014-06-17 Show GitHub Exploit DB Packet Storm
217957 10 危険 ヒューレット・パッカード - HP Service Virtualization の CommunicationServlet におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2013-6221 2014-06-20 15:55 2013-12-9 Show GitHub Exploit DB Packet Storm
217958 3.5 注意 IBM - IBM Curam Social Program Management におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-3013 2014-06-20 14:05 2014-06-9 Show GitHub Exploit DB Packet Storm
217959 3.5 注意 IBM - IBM Curam Social Program Management における CRLF インジェクションの脆弱性 CWE-Other
その他 		CVE-2014-3012 2014-06-20 14:05 2014-06-9 Show GitHub Exploit DB Packet Storm
217960 3.5 注意 IBM - IBM WebSphere Portal におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-0910 2014-06-20 14:04 2014-06-6 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 19, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
296861 4.9 MEDIUM
Network 		whoopsie-daisy_project whoopsie-daisy whoopsie-daisy before 0.1.26: Root user can remove arbitrary files CWE-428
 Unquoted Search Path or Element 		CVE-2012-0945 2024-11-21 10:36 2020-01-15 Show GitHub Exploit DB Packet Storm
296862 6.1 MEDIUM
Network 		plixer scrutinizer_netflow_\&_sflow_analyzer Cross-site scripting (XSS) vulnerability in cgi-bin/scrut_fa_exclusions.cgi in Plixer International Scrutinizer NetFlow and sFlow Analyzer 8.6.2.16204 and other versions before 9.0.1.19899 allows rem… CWE-79
Cross-site Scripting 		CVE-2012-1261 2024-11-21 10:36 2020-01-10 Show GitHub Exploit DB Packet Storm
296863 6.1 MEDIUM
Network 		plixer scrutinizer_netflow_\&_sflow_analyzer Cross-site scripting (XSS) vulnerability in cgi-bin/userprefs.cgi in Plixer International Scrutinizer NetFlow & sFlow Analyzer 8.6.2.16204, and possibly other versions before 9.0.1.19899, allows remo… CWE-79
Cross-site Scripting 		CVE-2012-1260 2024-11-21 10:36 2020-01-10 Show GitHub Exploit DB Packet Storm
296864 9.8 CRITICAL
Network 		plixer scrutinizer_netflow_\&_sflow_analyzer Multiple SQL injection vulnerabilities in Plixer International Scrutinizer NetFlow & sFlow Analyzer 8.6.2.16204, and possibly other versions before 9.0.1.19899, allow remote attackers to execute arbi… CWE-89
SQL Injection 		CVE-2012-1259 2024-11-21 10:36 2020-01-10 Show GitHub Exploit DB Packet Storm
296865 6.5 MEDIUM
Network 		plixer scrutinizer_netflow_\&_sflow_analyzer cgi-bin/userprefs.cgi in Plixer International Scrutinizer NetFlow & sFlow Analyzer before 9.0.1.19899 does not validate user permissions, which allow remote attackers to add user accounts with admini… CWE-287
Improper Authentication 		CVE-2012-1258 2024-11-21 10:36 2020-01-10 Show GitHub Exploit DB Packet Storm
296866 6.1 MEDIUM
Network 		ldap-account-manager
fedoraproject
debian 		ldap_account_manager
fedora
debian_linux 		A Cross-Site Scripting (XSS) vulnerability exists in LDAP Account Manager (LAM) Pro 3.6 in the export, add_value_form, and dn parameters to cmd.php. CWE-79
Cross-site Scripting 		CVE-2012-1115 2024-11-21 10:36 2019-12-6 Show GitHub Exploit DB Packet Storm
296867 6.1 MEDIUM
Network 		ldap-account-manager
fedoraproject
debian 		ldap_account_manager
fedora
debian_linux 		A Cross-Site Scripting (XSS) vulnerability exists in LDAP Account Manager (LAM) Pro 3.6 in the filter parameter to cmd.php in an export and exporter_id action. and the filteruid parameter to list.php. CWE-79
Cross-site Scripting 		CVE-2012-1114 2024-11-21 10:36 2019-12-6 Show GitHub Exploit DB Packet Storm
296868 5.5 MEDIUM
Local 		apereo
fedoraproject
debian 		phpcas
fedora
debian_linux 		An Information Disclosure vulnerability exists in the Jasig Project php-pear-CAS 1.2.2 package in the /tmp directory. The Central Authentication Service client library archives the debug logging file… CWE-200
Information Exposure 		CVE-2012-1105 2024-11-21 10:36 2019-12-6 Show GitHub Exploit DB Packet Storm
296869 5.3 MEDIUM
Network 		apereo
debian 		phpcas
debian_linux 		A Security Bypass vulnerability exists in the phpCAS 1.2.2 library from the jasig project due to the way proxying of services are managed. CWE-269
 Improper Privilege Management 		CVE-2012-1104 2024-11-21 10:36 2019-12-6 Show GitHub Exploit DB Packet Storm
296870 6.1 MEDIUM
Network 		chyrp chyrp Multiple cross-site scripting (XSS) vulnerabilities in Chyrp before 2.1.2 and before 2.5 Beta 2 allow remote attackers to inject arbitrary web script or HTML via the (1) content parameter to includes… CWE-79
Cross-site Scripting 		CVE-2012-1001 2024-11-21 10:36 2019-11-22 Show GitHub Exploit DB Packet Storm