Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 5, 2026, noon

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
217961	3.5	注意	CloudBees	-	CloudBees Jenkins の java/hudson/model/Cause.java におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2014-2067	2014-03-4 15:37	2014-02-14	Show	GitHub Exploit DB Packet Storm

217962	4	警告	CloudBees	-	CloudBees Jenkins の CLI ジョブ作成におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2014-2059	2014-03-4 15:37	2014-02-14	Show	GitHub Exploit DB Packet Storm

217963	4.3	警告	BuddyPress.org	-	WordPress 用 BuddyPress プラグインにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2014-1888	2014-03-4 15:13	2014-02-5	Show	GitHub Exploit DB Packet Storm

217964	4.3	警告	OTRS プロジェクト	-	Open Ticket Request System におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2014-1695	2014-03-4 15:08	2014-02-25	Show	GitHub Exploit DB Packet Storm

217965	4.3	警告	Open Web Analytics	-	Open Web Analytics のログインページにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2014-1456	2014-03-4 15:04	2014-02-1	Show	GitHub Exploit DB Packet Storm

217966	7.5	危険	SimpleHRM	-	SimpleHRM の flexycms/modules/user/user_manager.php のログインページにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2013-2498	2014-03-4 14:58	2013-04-12	Show	GitHub Exploit DB Packet Storm

217967	4.3	警告	CMS Made Simple	-	CMS Made Simple の lib/filemanager/ImageManager/editorFrame.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2014-2092	2014-03-4 14:46	2014-02-20	Show	GitHub Exploit DB Packet Storm

217968	3.5	注意	CMS Made Simple	-	CMS Made Simple にクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2014-0334	2014-03-4 14:43	2014-02-28	Show	GitHub Exploit DB Packet Storm

217969	3.5	注意	ATutor	-	ATutor の mods/_standard/forums/admin/forum_add.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2014-2091	2014-03-4 14:02	2014-02-19	Show	GitHub Exploit DB Packet Storm

217970	3.5	注意	ILIAS	-	ILIAS の ilias.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2014-2090	2014-03-4 13:58	2014-02-21	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 5, 2026, 4:51 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
294451	-	wireshark redhat	wireshark enterprise_linux	The dissect_packet function in epan/packet.c in Wireshark 1.4.x before 1.4.11 and 1.6.x before 1.6.5 allows remote attackers to cause a denial of service (application crash) via a long packet in a ca…	CWE-20 Improper Input Validation	CVE-2012-0041	2024-11-21 10:34	2012-04-11	Show	GitHub Exploit DB Packet Storm

294452	-	microsoft	office works_6-9_file_converter works	Heap-based buffer overflow in the Office Works File Converter in Microsoft Office 2007 SP2, Works 9, and Works 6-9 File Converter allows remote attackers to execute arbitrary code via a crafted Works…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2012-0177	2024-11-21 10:34	2012-04-11	Show	GitHub Exploit DB Packet Storm

294453	-	microsoft	internet_explorer	Microsoft Internet Explorer 6 through 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing a deleted object, aka "VML Style Remote Code E…	CWE-94 Code Injection	CVE-2012-0172	2024-11-21 10:34	2012-04-11	Show	GitHub Exploit DB Packet Storm

294454	-	microsoft	internet_explorer	Microsoft Internet Explorer 6 through 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing a deleted object, aka "SelectAll Remote Code E…	CWE-94 Code Injection	CVE-2012-0171	2024-11-21 10:34	2012-04-11	Show	GitHub Exploit DB Packet Storm

294455	-	microsoft	internet_explorer	Microsoft Internet Explorer 6 and 7 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing a deleted object, aka "OnReadyStateChange Remote C…	CWE-94 Code Injection	CVE-2012-0170	2024-11-21 10:34	2012-04-11	Show	GitHub Exploit DB Packet Storm

294456	-	microsoft	internet_explorer	Microsoft Internet Explorer 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing a deleted object, aka "JScript9 Remote Code Execution Vu…	CWE-94 Code Injection	CVE-2012-0169	2024-11-21 10:34	2012-04-11	Show	GitHub Exploit DB Packet Storm

294457	-	microsoft	internet_explorer	Microsoft Internet Explorer 6 through 9 allows user-assisted remote attackers to execute arbitrary code via a crafted HTML document that is not properly handled during a "Print table of links" print …	CWE-94 Code Injection	CVE-2012-0168	2024-11-21 10:34	2012-04-11	Show	GitHub Exploit DB Packet Storm

294458	-	microsoft	.net_framework	Microsoft .NET Framework 1.0 SP3, 1.1 SP1, 2.0 SP2, 3.5, 3.5.1, 4, and 4.5 does not properly validate function parameters, which allows remote attackers to execute arbitrary code via (1) a crafted XA…	CWE-20 Improper Input Validation	CVE-2012-0163	2024-11-21 10:34	2012-04-11	Show	GitHub Exploit DB Packet Storm

294459	-	microsoft	forefront_unified_access_gateway	Microsoft Forefront Unified Access Gateway (UAG) 2010 SP1 and SP1 Update 1 does not properly configure the default web site, which allows remote attackers to obtain sensitive information via a crafte…	CWE-16 Configuration	CVE-2012-0147	2024-11-21 10:34	2012-04-11	Show	GitHub Exploit DB Packet Storm

294460	-	microsoft	forefront_unified_access_gateway	Open redirect vulnerability in Microsoft Forefront Unified Access Gateway (UAG) 2010 SP1 and SP1 Update 1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks…	CWE-20 Improper Input Validation	CVE-2012-0146	2024-11-21 10:34	2012-04-11	Show	GitHub Exploit DB Packet Storm