Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 8, 2026, 2:21 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
217971	7.5	危険	アップル富士通 Ruby on Rails project	-	Ruby on Rails に複数の脆弱性	CWE-20 不適切な入力確認	CVE-2013-0156	2014-03-28 15:31	2013-01-9	Show	GitHub Exploit DB Packet Storm

217972	4.3	警告	The Foreman	-	Foreman の app/views/common/500.html.erb におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2014-0089	2014-03-28 14:54	2014-03-24	Show	GitHub Exploit DB Packet Storm

217973	4.3	警告	RSAセキュリティ	-	EMC RSA Authentication Manager のセルフサービス・コンソールにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2014-0623	2014-03-28 14:25	2014-03-26	Show	GitHub Exploit DB Packet Storm

217974	9.3	危険	Boris Eyrich Software	-	Artweaver Plus および Free におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2013-3481	2014-03-28 13:48	2013-05-30	Show	GitHub Exploit DB Packet Storm

217975	9.3	危険	Nuance Communications	-	Nuance PDF Reader の PDFCore8.dll におけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2013-0732	2014-03-28 13:47	2013-06-4	Show	GitHub Exploit DB Packet Storm

217976	10	危険	アドビシステムズ	-	Adobe Reader における PDF サンドボックス保護メカニズムを回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2014-0512	2014-03-28 13:35	2014-03-13	Show	GitHub Exploit DB Packet Storm

217977	10	危険	アドビシステムズ	-	Adobe Reader におけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2014-0511	2014-03-28 13:34	2014-03-13	Show	GitHub Exploit DB Packet Storm

217978	6.8	警告	Symphony CMS	-	Symphony CMS におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2013-7346	2014-03-28 12:12	2013-03-13	Show	GitHub Exploit DB Packet Storm

217979	6.5	警告	Symphony CMS	-	Symphony CMS における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2013-2559	2014-03-28 12:12	2013-03-20	Show	GitHub Exploit DB Packet Storm

217980	7.8	危険	シーメンス	-	Siemens SIMATIC S7-1200 マイクロ PLC におけるサービス運用妨害 (DoS) の脆弱性	CWE-119 バッファエラー	CVE-2013-2780	2014-03-28 12:03	2012-12-20	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 8, 2026, 4:54 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
294121	-	quantum dell ibm	scalar_i500_firmware scalar_i500 powervault_ml6000_firmware powervault_ml6000 powervault_ml6010 powervault_ml6020 powervault_ml6030 ts3310_tape_library_firmware ts3310_tape_li…	The Quantum Scalar i500 tape library with firmware before i7.0.3 (604G.GS00100), also distributed as the Dell ML6000 tape library with firmware before A20-00 (590G.GS00100) and the IBM TS3310 tape li…	CWE-255 Credentials Management	CVE-2012-1844	2024-11-21 10:37	2012-03-22	Show	GitHub Exploit DB Packet Storm

294122	-	quantum dell	scalar_i500_firmware scalar_i500 powervault_ml6000_firmware powervault_ml6000 powervault_ml6010 powervault_ml6020 powervault_ml6030	Cross-site request forgery (CSRF) vulnerability in saveRestore.htm on the Quantum Scalar i500 tape library with firmware before i7.0.3 (604G.GS00100), also distributed as the Dell ML6000 tape library…	CWE-352 Origin Validation Error	CVE-2012-1843	2024-11-21 10:37	2012-03-22	Show	GitHub Exploit DB Packet Storm

294123	-	quantum dell	scalar_i500_firmware scalar_i500 powervault_ml6000_firmware powervault_ml6000 powervault_ml6010 powervault_ml6020 powervault_ml6030	Cross-site scripting (XSS) vulnerability in checkQKMProg.htm on the Quantum Scalar i500 tape library with firmware before i7.0.3 (604G.GS00100), also distributed as the Dell ML6000 tape library with …	CWE-79 Cross-site Scripting	CVE-2012-1842	2024-11-21 10:37	2012-03-22	Show	GitHub Exploit DB Packet Storm

294124	-	quantum dell	scalar_i500_firmware scalar_i500 powervault_ml6000_firmware powervault_ml6000 powervault_ml6010 powervault_ml6020 powervault_ml6030	Absolute path traversal vulnerability in logShow.htm on the Quantum Scalar i500 tape library with firmware before i7.0.3 (604G.GS00100), also distributed as the Dell ML6000 tape library with firmware…	CWE-22 Path Traversal	CVE-2012-1841	2024-11-21 10:37	2012-03-22	Show	GitHub Exploit DB Packet Storm

294125	-	ajaxplorer	ajaxplorer	AjaXplorer 3.2.x before 3.2.5 and 4.0.x before 4.0.4 does not properly perform cookie authentication, which allows remote attackers to obtain login access by leveraging knowledge of a password hash.	CWE-287 Improper Authentication	CVE-2012-1840	2024-11-21 10:37	2012-03-22	Show	GitHub Exploit DB Packet Storm

294126	-	ajaxplorer	ajaxplorer	Multiple directory traversal vulnerabilities in the Get Template feature in plugins/gui.ajax/class.AJXP_ClientDriver.php in AjaXplorer 3.2.x before 3.2.5 and 4.0.x before 4.0.4 allow remote attackers…	CWE-22 Path Traversal	CVE-2012-1839	2024-11-21 10:37	2012-03-22	Show	GitHub Exploit DB Packet Storm

294127	-	lg-nortel	elo_gs24m_switch	The web management interface on the LG-Nortel ELO GS24M switch allows remote attackers to bypass authentication, and consequently obtain cleartext credential and configuration information, via a dire…	CWE-287 Improper Authentication	CVE-2012-1838	2024-11-21 10:37	2012-03-22	Show	GitHub Exploit DB Packet Storm

294128	-	ibm	tivoli_endpoint_manager	The (1) webreports, (2) post/create-role, and (3) post/update-role programs in IBM Tivoli Endpoint Manager (TEM) before 8.2 do not include the HTTPOnly flag in a Set-Cookie header for a cookie, which…	CWE-200 Information Exposure	CVE-2012-1837	2024-11-21 10:37	2012-03-22	Show	GitHub Exploit DB Packet Storm

294129	-	inspircd	inspircd	Heap-based buffer overflow in dns.cpp in InspIRCd 2.0.5 might allow remote attackers to execute arbitrary code via a crafted DNS query that uses compression.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2012-1836	2024-11-21 10:37	2012-03-22	Show	GitHub Exploit DB Packet Storm

294130	-	broadcom	arcserve_backup	CA ARCserve Backup r12.0 through SP2, r12.5 before SP2, r15 through SP1, and r16 before SP1 on Windows allows remote attackers to cause a denial of service (service shutdown) via a crafted network re…	CWE-20 Improper Input Validation	CVE-2012-1662	2024-11-21 10:37	2012-03-22	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed