Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 6, 2026, 2 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
217981 5 警告 Nagios Enterprises, LLC
The Icinga Project
- Nagios Core および Icinga の cgi/cmd.c におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2014-1878 2014-03-3 17:53 2014-02-11 Show GitHub Exploit DB Packet Storm
217982 4.3 警告 synetics - synetics i-doit pro の API におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-2231 2014-03-3 16:50 2014-02-14 Show GitHub Exploit DB Packet Storm
217983 7.5 危険 AdRotate Plugin - WordPress 用 AdRotate プラグインにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2014-1854 2014-03-3 16:34 2014-01-31 Show GitHub Exploit DB Packet Storm
217984 4.3 警告 InterWorx - InterWorx Web Control Panel の xhr.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-2035 2014-03-3 16:32 2014-02-19 Show GitHub Exploit DB Packet Storm
217985 6.8 警告 シスコシステムズ - Cisco Intrusion Prevention System ソフトウェアにおけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2014-2103 2014-03-3 16:23 2014-02-27 Show GitHub Exploit DB Packet Storm
217986 9 危険 シスコシステムズ - Cisco Prime Infrastructure における root 権限で任意のコマンドを実行される脆弱性 CWE-20
不適切な入力確認
CVE-2014-0679 2014-03-3 16:22 2014-02-26 Show GitHub Exploit DB Packet Storm
217987 7.5 危険 synetics - synetics i-doit の CMDB Web アプリケーションにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2014-1597 2014-03-3 16:21 2014-02-14 Show GitHub Exploit DB Packet Storm
217988 3.5 注意 IBM - IBM Content Navigator におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-0858 2014-03-3 16:20 2014-02-25 Show GitHub Exploit DB Packet Storm
217989 4.3 警告 Telligent - Telligent Evolution の controlpanel/loading.aspx におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-1223 2014-03-3 15:05 2014-01-16 Show GitHub Exploit DB Packet Storm
217990 2.6 注意 Tilde Inc. - Ember.js の link-to ヘルパーにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-0046 2014-03-3 14:58 2014-02-7 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 6, 2026, 4:08 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
292271 - wp_simplemail_project wp_simplemail Multiple cross-site scripting (XSS) vulnerabilities in the WP SimpleMail plugin 1.0.6 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) To, (2) From, (3) Date, o… CWE-79
Cross-site Scripting
CVE-2012-2579 2024-11-21 10:39 2014-06-20 Show GitHub Exploit DB Packet Storm
292272 - mindreantre threewp_email_reflector Cross-site scripting (XSS) vulnerability in the ThreeWP Email Reflector plugin before 1.16 for WordPress allows remote attackers to inject arbitrary web script or HTML via the Subject of an email. CWE-79
Cross-site Scripting
CVE-2012-2572 2024-11-21 10:39 2014-06-19 Show GitHub Exploit DB Packet Storm
292273 - synametrics xeams Cross-site scripting (XSS) vulnerability in Synametrics Technologies Xeams 4.4 Build 5720 allows remote attackers to inject arbitrary web script or HTML via the body of an email. CWE-79
Cross-site Scripting
CVE-2012-2569 2024-11-21 10:39 2014-06-19 Show GitHub Exploit DB Packet Storm
292274 - axigen axigen_mail_server Cross-site scripting (XSS) vulnerability in Axigen Mail Server 8.0.1 allows remote attackers to inject arbitrary web script or HTML via the body of an email. CWE-79
Cross-site Scripting
CVE-2012-2592 2024-11-21 10:39 2014-06-19 Show GitHub Exploit DB Packet Storm
292275 - netfilter iptables extensions/libxt_tcp.c in iptables through 1.4.21 does not match TCP SYN+FIN packets in --syn rules, which might allow remote attackers to bypass intended firewall restrictions via crafted packets. … NVD-CWE-noinfo
CVE-2012-2663 2024-11-21 10:39 2014-02-15 Show GitHub Exploit DB Packet Storm
292276 - google chrome Google Chrome before 21.0.1180.82 on iOS makes certain incorrect calls to WebView methods that trigger use of an applewebdata: URL, which allows remote attackers to bypass the Same Origin Policy and … CWE-79
Cross-site Scripting
CVE-2012-2899 2024-11-21 10:39 2014-01-6 Show GitHub Exploit DB Packet Storm
292277 - google chrome Google Chrome before 21.0.1180.82 on iOS on iPad devices allows remote attackers to spoof the Omnibox URL via vectors involving SSL error messages, a related issue to CVE-2012-0674. CWE-310
Cryptographic Issues
CVE-2012-2898 2024-11-21 10:39 2014-01-6 Show GitHub Exploit DB Packet Storm
292278 - cgi hotscan Stack-based buffer overflow in Logica HotScan allows remote attackers to cause a denial of service (crash) via a crafted packet. CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2012-2624 2024-11-21 10:39 2013-09-24 Show GitHub Exploit DB Packet Storm
292279 - redhat enterprise_linux Unspecified vulnerability in autofs, as used in Red Hat Enterprise Linux (RHEL) 5, allows local users to cause a denial of service (autofs crash and delayed mounts) or prevent "mount expiration" via … CWE-20
 Improper Input Validation 
CVE-2012-2697 2024-11-21 10:39 2013-02-25 Show GitHub Exploit DB Packet Storm
292280 - openssl openssl crypto/evp/e_aes_cbc_hmac_sha1.c in the AES-NI functionality in the TLS 1.1 and 1.2 implementations in OpenSSL 1.0.1 before 1.0.1d allows remote attackers to cause a denial of service (application cr… CWE-310
Cryptographic Issues
CVE-2012-2686 2024-11-21 10:39 2013-02-9 Show GitHub Exploit DB Packet Storm