Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 1, 2026, 2 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
218001 5 警告 シスコシステムズ - Cisco Unified Communications Manager の Certificate Authority Proxy Function コンポーネントにおける認証を回避される脆弱性 CWE-287
不適切な認証
CVE-2014-0743 2014-02-28 18:41 2014-02-25 Show GitHub Exploit DB Packet Storm
218002 6.2 警告 シスコシステムズ - Cisco Unified Communications Manager の CSR 管理機能の Certificate Authority Proxy Function における任意のファイルを読まれる脆弱性 CWE-20
不適切な入力確認
CVE-2014-0742 2014-02-28 18:41 2014-02-25 Show GitHub Exploit DB Packet Storm
218003 6.2 警告 シスコシステムズ - Cisco Unified Communications Manager の Certificate Authority Proxy Function における任意のファイルを読まれる脆弱性 CWE-310
暗号の問題
CVE-2014-0741 2014-02-28 18:40 2014-02-26 Show GitHub Exploit DB Packet Storm
218004 7.2 危険 アップル
NVIDIA
富士通
- NVIDIA グラフィックスドライバにおける GPU へのアクセス制限を回避される脆弱性 CWE-noinfo
情報不足
CVE-2013-5987 2014-02-28 18:28 2013-10-28 Show GitHub Exploit DB Packet Storm
218005 10 危険 アップル
NVIDIA
- NVIDIA グラフィックスドライバにおける脆弱性 CWE-noinfo
情報不足
CVE-2013-5986 2014-02-28 18:28 2013-10-28 Show GitHub Exploit DB Packet Storm
218006 5 警告 アップル - Apple Mac OS X の LaunchServices におけるファイルの拡張子を偽装される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2013-5178 2014-02-28 17:56 2013-10-22 Show GitHub Exploit DB Packet Storm
218007 9.3 危険 アップル - Apple iOS の IOSerialFamily ドライバにおける任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2013-5139 2014-02-28 17:55 2013-09-18 Show GitHub Exploit DB Packet Storm
218008 4.3 警告 アップル - Apple Mac OS X の QuickTime における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2013-1032 2014-02-28 17:55 2013-09-12 Show GitHub Exploit DB Packet Storm
218009 4.6 警告 アップル - Apple Mac OS X の日付と時刻のサブシステムのシステム設定プログラムにおけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-1265 2014-02-28 15:59 2014-02-25 Show GitHub Exploit DB Packet Storm
218010 7.5 危険 アップル - Apple Mac OS X の Apple Type Services における App Sandbox の保護メカニズムを回避される脆弱性 CWE-119
バッファエラー
CVE-2014-1262 2014-02-28 15:58 2014-02-25 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 1, 2026, 4:54 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
293141 - tubeace tube_ace SQL injection vulnerability in mobile/search/index.php in Tube Ace (Adult PHP Tube Script) 1.6 allows remote attackers to execute arbitrary SQL commands via the q parameter. NOTE: some of these deta… CWE-89
SQL Injection
CVE-2012-1029 2024-11-21 10:36 2012-02-8 Show GitHub Exploit DB Packet Storm
293142 - simple-groupware simplegroupware Cross-site scripting (XSS) vulnerability in bin/index.php in SimpleGroupware 0.742 and other versions before 0.743 allows remote attackers to inject arbitrary web script or HTML via the export parame… CWE-79
Cross-site Scripting
CVE-2012-1028 2024-11-21 10:36 2012-02-8 Show GitHub Exploit DB Packet Storm
293143 - project-open \]project-open\[ Cross-site scripting (XSS) vulnerability in account-closed.tcl in ]project-open[ (aka ]po[) 3.4.x, 3.5.0.1-2, and possibly other versions allows remote attackers to inject arbitrary web script or HTM… CWE-79
Cross-site Scripting
CVE-2012-1027 2024-11-21 10:36 2012-02-8 Show GitHub Exploit DB Packet Storm
293144 - johannes_ekberg xray_cms Multiple SQL injection vulnerabilities in login2.php in XRay CMS 1.1.1 allow remote attackers to execute arbitrary SQL commands via the (1) username or (2) password parameters. CWE-89
SQL Injection
CVE-2012-1026 2024-11-21 10:36 2012-02-8 Show GitHub Exploit DB Packet Storm
293145 - dream-multimedia-tv enigma2_webinterface Absolute path traversal vulnerability in file in Enigma2 Webinterface 1.6.0 through 1.6.8, 1.6rc3, and 1.7.0 allows remote attackers to read arbitrary files via a full pathname in the file parameter. CWE-22
Path Traversal
CVE-2012-1025 2024-11-21 10:36 2012-02-8 Show GitHub Exploit DB Packet Storm
293146 - dream-multimedia-tv enigma2_webinterface Directory traversal vulnerability in file in Enigma2 Webinterface 1.5rc1 and 1.5beta4 allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter. CWE-22
Path Traversal
CVE-2012-1024 2024-11-21 10:36 2012-02-8 Show GitHub Exploit DB Packet Storm
293147 - 4homepages 4images Open redirect vulnerability in admin/index.php in 4images 1.7.10 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the redirect parameter. CWE-20
 Improper Input Validation 
CVE-2012-1023 2024-11-21 10:36 2012-02-8 Show GitHub Exploit DB Packet Storm
293148 - 4homepages 4images SQL injection vulnerability in admin/categories.php in 4images 1.7.10 remote attackers to execute arbitrary SQL commands via the cat_parent_id parameter in an addcat action. CWE-89
SQL Injection
CVE-2012-1022 2024-11-21 10:36 2012-02-8 Show GitHub Exploit DB Packet Storm
293149 - 4homepages 4images Cross-site scripting (XSS) vulnerability in admin/categories.php in 4images 1.7.10 allows remote attackers to inject arbitrary web script or HTML via the cat_parent_id parameter in an addcat action. CWE-79
Cross-site Scripting
CVE-2012-1021 2024-11-21 10:36 2012-02-8 Show GitHub Exploit DB Packet Storm
293150 - overseaswtc nexorone_online_banking_system Multiple cross-site scripting (XSS) vulnerabilities in login.php in NexorONE Online Banking allow remote attackers to inject arbitrary web script or HTML via the (1) visitor_language parameter to reg… CWE-79
Cross-site Scripting
CVE-2012-1020 2024-11-21 10:36 2012-02-8 Show GitHub Exploit DB Packet Storm