Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 7, 2026, 10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
218111 10 危険 アップル - Apple OS X の IOAcceleratorFamily の IOKit における特権付きコンテキスト内で任意のコードを実行される脆弱性 CWE-Other
その他
CVE-2014-4376 2014-09-22 16:40 2014-09-17 Show GitHub Exploit DB Packet Storm
218112 9.3 危険 アップル - Apple OS X の Bluetooth における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認
CVE-2014-4390 2014-09-22 16:40 2014-09-17 Show GitHub Exploit DB Packet Storm
218113 6.8 警告 アップル - Apple OS X の QT Media Foundation におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2014-4350 2014-09-22 16:40 2014-09-17 Show GitHub Exploit DB Packet Storm
218114 6.8 警告 アップル - Apple OS X の QT Media Foundation における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2014-1391 2014-09-22 16:40 2014-09-17 Show GitHub Exploit DB Packet Storm
218115 9.3 危険 アップル - Apple OS X の不特定の IOAcceleratorFamily における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2014-4402 2014-09-22 16:40 2014-09-17 Show GitHub Exploit DB Packet Storm
218116 6.9 警告 アップル - Apple OS X の Intel Graphics Driver のサブシステムにおける任意のコードを実行される脆弱性 CWE-20
不適切な入力確認
CVE-2014-4398 2014-09-22 16:40 2014-09-17 Show GitHub Exploit DB Packet Storm
218117 6.9 警告 アップル - Apple OS X の Intel Graphics Driver のサブシステムにおける任意のコードを実行される脆弱性 CWE-20
不適切な入力確認
CVE-2014-4394 2014-09-22 16:40 2014-09-17 Show GitHub Exploit DB Packet Storm
218118 4.3 警告 アップル - Apple iOS の Accounts サブシステムにおけるサンドボックス保護メカニズムを回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-4423 2014-09-22 14:51 2014-09-17 Show GitHub Exploit DB Packet Storm
218119 4.3 警告 アップル - Apple iOS および Apple TV の Assets サブシステムにおけるデバイスのアップデート状態に偽装される脆弱性 CWE-20
不適切な入力確認
CVE-2014-4383 2014-09-22 14:51 2014-09-17 Show GitHub Exploit DB Packet Storm
218120 9.3 危険 アップル - 複数の Apple 製品のライブラリにおける root 権限で任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2014-4381 2014-09-22 14:51 2014-09-17 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 7, 2026, 4:13 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
297611 - roundup-tracker roundup Cross-site scripting (XSS) vulnerability in cgi/client.py in Roundup before 1.4.20 allows remote attackers to inject arbitrary web script or HTML via the @action parameter to support/issue1. CWE-79
Cross-site Scripting
CVE-2012-6131 2024-11-21 10:45 2014-04-12 Show GitHub Exploit DB Packet Storm
297612 - roundup-tracker roundup Cross-site scripting (XSS) vulnerability in the history display in Roundup before 1.4.20 allows remote attackers to inject arbitrary web script or HTML via a username, related to generating a link. CWE-79
Cross-site Scripting
CVE-2012-6130 2024-11-21 10:45 2014-04-12 Show GitHub Exploit DB Packet Storm
297613 - roundup-tracker roundup Cross-site scripting (XSS) vulnerability in Roundup before 1.4.20 allows remote attackers to inject arbitrary web script or HTML via the otk parameter. CWE-79
Cross-site Scripting
CVE-2012-6132 2024-11-21 10:45 2014-04-11 Show GitHub Exploit DB Packet Storm
297614 - theforeman foreman Multiple SQL injection vulnerabilities in Foreman before 1.0.2 allow remote attackers to execute arbitrary SQL commands via unspecified parameters to (1) app/models/hostext/search.rb or (2) app/model… CWE-89
SQL Injection
CVE-2012-5648 2024-11-21 10:45 2014-04-4 Show GitHub Exploit DB Packet Storm
297615 - apache couchdb Cross-site scripting (XSS) vulnerability in the Futon UI in Apache CouchDB before 1.0.4, 1.1.x before 1.1.2, and 1.2.x before 1.2.1 allows remote attackers to inject arbitrary web script or HTML via … CWE-79
Cross-site Scripting
CVE-2012-5650 2024-11-21 10:45 2014-03-19 Show GitHub Exploit DB Packet Storm
297616 - apache
mochiweb_project
couchdb
mochiweb
Directory traversal vulnerability in the partition2 function in mochiweb_util.erl in MochiWeb before 2.4.0, as used in Apache CouchDB before 1.0.4, 1.1.x before 1.1.2, and 1.2.x before 1.2.1, allows … CWE-22
Path Traversal
CVE-2012-5641 2024-11-21 10:45 2014-03-19 Show GitHub Exploit DB Packet Storm
297617 - imagecms imagecms SQL injection vulnerability in ImageCMS before 4.2 allows remote authenticated administrators to execute arbitrary SQL commands via the q parameter to admin/admin_search/. NOTE: this can be leverage… CWE-89
SQL Injection
CVE-2012-6290 2024-11-21 10:45 2014-03-12 Show GitHub Exploit DB Packet Storm
297618 - hp linux_imaging_and_printing_project HP Linux Imaging and Printing (HPLIP) before 3.13.2 uses world-writable permissions for /var/log/hp and /var/log/hp/tmp, which allows local users to delete log files via standard filesystem operation… CWE-264
Permissions, Privileges, and Access Controls
CVE-2012-6108 2024-11-21 10:45 2014-02-15 Show GitHub Exploit DB Packet Storm
297619 - redhat satellite
satellite_5_managed_db
spacewalk-java
Multiple cross-site scripting (XSS) vulnerabilities in systems/sdc/notes.jsp in Spacewalk and Red Hat Network (RHN) Satellite 5.6 allow remote attackers to inject arbitrary web script or HTML via the… CWE-79
Cross-site Scripting
CVE-2012-6149 2024-11-21 10:45 2014-02-15 Show GitHub Exploit DB Packet Storm
297620 - pidgin pidgin The Yahoo! protocol plugin in libpurple in Pidgin before 2.10.8 does not properly validate UTF-8 data, which allows remote attackers to cause a denial of service (application crash) via crafted byte … CWE-20
 Improper Input Validation 
CVE-2012-6152 2024-11-21 10:45 2014-02-7 Show GitHub Exploit DB Packet Storm