Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 2, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
218151 10 危険 マイクロソフト
アドビシステムズ
Google		 - Adobe Flash Player および Adobe AIR における ASLR 保護メカニズムを破られる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2014-0492 2014-02-21 13:40 2014-01-14 Show GitHub Exploit DB Packet Storm
218152 10 危険 マイクロソフト
アドビシステムズ
Google		 - Adobe Flash Player および Adobe AIR における不特定の保護メカニズムを回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2014-0491 2014-02-21 13:40 2014-01-14 Show GitHub Exploit DB Packet Storm
218153 3.5 注意 The phpMyAdmin Project - phpMyAdmin の import.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-1879 2014-02-21 12:26 2014-02-15 Show GitHub Exploit DB Packet Storm
218154 5.8 警告 feep.net - libtar の tar_extract_glob および tar_extract_all 関数におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2013-4420 2014-02-21 12:25 2013-12-10 Show GitHub Exploit DB Packet Storm
218155 5 警告 シスコシステムズ - Cisco Unified Communications Manager の Enterprise License Manager コンポーネントにおける ELM ファイルを読まれる脆弱性 CWE-287
不適切な認証 		CVE-2014-0733 2014-02-21 11:42 2014-02-19 Show GitHub Exploit DB Packet Storm
218156 6.8 警告 シスコシステムズ - Cisco Unified Communications Manager の Call Detail Records Analysis and Reporting ページにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2014-0736 2014-02-21 11:37 2014-02-19 Show GitHub Exploit DB Packet Storm
218157 4.3 警告 シスコシステムズ - Cisco Unified Communications Manager の IP Manager Assistant インターフェースにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-0735 2014-02-21 11:14 2014-02-19 Show GitHub Exploit DB Packet Storm
218158 7.5 危険 シスコシステムズ - Cisco Unified Communications Manager の Certificate Authority Proxy Function の実装における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2014-0734 2014-02-21 11:13 2014-02-19 Show GitHub Exploit DB Packet Storm
218159 5 警告 シスコシステムズ - Cisco Unified Communications Manager の Real Time Monitoring Tool Web アプリケーションにおけるアプリケーションファイルを読まれる脆弱性 CWE-287
不適切な認証 		CVE-2014-0732 2014-02-21 11:12 2014-02-19 Show GitHub Exploit DB Packet Storm
218160 2.1 注意 Linux - Linux Kernel の net/key/af_key.c におけるカーネルヒープメモリから重要な情報を取得される脆弱性 CWE-119
バッファエラー 		CVE-2013-2234 2014-02-20 18:22 2013-06-26 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 2, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
293101 4.3 MEDIUM
Network 		moodle
fedoraproject 		moodle
fedora 		Moodle before 2.2.2 has a default repository capabilities issue where all repositories are viewable by all users by default CWE-276
Incorrect Default Permissions  		CVE-2012-1157 2024-11-21 10:36 2019-11-15 Show GitHub Exploit DB Packet Storm
293102 8.2 HIGH
Network 		moodle
fedoraproject
redhat 		moodle
fedora
enterprise_linux 		Moodle before 2.2.2 has a password and web services issue where when the user profile is updated the user password is reset if not specified. CWE-20
 Improper Input Validation  		CVE-2012-1168 2024-11-21 10:36 2019-11-15 Show GitHub Exploit DB Packet Storm
293103 7.5 HIGH
Network 		moodle
fedoraproject
redhat 		moodle
fedora
enterprise_linux 		Moodle before 2.2.2 has users' private files included in course backups CWE-532
 Inclusion of Sensitive Information in Log Files 		CVE-2012-1156 2024-11-21 10:36 2019-11-15 Show GitHub Exploit DB Packet Storm
293104 7.5 HIGH
Network 		moodle
fedoraproject
redhat
debian 		moodle
fedora
enterprise_linux
debian_linux 		Moodle has a database activity export permission issue where the export function of the database activity module exports all entries even those from groups the user does not belong to CWE-200
Information Exposure 		CVE-2012-1155 2024-11-21 10:36 2019-11-15 Show GitHub Exploit DB Packet Storm
293105 7.5 HIGH
Network 		pediapress mwlib mwlib 0.13 through 0.13.4 has a denial of service vulnerability when parsing #iferror magic functions CWE-755
 Improper Handling of Exceptional Conditions 		CVE-2012-1109 2024-11-21 10:36 2019-11-13 Show GitHub Exploit DB Packet Storm
293106 9.8 CRITICAL
Network 		bitlbee bitlbee Bitlbee does not drop extra group privileges correctly in unix.c CWE-273
 Improper Check for Dropped Privileges 		CVE-2012-1187 2024-11-21 10:36 2019-10-30 Show GitHub Exploit DB Packet Storm
293107 6.1 MEDIUM
Network 		fortinet fortios Multiple cross-site scripting (XSS) vulnerabilities in Fortinet FortiGate UTM WAF appliances with FortiOS 4.3.x before 4.3.6 allow remote attackers to inject arbitrary web script or HTML via vectors … CWE-79
Cross-site Scripting 		CVE-2012-0941 2024-11-21 10:36 2018-02-9 Show GitHub Exploit DB Packet Storm
293108 9.8 CRITICAL
Network 		umbraco umbraco_cms The FeedProxy.aspx script in Umbraco 4.7.0 allows remote attackers to proxy requests on their behalf via the "url" parameter. CWE-20
 Improper Input Validation  		CVE-2012-1301 2024-11-21 10:36 2017-04-14 Show GitHub Exploit DB Packet Storm
293109 - dflabs ptk Cross-site request forgery (CSRF) vulnerability in lib/logout.php in DFLabs PTK 1.0.5 and earlier allows remote attackers to hijack the authentication of administrators or investigators for requests … CWE-352
 Origin Validation Error 		CVE-2012-1415 2024-11-21 10:36 2014-12-28 Show GitHub Exploit DB Packet Storm
293110 - amcharts flash Multiple cross-site scripting (XSS) vulnerabilities in amCharts Flash 1 allow remote attackers to inject arbitrary web script or HTML via the (1) data_file or (2) settings_file parameter to ampie.swf… CWE-79
Cross-site Scripting 		CVE-2012-1303 2024-11-21 10:36 2014-12-28 Show GitHub Exploit DB Packet Storm