Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 6, 2026, noon

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
218171 5 警告 IBM - IBM WebSphere Portal における重要な Java Content Repository 情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2013-6735 2014-02-20 15:11 2013-12-20 Show GitHub Exploit DB Packet Storm
218172 4.3 警告 レッドハット - Red Hat sos パッケージの sosreport ユーティリティにおける重要な情報を取得される脆弱性 CWE-310
暗号の問題
CVE-2011-4083 2014-02-20 14:43 2011-12-6 Show GitHub Exploit DB Packet Storm
218173 4.3 警告 Mozilla Foundation - Mozilla Thunderbird にメッセージ内の HTML 要素を適切にブロックしない脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-6674 2014-02-20 14:03 2014-01-27 Show GitHub Exploit DB Packet Storm
218174 4.3 警告 phpMyFAQ - phpMyFAQ におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-0814 2014-02-20 13:59 2014-02-7 Show GitHub Exploit DB Packet Storm
218175 2.6 注意 phpMyFAQ - phpMyFAQ におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2014-0813 2014-02-20 13:57 2014-02-7 Show GitHub Exploit DB Packet Storm
218176 4.3 警告 デル - DELL SonicWALL GMS/Analyzer/UMA にクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-0332 2014-02-20 13:55 2014-02-11 Show GitHub Exploit DB Packet Storm
218177 4.3 警告 Mozilla Foundation - Mozilla Thunderbird および SeaMonkey におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-2018 2014-02-19 19:08 2014-02-6 Show GitHub Exploit DB Packet Storm
218178 6.8 警告 Mozilla Foundation - Mozilla Firefox における永続的なログアウトに関するクロスサイトリクエストフォージェリに相当する攻撃を実行される脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2013-6167 2014-02-19 19:08 2013-04-4 Show GitHub Exploit DB Packet Storm
218179 4.3 警告 Canonical - Ubuntu Metal as a Service の API におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-1070 2014-02-19 18:55 2013-11-14 Show GitHub Exploit DB Packet Storm
218180 2.1 注意 Canonical - Ubuntu Metal as a Service における RabbitMQ 認証資格情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2013-1069 2014-02-19 18:55 2013-11-22 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 6, 2026, 4:08 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
292261 9.8 CRITICAL
Network
ffmpeg ffmpeg Unspecified vulnerability in FFmpeg before 0.10.3 has unknown impact and attack vectors, a different vulnerability than CVE-2012-2773, CVE-2012-2778, CVE-2012-2780, and CVE-2012-2781. NVD-CWE-noinfo
CVE-2012-2771 2024-11-21 10:39 2017-08-10 Show GitHub Exploit DB Packet Storm
292262 - tinywebgallery tinywebgallery Multiple cross-site scripting (XSS) vulnerabilities in TinyWebGallery (TWG) before 1.8.8 allow remote attackers to inject arbitrary web script or HTML via the selitems[] parameter in a (1) copy, (2) … CWE-79
Cross-site Scripting
CVE-2012-2932 2024-11-21 10:39 2015-04-24 Show GitHub Exploit DB Packet Storm
292263 - tinywebgallery tinywebgallery Multiple cross-site request forgery (CSRF) vulnerabilities in TinyWebGallery (TWG) before 1.8.8 allow remote attackers to hijack the authentication of administrators for requests that (1) add a user … CWE-352
 Origin Validation Error
CVE-2012-2930 2024-11-21 10:39 2015-04-24 Show GitHub Exploit DB Packet Storm
292264 - google bionic The PRNG implementation in the DNS resolver in Bionic in Android before 4.1.1 incorrectly uses time and PID information during the generation of random numbers for query ID values and UDP source port… NVD-CWE-Other
CVE-2012-2808 2024-11-21 10:39 2015-04-1 Show GitHub Exploit DB Packet Storm
292265 - joomla joomla\! Cross-site scripting (XSS) vulnerability in the ja_purity template for Joomla! 1.5.26 and earlier allows remote attackers to inject arbitrary web script or HTML via the Mod* cookie parameter to html/… CWE-79
Cross-site Scripting
CVE-2012-2413 2024-11-21 10:39 2014-10-20 Show GitHub Exploit DB Packet Storm
292266 - mailenable mailenable Multiple cross-site scripting (XSS) vulnerabilities in MailEnable Enterprise 6.5 allow remote attackers to inject arbitrary web script or HTML via the (1) From, (2) To, or (3) Subject header or (4) b… CWE-79
Cross-site Scripting
CVE-2012-2588 2024-11-21 10:39 2014-09-19 Show GitHub Exploit DB Packet Storm
292267 - mini_mail_dashboard_widget_project mini_mail_dashboard_widget Cross-site scripting (XSS) vulnerability in Mini Mail Dashboard Widget plugin 1.42 for WordPress allows remote attackers to inject arbitrary web script or HTML via the body of an email. CWE-79
Cross-site Scripting
CVE-2012-2583 2024-11-21 10:39 2014-09-17 Show GitHub Exploit DB Packet Storm
292268 - redhat enterprise_mrg Cumin (aka MRG Management Console), as used in Red Hat Enterprise MRG 2.5, allows attackers with certain database privileges to cause a denial of service (inaccessible page) via a non-ASCII character… CWE-20
 Improper Input Validation 
CVE-2012-2682 2024-11-21 10:39 2014-07-20 Show GitHub Exploit DB Packet Storm
292269 - emailarchitect emailarchitect_email_server Multiple cross-site scripting (XSS) vulnerabilities in EmailArchitect Email Server 10.0 and 10.0.0.3 allow remote attackers to inject arbitrary web script or HTML via the (1) From or (2) Date field i… CWE-79
Cross-site Scripting
CVE-2012-2591 2024-11-21 10:39 2014-06-20 Show GitHub Exploit DB Packet Storm
292270 - postieplugin postie Cross-site scripting (XSS) vulnerability in the Postie plugin 1.4.3, and possibly before 1.5.15, for WordPress allows remote attackers to inject arbitrary web script or HTML via the From field of an … CWE-79
Cross-site Scripting
CVE-2012-2580 2024-11-21 10:39 2014-06-20 Show GitHub Exploit DB Packet Storm