Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 10, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
218251 4 警告 Plone Foundation - Plone の sendto.py における電子メールを偽装される脆弱性 CWE-20
不適切な入力確認
CVE-2013-4192 2014-03-13 14:43 2013-06-18 Show GitHub Exploit DB Packet Storm
218252 5.8 警告 Plone Foundation - Plone の zip.py における重要な情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2013-4191 2014-03-13 14:42 2013-06-18 Show GitHub Exploit DB Packet Storm
218253 4.3 警告 Plone Foundation - Plone の複数の PY ファイルにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-4190 2014-03-13 14:42 2013-06-18 Show GitHub Exploit DB Packet Storm
218254 6.5 警告 Plone Foundation - Plone の複数の PY ファイルにおけるサブツリー上のノードにアクセスされる脆弱性 CWE-noinfo
情報不足
CVE-2013-4189 2014-03-13 14:42 2013-06-18 Show GitHub Exploit DB Packet Storm
218255 4.3 警告 Plone Foundation - Plone の traverser.py におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2013-4188 2014-03-13 14:41 2013-06-18 Show GitHub Exploit DB Packet Storm
218256 5.4 警告 マイクロソフト - 複数の Microsoft Windows 製品の Security Account Manager Remote プロトコルの実装におけるアカウントロックアウトポリシーを回避される脆弱性 CWE-20
CWE-264
CVE-2014-0317 2014-03-13 14:40 2014-03-11 Show GitHub Exploit DB Packet Storm
218257 6.6 警告 マイクロソフト - 複数の Microsoft Windows 製品のカーネルモードドライバの win32k.sys におけるカーネルメモリから重要な情報を取得される脆弱性 CWE-119
バッファエラー
CVE-2014-0323 2014-03-13 14:39 2014-03-11 Show GitHub Exploit DB Packet Storm
218258 7.2 危険 マイクロソフト - 複数の Microsoft Windows 製品のカーネルモードドライバの win32k.sys における権限昇格の脆弱性 CWE-119
バッファエラー
CVE-2014-0300 2014-03-13 14:38 2014-03-11 Show GitHub Exploit DB Packet Storm
218259 7.1 危険 マイクロソフト - Microsoft Silverlight における DEP および ASLR 保護メカニズムを回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-0319 2014-03-13 14:33 2014-03-11 Show GitHub Exploit DB Packet Storm
218260 9.3 危険 マイクロソフト - 複数の Microsoft Windows 製品の DirectShow の qedit.dll におけるメモリ二重解放の脆弱性 CWE-399
リソース管理の問題
CVE-2014-0301 2014-03-13 14:32 2014-03-11 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 10, 2026, 4:58 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
294131 - rubygems mail_gem Directory traversal vulnerability in lib/mail/network/delivery_methods/file_delivery.rb in the Mail gem before 2.4.4 for Ruby allows remote attackers to read arbitrary files via a .. (dot dot) in the… CWE-22
Path Traversal
CVE-2012-2139 2024-11-21 10:38 2012-07-19 Show GitHub Exploit DB Packet Storm
294132 - mozilla firefox
thunderbird
thunderbird_esr
seamonkey
Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 do not properly implement the JavaScript … NVD-CWE-Other
CVE-2012-1967 2024-11-21 10:38 2012-07-18 Show GitHub Exploit DB Packet Storm
294133 - mozilla firefox Mozilla Firefox 4.x through 13.0 and Firefox ESR 10.x before 10.0.6 do not have the same context-menu restrictions for data: URLs as for javascript: URLs, which allows remote attackers to conduct cro… CWE-264
Permissions, Privileges, and Access Controls
CVE-2012-1966 2024-11-21 10:38 2012-07-18 Show GitHub Exploit DB Packet Storm
294134 - mozilla firefox Mozilla Firefox 4.x through 13.0 and Firefox ESR 10.x before 10.0.6 do not properly establish the security context of a feed: URL, which allows remote attackers to bypass unspecified cross-site scrip… CWE-79
Cross-site Scripting
CVE-2012-1965 2024-11-21 10:38 2012-07-18 Show GitHub Exploit DB Packet Storm
294135 - mozilla firefox
thunderbird
thunderbird_esr
seamonkey
The certificate-warning functionality in browser/components/certerror/content/aboutCertError.xhtml in Mozilla Firefox 4.x through 12.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 12.0, T… NVD-CWE-noinfo
CVE-2012-1964 2024-11-21 10:38 2012-07-18 Show GitHub Exploit DB Packet Storm
294136 - mozilla firefox
thunderbird
thunderbird_esr
seamonkey
The Content Security Policy (CSP) functionality in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey be… CWE-264
Permissions, Privileges, and Access Controls
CVE-2012-1963 2024-11-21 10:38 2012-07-18 Show GitHub Exploit DB Packet Storm
294137 - mozilla firefox
thunderbird
thunderbird_esr
seamonkey
Use-after-free vulnerability in the JSDependentString::undepend function in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before… CWE-399
 Resource Management Errors
CVE-2012-1962 2024-11-21 10:38 2012-07-18 Show GitHub Exploit DB Packet Storm
294138 - mozilla firefox
thunderbird
thunderbird_esr
seamonkey
Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 do not properly handle duplicate values i… CWE-20
 Improper Input Validation 
CVE-2012-1961 2024-11-21 10:38 2012-07-18 Show GitHub Exploit DB Packet Storm
294139 - mozilla firefox
thunderbird
seamonkey
The qcms_transform_data_rgb_out_lut_sse2 function in the QCMS implementation in Mozilla Firefox 4.x through 13.0, Thunderbird 5.0 through 13.0, and SeaMonkey before 2.11 might allow remote attackers … CWE-200
Information Exposure
CVE-2012-1960 2024-11-21 10:38 2012-07-18 Show GitHub Exploit DB Packet Storm
294140 - mozilla firefox
thunderbird
thunderbird_esr
seamonkey
Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 do not consider the presence of same-comp… CWE-264
Permissions, Privileges, and Access Controls
CVE-2012-1959 2024-11-21 10:38 2012-07-18 Show GitHub Exploit DB Packet Storm