Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 4, 2026, 2 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
218361 4.3 警告 WordPress Download Manager - WordPress 用 Download Manager プラグインにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-7319 2014-02-10 14:16 2013-12-9 Show GitHub Exploit DB Packet Storm
218362 4.3 警告 Novell
Canonical
レッドハット		 - IcedTea-Web の Web ブラウザプラグインにおける同一生成元ポリシーを回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-3377 2014-02-10 10:23 2011-11-8 Show GitHub Exploit DB Packet Storm
218363 5 警告 Facebook - HipHop Virtual Machine for PHP における XML 外部エンティティ (XXE) 攻撃を実行される脆弱性 CWE-Other
その他 		CVE-2014-1439 2014-02-7 18:22 2014-02-1 Show GitHub Exploit DB Packet Storm
218364 5 警告 KDE project - kdelibs の KIO の kioslave/http/http.cpp における認証情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2013-2074 2014-02-7 18:22 2013-05-14 Show GitHub Exploit DB Packet Storm
218365 4.6 警告 X.Org Foundation
Debian
Canonical		 - Debian GNU/Linux および Ubuntu Linux の X.Org X ラッパーにおけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-4613 2014-02-7 18:21 2011-12-18 Show GitHub Exploit DB Packet Storm
218366 4.3 警告 Mozilla Foundation - Mozilla Firefox におけるサービス運用妨害 (DoS) の脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2014-1489 2014-02-7 17:44 2014-02-4 Show GitHub Exploit DB Packet Storm
218367 5 警告 Mozilla Foundation - Android 上で稼働する Mozilla Firefox における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2014-1484 2014-02-7 17:40 2014-02-4 Show GitHub Exploit DB Packet Storm
218368 4.3 警告 Mozilla Foundation - Mozilla Firefox および SeaMonkey のファイルダウンロードの実装におけるクリックジャッキング攻撃を実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2014-1480 2014-02-7 17:37 2014-02-4 Show GitHub Exploit DB Packet Storm
218369 2.1 注意 OpenStack - 複数の OpenStack 製品におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2013-4463 2014-02-7 17:32 2013-12-16 Show GitHub Exploit DB Packet Storm
218370 5 警告 Devscripts Devel Team - devscripts の uupdate におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2014-1833 2014-02-7 16:49 2014-01-30 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 4, 2026, 4:06 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
292771 - opera opera_browser Opera before 11.62 on Mac OS X allows remote attackers to spoof the address field and security dialogs via crafted styling that causes page content to be displayed outside of the intended content are… CWE-20
 Improper Input Validation  		CVE-2012-1929 2024-11-21 10:38 2012-03-28 Show GitHub Exploit DB Packet Storm
292772 - opera opera_browser Opera before 11.62 allows remote attackers to spoof the address field by triggering a page reload followed by a redirect to a different domain. CWE-20
 Improper Input Validation  		CVE-2012-1928 2024-11-21 10:38 2012-03-28 Show GitHub Exploit DB Packet Storm
292773 - opera opera_browser Opera before 11.62 allows remote attackers to spoof the address field by triggering the launch of a dialog window associated with a different domain. CWE-20
 Improper Input Validation  		CVE-2012-1927 2024-11-21 10:38 2012-03-28 Show GitHub Exploit DB Packet Storm
292774 - opera opera_browser Opera before 11.62 allows remote attackers to bypass the Same Origin Policy via the (1) history.pushState and (2) history.replaceState functions in conjunction with cross-domain frames, leading to un… CWE-200
Information Exposure 		CVE-2012-1926 2024-11-21 10:38 2012-03-28 Show GitHub Exploit DB Packet Storm
292775 - opera opera_browser Opera before 11.62 does not ensure that a dialog window is placed on top of content windows, which makes it easier for user-assisted remote attackers to trick users into downloading and executing arb… NVD-CWE-Other
CVE-2012-1925 2024-11-21 10:38 2012-03-28 Show GitHub Exploit DB Packet Storm
292776 - opera opera_browser Opera before 11.62 allows user-assisted remote attackers to trick users into downloading and executing arbitrary files via a small window for the download dialog. CWE-94
Code Injection 		CVE-2012-1924 2024-11-21 10:38 2012-03-28 Show GitHub Exploit DB Packet Storm
292777 - atmail atmail_open @Mail WebMail Client in AtMail Open-Source 1.04 and earlier allows remote attackers to obtain configuration information via a direct request to install/info.php, which calls the phpinfo function. CWE-200
Information Exposure 		CVE-2012-1920 2024-11-21 10:38 2012-03-28 Show GitHub Exploit DB Packet Storm
292778 - atmail atmail_open CRLF injection vulnerability in mime.php in @Mail WebMail Client in AtMail Open-Source before 1.05 allows remote attackers to conduct directory traversal attacks and read arbitrary files via a %0A se… CWE-94
Code Injection 		CVE-2012-1919 2024-11-21 10:38 2012-03-28 Show GitHub Exploit DB Packet Storm
292779 - atmail atmail_open Multiple directory traversal vulnerabilities in (1) compose.php and (2) libs/Atmail/SendMsg.php in @Mail WebMail Client in AtMail Open-Source before 1.05 allow remote attackers to read arbitrary file… CWE-22
Path Traversal 		CVE-2012-1918 2024-11-21 10:38 2012-03-28 Show GitHub Exploit DB Packet Storm
292780 - atmail atmail_open compose.php in @Mail WebMail Client in AtMail Open-Source before 1.05 does not properly handle ../ (dot dot slash) sequences in the unique parameter, which allows remote attackers to conduct director… CWE-22
Path Traversal 		CVE-2012-1917 2024-11-21 10:38 2012-03-28 Show GitHub Exploit DB Packet Storm