Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 13, 2026, 12:06 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
218391 4.3 警告 Ruby on Rails project - Ruby on Rails の actionview/lib/action_view/helpers/number_helper.rb におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-0081 2014-04-8 15:48 2014-02-18 Show GitHub Exploit DB Packet Storm
218392 4.3 警告 Horde - Horde Groupware Webmail Edition で使用される Horde Internet Mail Program におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-6640 2014-04-8 14:40 2012-06-26 Show GitHub Exploit DB Packet Storm
218393 4.3 警告 Horde - Horde Groupware Webmail Edition で使用される Horde Kronolith Calendar Application H4 におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-5567 2014-04-8 14:39 2012-11-14 Show GitHub Exploit DB Packet Storm
218394 4.3 警告 Horde - Horde Groupware Webmail Edition で使用される Horde Kronolith Calendar Application H4 におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-5566 2014-04-8 14:33 2012-05-29 Show GitHub Exploit DB Packet Storm
218395 4.3 警告 Horde - Horde Groupware Webmail Edition で使用される Horde Internet Mail Program におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-5565 2014-04-8 14:32 2012-11-14 Show GitHub Exploit DB Packet Storm
218396 4 警告 シスコシステムズ - Cisco Unity Connection のメッセージング API におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2014-2145 2014-04-8 14:30 2014-04-7 Show GitHub Exploit DB Packet Storm
218397 6.1 警告 シスコシステムズ - Cisco IOS XR におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2014-2144 2014-04-8 14:30 2014-04-4 Show GitHub Exploit DB Packet Storm
218398 6.8 警告 Lee Howard - HylaFAX+ の hfaxd におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2013-5680 2014-04-8 13:59 2013-08-6 Show GitHub Exploit DB Packet Storm
218399 4.3 警告 Klaus Purer - Drupal 用 RESTful Web Services モジュールにおけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2013-1946 2014-04-8 13:36 2013-04-10 Show GitHub Exploit DB Packet Storm
218400 4 警告 ヒューレット・パッカード - HP IceWall Identity Manager および IceWall SSO パスワードリセットオプションにおけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2014-2600 2014-04-8 12:27 2014-04-3 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 13, 2026, 5:05 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
296381 - apple iphone_os Cross-site scripting (XSS) vulnerability in WebKit, as used in Apple iOS before 5.1, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability … CWE-79
Cross-site Scripting 		CVE-2012-0588 2024-11-21 10:35 2012-03-9 Show GitHub Exploit DB Packet Storm
296382 - apple iphone_os Cross-site scripting (XSS) vulnerability in WebKit, as used in Apple iOS before 5.1, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability … CWE-79
Cross-site Scripting 		CVE-2012-0587 2024-11-21 10:35 2012-03-9 Show GitHub Exploit DB Packet Storm
296383 - apple iphone_os Cross-site scripting (XSS) vulnerability in WebKit, as used in Apple iOS before 5.1, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability … CWE-79
Cross-site Scripting 		CVE-2012-0586 2024-11-21 10:35 2012-03-9 Show GitHub Exploit DB Packet Storm
296384 - apple iphone_os The Private Browsing feature in Safari in Apple iOS before 5.1 allows remote attackers to bypass intended privacy settings and insert history entries via JavaScript code that calls the (1) pushState … CWE-264
Permissions, Privileges, and Access Controls 		CVE-2012-0585 2024-11-21 10:35 2012-03-9 Show GitHub Exploit DB Packet Storm
296385 - adobe flash_player
flash_player_for_android 		Adobe Flash Player before 10.3.183.16 and 11.x before 11.1.102.63 on Windows, Mac OS X, Linux, and Solaris; before 11.1.111.7 on Android 2.x and 3.x; and before 11.1.115.7 on Android 4.x does not pro… CWE-189
Numeric Errors 		CVE-2012-0769 2024-11-21 10:35 2012-03-6 Show GitHub Exploit DB Packet Storm
296386 - adobe flash_player
flash_player_for_android 		The Matrix3D component in Adobe Flash Player before 10.3.183.16 and 11.x before 11.1.102.63 on Windows, Mac OS X, Linux, and Solaris; before 11.1.111.7 on Android 2.x and 3.x; and before 11.1.115.7 o… CWE-399
 Resource Management Errors 		CVE-2012-0768 2024-11-21 10:35 2012-03-6 Show GitHub Exploit DB Packet Storm
296387 - apache struts Apache Struts 2 before 2.2.3.1 evaluates a string as an OGNL expression during the handling of a conversion error, which allows remote attackers to modify run-time data values, and consequently execu… CWE-20
 Improper Input Validation  		CVE-2012-0838 2024-11-21 10:35 2012-03-3 Show GitHub Exploit DB Packet Storm
296388 - ibm ilog_jviews_gantt
tivoli_change_and_configuration_management_database 		Cross-site scripting (XSS) vulnerability in the Gantt applet viewer in IBM Tivoli Change and Configuration Management Database (CCMDB) 7.2.1 and IBM ILOG JViews Gantt allows remote attackers to injec… CWE-79
Cross-site Scripting 		CVE-2012-0715 2024-11-21 10:35 2012-03-3 Show GitHub Exploit DB Packet Storm
296389 - mozilla bugzilla Cross-site request forgery (CSRF) vulnerability in xmlrpc.cgi in Bugzilla 4.0.2 through 4.0.4 and 4.1.1 through 4.2rc2, when mod_perl is used, allows remote attackers to hijack the authentication of … CWE-352
 Origin Validation Error 		CVE-2012-0453 2024-11-21 10:35 2012-02-25 Show GitHub Exploit DB Packet Storm
296390 - boonex dolphin Multiple cross-site scripting (XSS) vulnerabilities in Boonex Dolphin before 7.0.8 allow remote attackers to inject arbitrary web script or HTML via the (1) explain parameter to explanation.php or th… CWE-79
Cross-site Scripting 		CVE-2012-0873 2024-11-21 10:35 2012-02-24 Show GitHub Exploit DB Packet Storm