Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 4, 2026, noon

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
218401 6.8 警告 TRENDnet - TRENDnet TEW-812DRU ルータのファームウェアにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2013-3098 2014-02-6 12:18 2013-07-26 Show GitHub Exploit DB Packet Storm
218402 4.3 警告 Media5 - Media5 Mediatrix 4402 VoIP Gateway ファームウェアの Web Management Interface におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-1612 2014-02-5 18:06 2014-01-23 Show GitHub Exploit DB Packet Storm
218403 8.3 危険 Seowon Intech - Seowon Intech WiMAX SWC-9100 ルータの cgi-bin/diagnostic.cgi の ping 機能における任意のコマンドを実行される脆弱性 CWE-20
CWE-Other
CVE-2013-7179 2014-02-5 17:57 2013-12-19 Show GitHub Exploit DB Packet Storm
218404 10 危険 GateHouse
Harris
Thuraya Telecommunications
Hughes Network Systems
日本無線株式会社
Inmarsat plc.
- 複数の衛星通信端末のファームウェアにおける任意のコードを実行される脆弱性 CWE-287
CWE-Other
CVE-2013-6035 2014-02-5 17:50 2013-10-4 Show GitHub Exploit DB Packet Storm
218405 10 危険 GateHouse
Harris
Thuraya Telecommunications
Hughes Network Systems
日本無線株式会社
Inmarsat plc.
- 複数の衛星通信端末のファームウェアにおける不特定のログインアクセス権を取得される脆弱性 CWE-255
CWE-Other
CVE-2013-6034 2014-02-5 17:49 2013-10-4 Show GitHub Exploit DB Packet Storm
218406 3.5 注意 Lexmark - Lexmark の複数のプリンタ製品におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-6033 2014-02-5 17:05 2013-10-4 Show GitHub Exploit DB Packet Storm
218407 10 危険 Lexmark - Lexmark の複数のプリンタ製品の cgi-bin/postpf/cgi-bin/dynamic/config/config.html における Password Protect の管理パスワードを削除される脆弱性 CWE-20
CWE-Other
CVE-2013-6032 2014-02-5 17:00 2013-10-4 Show GitHub Exploit DB Packet Storm
218408 4 警告 IBM - IBM General Parallel File System におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2014-0834 2014-02-5 16:12 2014-01-31 Show GitHub Exploit DB Packet Storm
218409 6.8 警告 IBM - IBM InfoSphere Master Data Management - Collaborative Edition および InfoSphere Master Data Management Server for Product Information Management におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2013-5427 2014-02-5 16:11 2013-08-22 Show GitHub Exploit DB Packet Storm
218410 9.3 危険 ZTE - ZTE ZXV10 W300 に認証情報がハードコードされている問題 CWE-255
CWE-Other
CVE-2014-0329 2014-02-5 15:50 2014-02-3 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 4, 2026, 4:06 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
295051 - moodle moodle Moodle 2.0.x before 2.0.2 does not use the forceloginforprofiles setting for course-profiles access control, which makes it easier for remote attackers to obtain potentially sensitive information via… CWE-200
Information Exposure
CVE-2011-4279 2024-11-21 10:32 2012-07-16 Show GitHub Exploit DB Packet Storm
295052 - moodle moodle Cross-site scripting (XSS) vulnerability in the tag autocomplete functionality in Moodle 1.9.x before 1.9.11 and 2.0.x before 2.0.2 allows remote attackers to inject arbitrary web script or HTML via … CWE-79
Cross-site Scripting
CVE-2011-4278 2024-11-21 10:32 2012-07-16 Show GitHub Exploit DB Packet Storm
295053 - moodle moodle Moodle 2.0.x before 2.0.5 and 2.1.x before 2.1.2 allows remote attackers to bypass intended access restrictions and perform global searches by leveraging the guest role and making a direct request to… CWE-264
Permissions, Privileges, and Access Controls
CVE-2011-4309 2024-11-21 10:32 2012-07-11 Show GitHub Exploit DB Packet Storm
295054 - moodle moodle mod/forum/user.php in Moodle 1.9.x before 1.9.14, 2.0.x before 2.0.5, and 2.1.x before 2.1.2 allows remote authenticated users to discover the names of other users via unspecified vectors. CWE-264
Permissions, Privileges, and Access Controls
CVE-2011-4308 2024-11-21 10:32 2012-07-11 Show GitHub Exploit DB Packet Storm
295055 - moodle moodle Cross-site scripting (XSS) vulnerability in mod/wiki/lang/en/wiki.php in Moodle 2.0.x before 2.0.5 and 2.1.x before 2.1.2 allows remote attackers to inject arbitrary web script or HTML via the sectio… CWE-79
Cross-site Scripting
CVE-2011-4307 2024-11-21 10:32 2012-07-11 Show GitHub Exploit DB Packet Storm
295056 - moodle moodle Cross-site scripting (XSS) vulnerability in course/editsection.html in Moodle 1.9.x before 1.9.14 allows remote authenticated users to inject arbitrary web script or HTML via crafted data. CWE-79
Cross-site Scripting
CVE-2011-4306 2024-11-21 10:32 2012-07-11 Show GitHub Exploit DB Packet Storm
295057 - moodle moodle message/refresh.php in Moodle 1.9.x before 1.9.14 allows remote authenticated users to cause a denial of service (infinite request loop) via a URL that specifies a zero wait time for message refreshi… CWE-189
Numeric Errors
CVE-2011-4305 2024-11-21 10:32 2012-07-11 Show GitHub Exploit DB Packet Storm
295058 - moodle moodle The chat functionality in Moodle 2.0.x before 2.0.5 and 2.1.x before 2.1.2 allows remote authenticated users to discover the name of any user via a beep operation. CWE-200
Information Exposure
CVE-2011-4304 2024-11-21 10:32 2012-07-11 Show GitHub Exploit DB Packet Storm
295059 - moodle moodle lib/db/upgrade.php in Moodle 2.0.x before 2.0.5 and 2.1.x before 2.1.2 does not set the correct registration_hubs.secret value during installation, which allows remote attackers to bypass intended ac… CWE-310
Cryptographic Issues
CVE-2011-4303 2024-11-21 10:32 2012-07-11 Show GitHub Exploit DB Packet Storm
295060 - moodle moodle mnet/xmlrpc/client.php in MNET in Moodle 1.9.x before 1.9.14, 2.0.x before 2.0.5, and 2.1.x before 2.1.2 does not properly process the return value of the openssl_verify function, which allows remote… CWE-20
 Improper Input Validation 
CVE-2011-4302 2024-11-21 10:32 2012-07-11 Show GitHub Exploit DB Packet Storm