Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 4, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
218531 2.1 注意 Python Software Foundation - RPLY の parsergenerator.py のパーサキャッシュ機能におけるキャッシュデータを偽装される脆弱性 CWE-DesignError
CVE-2014-1604 2014-01-29 16:27 2014-01-18 Show GitHub Exploit DB Packet Storm
218532 2.1 注意 Starbucks Coffee Company - iOS 用 Starbucks アプリケーションにおけるユーザ名などの情報を取得される脆弱性 CWE-255
証明書・パスワード管理 		CVE-2014-0647 2014-01-29 16:20 2014-01-13 Show GitHub Exploit DB Packet Storm
218533 7.2 危険 Detlef Pilzecker - Perl 用 Proc::Daemon モジュールにおける脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-7135 2014-01-29 15:00 2013-12-16 Show GitHub Exploit DB Packet Storm
218534 10 危険 Enghouse Interactive - Enghouse Interactive IVR Pro の Enghouse Interactive Professional Services の不特定の "アドオン製品" における権限を取得される脆弱性 CWE-310
暗号の問題 		CVE-2013-6838 2014-01-29 14:50 2013-11-27 Show GitHub Exploit DB Packet Storm
218535 5 警告 Bitweaver - Bitweaver の gmap/view_overlay.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2012-5192 2014-01-29 14:02 2012-10-23 Show GitHub Exploit DB Packet Storm
218536 5 警告 シトリックス・システムズ - Android 用 Citrix GoToMeeting アプリケーションにおけるユーザ ID を取得される脆弱性 CWE-200
情報漏えい 		CVE-2014-1664 2014-01-29 13:40 2014-01-23 Show GitHub Exploit DB Packet Storm
218537 4.3 警告 Joomla! - Joomla! 用 JV Comment におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-0794 2014-01-29 12:37 2014-01-14 Show GitHub Exploit DB Packet Storm
218538 5 警告 Tntnet - tntnet の framework/common/messageheaderparser.cpp における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2013-7299 2014-01-29 12:27 2013-12-11 Show GitHub Exploit DB Packet Storm
218539 5 警告 Tntnet - cxxtools の query_params.cpp におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2013-7298 2014-01-29 12:04 2013-12-14 Show GitHub Exploit DB Packet Storm
218540 4.3 警告 Open-Xchange - Open-Xchange AppSuite におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-7143 2014-01-28 18:24 2013-12-18 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 5, 2026, 4:51 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
295151 - siemens wincc_tia_portal Siemens WinCC (TIA Portal) 11 uses a reversible algorithm for storing HMI web-application passwords in world-readable and world-writable files, which allows local users to obtain sensitive informatio… CWE-255
Credentials Management 		CVE-2011-4515 2024-11-21 10:32 2013-03-21 Show GitHub Exploit DB Packet Storm
295152 - dovecot dovecot Dovecot 2.0.x before 2.0.16, when ssl or starttls is enabled and hostname is used to define the proxy destination, does not verify that the server hostname matches a domain name in the subject's Comm… CWE-20
 Improper Input Validation  		CVE-2011-4318 2024-11-21 10:32 2013-03-7 Show GitHub Exploit DB Packet Storm
295153 - gnu gdb GNU Project Debugger (GDB) before 7.5, when .debug_gdb_scripts is defined, automatically loads certain files from the current working directory, which allows local users to gain privileges via crafte… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2011-4355 2024-11-21 10:32 2013-03-6 Show GitHub Exploit DB Packet Storm
295154 - redhat jboss_enterprise_web_platform
jboss_enterprise_application_platform
jboss_enterprise_brms_platform 		Cross-site scripting (XSS) vulnerability in the JMX console in JBoss Enterprise Application Platform (EAP) before 5.2.0, Web Platform (EWP) before 5.2.0, BRMS Platform before 5.3.1, and SOA Platform … CWE-20
 Improper Input Validation  		CVE-2011-4575 2024-11-21 10:32 2013-02-6 Show GitHub Exploit DB Packet Storm
295155 - simplerealtytheme advanced_text_widget_plugin Cross-site scripting (XSS) vulnerability in advancedtext.php in Advanced Text Widget plugin before 2.0.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the page para… CWE-79
Cross-site Scripting 		CVE-2011-4618 2024-11-21 10:32 2013-01-24 Show GitHub Exploit DB Packet Storm
295156 - redhat enterprise_virtualization_manager Red Hat Enterprise Virtualization Manager (RHEV-M) before 3.1, in certain unspecified conditions, does not lock the desktop screen between SPICE sessions, which allows local users with access to a vi… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2011-4316 2024-11-21 10:32 2013-01-5 Show GitHub Exploit DB Packet Storm
295157 - redhat jboss_enterprise_application_platform
jboss_enterprise_web_platform
jboss_enterprise_portal_platform
jboss_enterprise_brms_platform
jboss_enterprise_soa_platform 		The (1) JNDI service, (2) HA-JNDI service, and (3) HAJNDIFactory invoker servlet in JBoss Enterprise Application Platform 4.3.0 CP10 and 5.1.2, Web Platform 5.1.2, SOA Platform 4.2.0.CP05 and 4.3.0.C… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2011-4605 2024-11-21 10:32 2012-11-24 Show GitHub Exploit DB Packet Storm
295158 - xiph icecast icecast before 2.3.3 allows remote attackers to inject control characters such as newlines into the error loc (error.log) via a crafted URL. CWE-20
 Improper Input Validation  		CVE-2011-4612 2024-11-21 10:32 2012-11-20 Show GitHub Exploit DB Packet Storm
295159 - backwpup backwpup PHP remote file inclusion vulnerability in wp_xml_export.php in the BackWPup plugin before 1.7.2 for WordPress allows remote attackers to execute arbitrary PHP code via a URL in the wpabs parameter. CWE-94
Code Injection 		CVE-2011-4342 2024-11-21 10:32 2012-10-9 Show GitHub Exploit DB Packet Storm
295160 - spamtitan webtitan Directory traversal vulnerability in logs-x.php in SpamTitan WebTitan before 3.60 allows remote authenticated users to read arbitrary files via a .. (dot dot) in the fname parameter in a view action. CWE-22
Path Traversal 		CVE-2011-4640 2024-11-21 10:32 2012-10-8 Show GitHub Exploit DB Packet Storm