Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 6, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
218541 4.3 警告 Open-Xchange - Open-Xchange AppSuite におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-7142 2014-01-28 18:22 2013-12-18 Show GitHub Exploit DB Packet Storm
218542 3.3 注意 CMU Speech Software - Flite の audio/auserver.c 内の play_wave_from_socket 関数における任意のファイルを変更される脆弱性 CWE-59
リンク解釈の問題 		CVE-2014-0027 2014-01-28 18:21 2014-01-6 Show GitHub Exploit DB Packet Storm
218543 4.3 警告 Open-Xchange - Open-Xchange AppSuite におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-7141 2014-01-28 18:21 2013-12-18 Show GitHub Exploit DB Packet Storm
218544 4 警告 Open-Xchange - Open-Xchange AppSuite の CalDAV インターフェースにおける XML 外部エンティティの脆弱性 CWE-Other
その他 		CVE-2013-7140 2014-01-28 18:19 2013-12-18 Show GitHub Exploit DB Packet Storm
218545 5 警告 Libreswan Project - Libreswan におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他 		CVE-2013-6467 2014-01-28 18:18 2013-11-4 Show GitHub Exploit DB Packet Storm
218546 7.5 危険 Brion Vibber (MediaWiki)
MediaWiki		 - MediaWiki 用 CentralAuth 拡張機能におけるパスワードなしで認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2013-4304 2014-01-28 18:16 2013-09-3 Show GitHub Exploit DB Packet Storm
218547 5 警告 freedesktop.org - Poppler の JBIG2Stream.cc 内の JBIG2Stream::readSegments メソッドにおけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2013-7296 2014-01-28 18:05 2013-12-7 Show GitHub Exploit DB Packet Storm
218548 4.3 警告 Gapless Player - SimZip (Simple Zip Viewer) におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2014-0809 2014-01-28 18:04 2014-01-24 Show GitHub Exploit DB Packet Storm
218549 8.3 危険 Xen プロジェクト - Xen の do_physdev_op 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2014-1666 2014-01-28 18:02 2014-01-23 Show GitHub Exploit DB Packet Storm
218550 5 警告 チェック・ポイント・ソフトウェア・テクノロジーズ - Check Point Session Authentication Agent における重要な情報を取得される脆弱性 CWE-noinfo
情報不足 		CVE-2014-1673 2014-01-28 18:01 2014-01-22 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 6, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
292501 - libguestfs libguestfs virt-edit in libguestfs before 1.18.0 does not preserve the permissions from the original file and saves the new file with world-readable permissions when editing, which might allow local guest users… CWE-255
Credentials Management 		CVE-2012-2690 2024-11-21 10:39 2012-06-30 Show GitHub Exploit DB Packet Storm
292502 - redhat sos The sosreport utility in the Red Hat sos package before 2.2-29 does not remove the root user password information from the Kickstart configuration file (/root/anaconda-ks.cfg) when creating an archiv… CWE-255
Credentials Management 		CVE-2012-2664 2024-11-21 10:39 2012-06-30 Show GitHub Exploit DB Packet Storm
292503 - mikel_olasagasti revelation Revelation 0.4.13-2 and earlier does not iterate through SHA hashing algorithms for AES encryption, which makes it easier for context-dependent attackers to guess passwords via a brute force attack. CWE-255
Credentials Management 		CVE-2012-2743 2024-11-21 10:39 2012-06-28 Show GitHub Exploit DB Packet Storm
292504 - mikel_olasagasti revelation Revelation 0.4.13-2 and earlier uses only the first 32 characters of a password followed by a sequence of zeros, which reduces the entropy and makes it easier for context-dependent attackers to crack… CWE-255
Credentials Management 		CVE-2012-2742 2024-11-21 10:39 2012-06-28 Show GitHub Exploit DB Packet Storm
292505 - mathew_winstone mobile_tools Multiple cross-site scripting (XSS) vulnerabilities in the Mobile Tools module 6.x-2.x before 6.x-2.3 for Drupal allow remote attackers to inject arbitrary web script or HTML via the (1) Mobile URL f… CWE-79
Cross-site Scripting 		CVE-2012-2717 2024-11-21 10:39 2012-06-28 Show GitHub Exploit DB Packet Storm
292506 - shlomi_fish config-inifiles The Config::IniFiles module before 2.71 for Perl creates temporary files with predictable names, which allows local users to overwrite arbitrary files via a symlink attack. NOTE: some of these detai… NVD-CWE-Other
CVE-2012-2451 2024-11-21 10:39 2012-06-28 Show GitHub Exploit DB Packet Storm
292507 - strongswan strongswan The GMP Plugin in strongSwan 4.2.0 through 4.6.3 allows remote attackers to bypass authentication via a (1) empty or (2) zeroed RSA signature, aka "RSA signature verification vulnerability." CWE-287
Improper Authentication 		CVE-2012-2388 2024-11-21 10:39 2012-06-28 Show GitHub Exploit DB Packet Storm
292508 - google chrome Integer overflow in Google Chrome before 20.0.1132.43 allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted data in the Matroska container format. CWE-189
Numeric Errors 		CVE-2012-2834 2024-11-21 10:39 2012-06-27 Show GitHub Exploit DB Packet Storm
292509 - google chrome Buffer overflow in the JS API in the PDF functionality in Google Chrome before 20.0.1132.43 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown … CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2012-2833 2024-11-21 10:39 2012-06-27 Show GitHub Exploit DB Packet Storm
292510 - google chrome The image-codec implementation in the PDF functionality in Google Chrome before 20.0.1132.43 does not initialize an unspecified pointer, which allows remote attackers to cause a denial of service or … NVD-CWE-Other
CVE-2012-2832 2024-11-21 10:39 2012-06-27 Show GitHub Exploit DB Packet Storm