Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 7, 2026, 4 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
218571 4.3 警告 Feng Office - Feng Office におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-5343 2014-08-21 17:48 2014-08-6 Show GitHub Exploit DB Packet Storm
218572 6.9 警告 KDE project
Debian
Canonical
- KDE kdelibs および kauth におけるアクセス制限を回避される脆弱性 CWE-362
競合状態
CVE-2014-5033 2014-08-21 17:48 2014-07-30 Show GitHub Exploit DB Packet Storm
218573 5 警告 OpenStack
Canonical
レッドハット
- 複数の OpenStack 製品の通知ミドルウェアにおける X_AUTH_TOKEN 値を取得される脆弱性 CWE-200
情報漏えい
CVE-2014-4615 2014-08-21 17:47 2014-08-11 Show GitHub Exploit DB Packet Storm
218574 5 警告 BitDefender - Bitdefender GravityZone におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2014-5350 2014-08-21 16:49 2014-05-22 Show GitHub Exploit DB Packet Storm
218575 5 警告 Baidu, Inc. - Baidu Spark Browser におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2014-5349 2014-08-21 16:49 2014-06-30 Show GitHub Exploit DB Packet Storm
218576 4.3 警告 リバーベッドテクノロジー株式会社 - Riverbed Stingray Traffic Manager Virtual Appliance の apps/zxtm/locallog.cgi におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-5348 2014-08-21 15:26 2014-08-15 Show GitHub Exploit DB Packet Storm
218577 2.9 注意 IBM - IBM PowerVC Express Edition における認証情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2014-4750 2014-08-21 14:43 2014-08-18 Show GitHub Exploit DB Packet Storm
218578 4.3 警告 IBM - IBM PowerVC における SSH サーバを偽装される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-4749 2014-08-21 14:40 2014-08-18 Show GitHub Exploit DB Packet Storm
218579 6.8 警告 Disqus - WordPress 用 Disqus Comment System プラグインにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2014-5347 2014-08-21 14:37 2014-06-24 Show GitHub Exploit DB Packet Storm
218580 6.8 警告 Disqus - WordPress 用 Disqus Comment System プラグインにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2014-5346 2014-08-21 14:36 2014-08-16 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 7, 2026, 4:13 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
297291 - myrephp myre_realty_manager Cross-site scripting (XSS) vulnerability in search.php in MYRE Realty Manager allows remote attackers to inject arbitrary web script or HTML via the cat_id1 parameter. CWE-79
Cross-site Scripting
CVE-2012-6585 2024-11-21 10:46 2013-08-25 Show GitHub Exploit DB Packet Storm
297292 - myrephp myre_realty_manager Multiple SQL injection vulnerabilities in MYRE Realty Manager allow remote attackers to execute arbitrary SQL commands via the bathrooms1 parameter to (1) demo2/search.php or (2) search.php. CWE-89
SQL Injection
CVE-2012-6584 2024-11-21 10:46 2013-08-25 Show GitHub Exploit DB Packet Storm
297293 - imagemenu_project imagemenu Cross-site scripting (XSS) vulnerability in the Imagemenu module 6.x-1.x before 6.x-1.4 for Drupal allows remote authenticated users with the "administer imagemenu" permission to inject arbitrary web… CWE-79
Cross-site Scripting
CVE-2012-6583 2024-11-21 10:46 2013-08-24 Show GitHub Exploit DB Packet Storm
297294 - spambot_module_project spambot Cross-site scripting (XSS) vulnerability in the Spambot module 6.x-3.x before 6.x-3.2 and 7.x-1.x before 7.x-1.1 for Drupal allows certain remote attackers to inject arbitrary web script or HTML via … CWE-79
Cross-site Scripting
CVE-2012-6582 2024-11-21 10:46 2013-08-21 Show GitHub Exploit DB Packet Storm
297295 - redhat enterprise_virtualization VDSM in Red Hat Enterprise Virtualization 3 and 3.2 allows privileged guest users to cause the host to become "unavailable to the managment server" via guestInfo dictionaries with "unexpected fields." NVD-CWE-Other
CVE-2013-0167 2024-11-21 10:46 2013-08-20 Show GitHub Exploit DB Packet Storm
297296 - silverstripe silverstripe Multiple cross-site scripting (XSS) vulnerabilities in the SilverStripe e-commerce module 3.0 for SilverStripe CMS allow remote attackers to inject arbitrary web script or HTML via the (1) FirstName,… CWE-79
Cross-site Scripting
CVE-2012-6458 2024-11-21 10:46 2013-08-10 Show GitHub Exploit DB Packet Storm
297297 - f5 big-ip_advanced_firewall_manager
big-ip_policy_enforcement_manager
firepass
big-ip_access_policy_manager
big-ip_edge_gateway
big-ip_webaccelerator
big-ip_wan_optimization_manager
Directory traversal vulnerability in an unspecified signed Java applet in the client-side components in F5 BIG-IP APM 10.1.0 through 10.2.4 and 11.0.0 through 11.3.0, FirePass 6.0.0 through 6.1.0 and… CWE-22
Path Traversal
CVE-2013-0150 2024-11-21 10:46 2013-08-10 Show GitHub Exploit DB Packet Storm
297298 - cisco ios
ios_xe
asa_5500
pix_firewall_software
staros
fwsm
nx-os
The OSPF implementation in Cisco IOS 12.0 through 12.4 and 15.0 through 15.3, IOS-XE 2.x through 3.9.xS, ASA and PIX 7.x through 9.1, FWSM, NX-OS, and StarOS before 14.0.50488 does not properly valid… NVD-CWE-noinfo
CVE-2013-0149 2024-11-21 10:46 2013-08-5 Show GitHub Exploit DB Packet Storm
297299 - bestpractical request_tracker Best Practical Solutions RT 3.8.x before 3.8.15 and 4.0.x before 4.0.8, when GnuPG is enabled, allows remote attackers to bypass intended restrictions on reading keys in the product's keyring, and tr… CWE-264
Permissions, Privileges, and Access Controls
CVE-2012-6581 2024-11-21 10:46 2013-07-24 Show GitHub Exploit DB Packet Storm
297300 - bestpractical request_tracker Best Practical Solutions RT 3.8.x before 3.8.15 and 4.0.x before 4.0.8, when GnuPG is enabled, does not ensure that the UI labels unencrypted messages as unencrypted, which might make it easier for r… CWE-310
Cryptographic Issues
CVE-2012-6580 2024-11-21 10:46 2013-07-24 Show GitHub Exploit DB Packet Storm