Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 12, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
218611	10	危険	Google	-	Google Chrome で使用される Google V8 におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2014-1704	2014-03-18 15:30	2014-03-11	Show	GitHub Exploit DB Packet Storm

218612	7.5	危険	Google	-	Google Chrome の Web Sockets の実装におけるサンドボックス保護メカニズムを回避される脆弱性	CWE-399 リソース管理の問題	CVE-2014-1703	2014-03-18 15:30	2014-03-11	Show	GitHub Exploit DB Packet Storm

218613	7.5	危険	Google	-	Google Chrome で使用される Blink の Web データベースの実装におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2014-1702	2014-03-18 15:30	2014-03-11	Show	GitHub Exploit DB Packet Storm

218614	4.3	警告	Google	-	Google Chrome で使用される Blink の bindings/scripts/code_generator_v8.pm における Universal XSS 攻撃を実行される脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2014-1701	2014-03-18 15:30	2014-03-11	Show	GitHub Exploit DB Packet Storm

218615	7.5	危険	Google	-	Google Chrome で使用される Blink の modules/speech/SpeechSynthesis.cpp におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2014-1700	2014-03-18 15:30	2014-03-11	Show	GitHub Exploit DB Packet Storm

218616	6.8	警告	IBM	-	IBM InfoSphere Master Data Management Server におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2014-0873	2014-03-18 14:53	2014-03-17	Show	GitHub Exploit DB Packet Storm

218617	3.5	注意	IBM	-	IBM InfoSphere Master Data Management Reference Data Management Hub におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2014-0850	2014-03-18 14:52	2014-03-17	Show	GitHub Exploit DB Packet Storm

218618	4.3	警告	IBM	-	IBM InfoSphere Information Server におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-4059	2014-03-18 14:51	2013-06-7	Show	GitHub Exploit DB Packet Storm

218619	6.5	警告	IBM	-	IBM InfoSphere Information Server における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2013-4058	2014-03-18 14:51	2013-06-7	Show	GitHub Exploit DB Packet Storm

218620	6.8	警告	IBM	-	IBM InfoSphere Information Server の XML Pack におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2013-4057	2014-03-18 14:51	2013-06-7	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 12, 2026, 5:06 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
292001	-	bigware	bigware_shop	SQL injection vulnerability in main_bigware_43.php in Bigware Shop before 2.1.5 allows remote attackers to execute arbitrary SQL commands via the lastname parameter in a process action.	CWE-89 SQL Injection	CVE-2012-5317	2024-11-21 10:44	2012-10-9	Show	GitHub Exploit DB Packet Storm

292002	-	barracudanetworks	spam_\&_virus_firewall_600_firmware spam_\&_virus_firewall_600	Multiple cross-site scripting (XSS) vulnerabilities in Barracuda Spam & Virus Firewall 600 Firmware 4.0.1.009 and earlier allow remote authenticated users to inject arbitrary web script or HTML via (…	CWE-79 Cross-site Scripting	CVE-2012-5316	2024-11-21 10:44	2012-10-9	Show	GitHub Exploit DB Packet Storm

292003	-	php_ireport_project	php_ireport	Multiple cross-site scripting (XSS) vulnerabilities in php ireport 1.0 allow remote attackers to inject arbitrary web script or HTML via the message parameter to (1) messages_viewer.php, (2) home.php…	CWE-79 Cross-site Scripting	CVE-2012-5315	2024-11-21 10:44	2012-10-9	Show	GitHub Exploit DB Packet Storm

292004	-	heikki_hokkanen	viewgit	Cross-site scripting (XSS) vulnerability in ViewGit 0.0.6 and earlier allows remote attackers to inject arbitrary web script or HTML via the f parameter.	CWE-79 Cross-site Scripting	CVE-2012-5314	2024-11-21 10:44	2012-10-9	Show	GitHub Exploit DB Packet Storm

292005	-	snitz_communications	snitz_forums_2000	SQL injection vulnerability in forum.asp in Snitz Forums 2000 allows remote attackers to execute arbitrary SQL commands via the TOPIC_ID parameter.	CWE-89 SQL Injection	CVE-2012-5313	2024-11-21 10:44	2012-10-9	Show	GitHub Exploit DB Packet Storm

292006	-	tribiq	tribiq_cms	SQL injection vulnerability in Tribiq CMS allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php.	CWE-89 SQL Injection	CVE-2012-5312	2024-11-21 10:44	2012-10-9	Show	GitHub Exploit DB Packet Storm

292007	-	getshopped	wp_e-commerce	SQL injection vulnerability in the WP e-Commerce plugin before 3.8.7.6 for WordPress allows remote attackers to execute arbitrary SQL commands via unspecified vectors.	CWE-89 SQL Injection	CVE-2012-5310	2024-11-21 10:44	2012-10-9	Show	GitHub Exploit DB Packet Storm

292008	-	ibm	lotus_notes_traveler	servlet/traveler in IBM Lotus Notes Traveler through 8.5.3.3 Interim Fix 1 does not properly restrict invalid authentication attempts, which makes it easier for remote attackers to obtain access via …	CWE-287 Improper Authentication	CVE-2012-5309	2024-11-21 10:44	2012-10-8	Show	GitHub Exploit DB Packet Storm

292009	-	ibm	lotus_notes_traveler	Cross-site request forgery (CSRF) vulnerability in servlet/traveler in IBM Lotus Notes Traveler through 8.5.3.3 Interim Fix 1 allows remote attackers to hijack the authentication of arbitrary users f…	CWE-352 Origin Validation Error	CVE-2012-5308	2024-11-21 10:44	2012-10-8	Show	GitHub Exploit DB Packet Storm

292010	-	ibm	lotus_notes_traveler	Cross-site scripting (XSS) vulnerability in servlet/traveler in IBM Lotus Notes Traveler before 8.5.3.3 Interim Fix 1, when Firefox is used, allows remote attackers to inject arbitrary web script or …	CWE-79 Cross-site Scripting	CVE-2012-5307	2024-11-21 10:44	2012-10-8	Show	GitHub Exploit DB Packet Storm