Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 6, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
218611 7.1 危険 シスコシステムズ - Cisco TelePresence ISDN Gateway ソフトウェアにおけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2014-0660 2014-01-24 19:19 2014-01-22 Show GitHub Exploit DB Packet Storm
218612 2.1 注意 LightDM GTK+ Greeter Project
Novell
- LightDM GTK+ Greeter の lightdm-gtk-greeter.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2014-0979 2014-01-24 19:17 2014-01-21 Show GitHub Exploit DB Packet Storm
218613 5.5 警告 OpenStack
レッドハット
- OpenStack Keystone で使用される python-keystoneclient における PKI トークンの使用を保持される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2013-2104 2014-01-24 16:28 2013-05-29 Show GitHub Exploit DB Packet Storm
218614 4.3 警告 マカフィー - McAfee SuperScan におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-4884 2014-01-24 14:05 2013-07-31 Show GitHub Exploit DB Packet Storm
218615 5 警告 Little CMS - OpenJDK などの製品で使用される Little CMS におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2013-4160 2014-01-24 14:02 2013-06-25 Show GitHub Exploit DB Packet Storm
218616 5 警告 シスコシステムズ - Cisco ASR 5000 シリーズのデバイス上で稼働する Gateway GPRS Support Node コンポーネントにおけるトップアップ支払の制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-0669 2014-01-24 13:56 2014-01-22 Show GitHub Exploit DB Packet Storm
218617 4 警告 シスコシステムズ - Cisco MediaSens の Search and Play インターフェースにおける任意の記録をダウンロードされる脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-0672 2014-01-24 12:28 2014-01-22 Show GitHub Exploit DB Packet Storm
218618 5.8 警告 シスコシステムズ - Cisco MediaSense におけるオープンリダイレクトの脆弱性 CWE-20
不適切な入力確認
CVE-2014-0671 2014-01-24 12:24 2014-01-22 Show GitHub Exploit DB Packet Storm
218619 4.3 警告 シスコシステムズ - Cisco MediaSense の Search and Play インターフェースにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-0670 2014-01-24 12:17 2014-01-22 Show GitHub Exploit DB Packet Storm
218620 6.8 警告 Seagate Technology LLC - Seagate BlackArmor NAS 220 デバイスのファームウェアにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2013-6922 2014-01-23 18:35 2013-12-3 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 6, 2026, 4:08 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
292621 - xelex mobiletrack The Xelex MobileTrack application 2.3.7 and earlier for Android uses hardcoded credentials, which allows remote attackers to obtain sensitive information via an unencrypted (1) FTP or (2) HTTP sessio… CWE-255
Credentials Management
CVE-2012-2567 2024-11-21 10:39 2012-05-23 Show GitHub Exploit DB Packet Storm
292622 - xelex mobiletrack The Xelex MobileTrack application 2.3.7 and earlier for Android does not verify the origin of SMS commands, which allows remote attackers to execute a (1) LOCATE, (2) TRACK, (3) UPDATECFG, (4) UPDATE… CWE-287
CWE-20
Improper Authentication
 Improper Input Validation 
CVE-2012-2562 2024-11-21 10:39 2012-05-23 Show GitHub Exploit DB Packet Storm
292623 - simple_php_agenda simple_php_agenda SQL injection vulnerability in engine.php in Simple PHP Agenda 2.2.8 allows remote attackers to execute arbitrary SQL commands via the priority parameter in an addTodo action. CWE-89
SQL Injection
CVE-2012-2925 2024-11-21 10:39 2012-05-22 Show GitHub Exploit DB Packet Storm
292624 9.1 CRITICAL
Network
atlassian fisheye
confluence
jira
crucible
crowd
confluence_server
bamboo
Atlassian JIRA before 5.0.1; Confluence before 3.5.16, 4.0 before 4.0.7, and 4.1 before 4.1.10; FishEye and Crucible before 2.5.8, 2.6 before 2.6.8, and 2.7 before 2.7.12; Bamboo before 3.3.4 and 3.4… NVD-CWE-noinfo
CVE-2012-2926 2024-11-21 10:39 2012-05-23 Show GitHub Exploit DB Packet Storm
292625 - hypermethod elearning_server PHP remote file inclusion vulnerability in admin/setup.inc.php in Hypermethod eLearning Server 4G allows remote attackers to execute arbitrary PHP code via a URL in the path parameter. CWE-94
Code Injection
CVE-2012-2924 2024-11-21 10:39 2012-05-22 Show GitHub Exploit DB Packet Storm
292626 - hypermethod elearning_server SQL injection vulnerability in news.php4 in Hypermethod eLearning Server 4G allows remote attackers to execute arbitrary SQL commands via the nid parameter. CWE-89
SQL Injection
CVE-2012-2923 2024-11-21 10:39 2012-05-22 Show GitHub Exploit DB Packet Storm
292627 - drupal drupal The request_path function in includes/bootstrap.inc in Drupal 7.14 and earlier allows remote attackers to obtain sensitive information via the q[] parameter to index.php, which reveals the installati… CWE-200
Information Exposure
CVE-2012-2922 2024-11-21 10:39 2012-05-22 Show GitHub Exploit DB Packet Storm
292628 - mark_pilgrim feedparser Universal Feed Parser (aka feedparser or python-feedparser) before 5.1.2 allows remote attackers to cause a denial of service (memory consumption) via a crafted XML ENTITY declaration in a non-ASCII … CWE-399
 Resource Management Errors
CVE-2012-2921 2024-11-21 10:39 2012-05-22 Show GitHub Exploit DB Packet Storm
292629 - user_photo user_photo Cross-site scripting (XSS) vulnerability in the userphoto_options_page function in user-photo.php in the User Photo plugin before 0.9.5.2 for WordPress allows remote attackers to inject arbitrary web… CWE-79
Cross-site Scripting
CVE-2012-2920 2024-11-21 10:39 2012-05-22 Show GitHub Exploit DB Packet Storm
292630 - chevereto chevereto Directory traversal vulnerability in Upload/engine.php in Chevereto 1.9.1 allows remote attackers to determine the existence of arbitrary files via a .. (dot dot) in the v parameter. CWE-22
Path Traversal
CVE-2012-2919 2024-11-21 10:39 2012-05-22 Show GitHub Exploit DB Packet Storm