Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 6, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
218631 6.8 警告 Moodle - Moodle の user/profile/index.php におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2014-0010 2014-01-23 17:27 2014-01-20 Show GitHub Exploit DB Packet Storm
218632 4.3 警告 WordPress.org - WordPress の wp-includes/default-filters.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-6633 2014-01-23 17:26 2012-06-15 Show GitHub Exploit DB Packet Storm
218633 4 警告 F5 Networks - F5 BIG-IP の sam/admin/vpe2/public/php/server.php における XML 外部エンティティの脆弱性 CWE-200
情報漏えい
CVE-2012-2997 2014-01-23 17:16 2012-09-3 Show GitHub Exploit DB Packet Storm
218634 7.5 危険 2GLux - Joomla! 用 2Glux Sexy Polling コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2013-7219 2014-01-23 17:15 2013-12-26 Show GitHub Exploit DB Packet Storm
218635 7.5 危険 Hornbill Corporate Limited - Hornbill Supportworks ITSM の reports/calldiary.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2013-2594 2014-01-23 17:14 2013-04-24 Show GitHub Exploit DB Packet Storm
218636 2.1 注意 kernel.org
レッドハット
- util-linux のマウントおよびアンマウントにおける制限されたディレクトリの存在を特定される脆弱性 CWE-200
情報漏えい
CVE-2013-0157 2014-01-23 16:53 2013-02-21 Show GitHub Exploit DB Packet Storm
218637 4.3 警告 Hiox Softwares Pvt Ltd. - HIOX Guest Book の add.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-1620 2014-01-23 16:44 2014-01-5 Show GitHub Exploit DB Packet Storm
218638 6.8 警告 Expat - Expat におけるサービス運用妨害 (DoS) の脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2013-0340 2014-01-23 16:33 2013-02-21 Show GitHub Exploit DB Packet Storm
218639 7.5 危険 CUBIC FACTORY - CUBIC CMS における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2014-1619 2014-01-23 16:28 2014-01-8 Show GitHub Exploit DB Packet Storm
218640 7.8 危険 Ecava - Ecava IntegraXor の SCADA サーバにおけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2014-0753 2014-01-23 16:17 2014-01-16 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 6, 2026, 4:08 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
292711 - fedoraproject
david_paleino
fedora
wicd
The SetWiredProperty function in the D-Bus interface in WICD before 1.7.2 allows local users to write arbitrary configuration settings and gain privileges via a crafted property name in a dbus messag… CWE-20
 Improper Input Validation 
CVE-2012-2095 2024-11-21 10:38 2014-04-8 Show GitHub Exploit DB Packet Storm
292712 - martin_nagy bind-dyndb-ldap The handle_connection_error function in ldap_helper.c in bind-dyndb-ldap before 1.1.0rc1 does not properly handle LDAP query errors, which allows remote attackers to cause a denial of service (infini… CWE-399
 Resource Management Errors
CVE-2012-2134 2024-11-21 10:38 2014-02-27 Show GitHub Exploit DB Packet Storm
292713 - standards_based_linux_instrumentation_project
opensuse
standards-based_linux_common_information_model_client
opensuse
internal/cimxml/sax/NodeFactory.java in Standards-Based Linux Instrumentation for Manageability (SBLIM) Common Information Model (CIM) Client (aka sblim-cim-client2) before 2.1.12 computes hash value… CWE-310
Cryptographic Issues
CVE-2012-2328 2024-11-21 10:38 2014-02-11 Show GitHub Exploit DB Packet Storm
292714 - csounds csound Stack-based buffer overflow in the main function in util/lpci_main.c in Csound before 5.17.2, when converting a file, allows user-assisted remote attackers to execute arbitrary code via a crafted fil… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2012-2108 2024-11-21 10:38 2014-02-5 Show GitHub Exploit DB Packet Storm
292715 - csounds csound Integer overflow in the main function in util/lpci_main.c in Csound before 5.17.2, when converting a file, allows user-assisted remote attackers to execute arbitrary code via a crafted file, which tr… CWE-189
Numeric Errors
CVE-2012-2107 2024-11-21 10:38 2014-02-5 Show GitHub Exploit DB Packet Storm
292716 - csounds csound Integer overflow in the pv_import function in util/pv_import.c in Csound 5.16.6, when converting a file, allows remote attackers to execute arbitrary code via a crafted file, which triggers a heap-ba… CWE-189
Numeric Errors
CVE-2012-2106 2024-11-21 10:38 2014-02-5 Show GitHub Exploit DB Packet Storm
292717 - torproject tor Tor before 0.2.3.24-rc allows remote attackers to cause a denial of service (assertion failure and daemon exit) by performing link protocol negotiation incorrectly. NVD-CWE-noinfo
CVE-2012-2250 2024-11-21 10:38 2014-02-3 Show GitHub Exploit DB Packet Storm
292718 - torproject tor Tor before 0.2.3.23-rc allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a renegotiation attempt that occurs after the initiation of the V3 link protocol. NVD-CWE-noinfo
CVE-2012-2249 2024-11-21 10:38 2014-02-3 Show GitHub Exploit DB Packet Storm
292719 - rubygems rubygems RubyGems before 1.8.23 does not verify an SSL certificate, which allows remote attackers to modify a gem during installation via a man-in-the-middle attack. CWE-310
Cryptographic Issues
CVE-2012-2126 2024-11-21 10:38 2013-10-2 Show GitHub Exploit DB Packet Storm
292720 - rubygems rubygems RubyGems before 1.8.23 can redirect HTTPS connections to HTTP, which makes it easier for remote attackers to observe or modify a gem during installation via a man-in-the-middle attack. NVD-CWE-Other
CVE-2012-2125 2024-11-21 10:38 2013-10-2 Show GitHub Exploit DB Packet Storm