Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 12, 2026, 10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
218641 6.8 警告 Umisoft - Umisoft UMI.CMS におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2013-2754 2014-03-13 15:48 2013-05-8 Show GitHub Exploit DB Packet Storm
218642 6.5 警告 VICIDIAL Group - VICIDIAL ダイヤラーのエージェントインターフェースにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2013-4467 2014-03-13 15:32 2013-10-23 Show GitHub Exploit DB Packet Storm
218643 4.3 警告 The PHP Group - XHProf におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-4433 2014-03-13 15:31 2013-09-30 Show GitHub Exploit DB Packet Storm
218644 5 警告 Schneems - Ruby 用 Wicked gem の controller/concerns/render_redirect.rb におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2013-4413 2014-03-13 15:31 2013-10-8 Show GitHub Exploit DB Packet Storm
218645 4.3 警告 Batavi - Batavi の admin/templates/default.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-2289 2014-03-13 15:00 2013-03-1 Show GitHub Exploit DB Packet Storm
218646 3.5 注意 Plone Foundation - Plone の cb_decode.py および linkintegrity.py におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2013-4199 2014-03-13 14:45 2013-06-18 Show GitHub Exploit DB Packet Storm
218647 4 警告 Plone Foundation - Plone の mail_password.py におけるパスワード変更の禁止を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2013-4198 2014-03-13 14:45 2013-06-18 Show GitHub Exploit DB Packet Storm
218648 5.5 警告 Plone Foundation - Plone の member_portrait.py における他のユーザのポートレートを変更される脆弱性 CWE-20
不適切な入力確認
CVE-2013-4197 2014-03-13 14:44 2013-06-18 Show GitHub Exploit DB Packet Storm
218649 5 警告 Plone Foundation - Plone のオブジェクト管理の実装における重要な情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2013-4196 2014-03-13 14:44 2013-06-18 Show GitHub Exploit DB Packet Storm
218650 5.8 警告 Plone Foundation - Plone の複数の PY ファイルにおけるオープンリダイレクトの脆弱性 CWE-20
不適切な入力確認
CVE-2013-4195 2014-03-13 14:44 2013-06-18 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 12, 2026, 5:06 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
293941 - solarwinds orion_network_performance_monitor Multiple cross-site scripting (XSS) vulnerabilities in SolarWinds Orion Network Performance Monitor (NPM) before 10.3.1 allow remote attackers to inject arbitrary web script or HTML via the (1) syslo… CWE-79
Cross-site Scripting
CVE-2012-2577 2024-11-21 10:39 2012-08-13 Show GitHub Exploit DB Packet Storm
293942 - google chrome The PDF functionality in Google Chrome before 21.0.1180.75 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger out-of-bounds write … CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2012-2863 2024-11-21 10:39 2012-08-9 Show GitHub Exploit DB Packet Storm
293943 - google chrome Use-after-free vulnerability in the PDF functionality in Google Chrome before 21.0.1180.75 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted… CWE-399
 Resource Management Errors
CVE-2012-2862 2024-11-21 10:39 2012-08-9 Show GitHub Exploit DB Packet Storm
293944 - linux linux_kernel The copy_creds function in kernel/cred.c in the Linux kernel before 3.3.2 provides an invalid replacement session keyring to a child process, which allows local users to cause a denial of service (pa… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2012-2745 2024-11-21 10:39 2012-08-9 Show GitHub Exploit DB Packet Storm
293945 - linux linux_kernel net/ipv6/netfilter/nf_conntrack_reasm.c in the Linux kernel before 2.6.34, when the nf_conntrack_ipv6 module is enabled, allows remote attackers to cause a denial of service (NULL pointer dereference… NVD-CWE-Other
CVE-2012-2744 2024-11-21 10:39 2012-08-9 Show GitHub Exploit DB Packet Storm
293946 - fenrir-inc sleipnir_mobile The Sleipnir Mobile application 2.2.0 and earlier and Sleipnir Mobile Black Edition application 2.2.0 and earlier for Android allow remote attackers to execute arbitrary Java methods, and obtain sens… CWE-94
Code Injection
CVE-2012-2649 2024-11-21 10:39 2012-08-9 Show GitHub Exploit DB Packet Storm
293947 - qemu qemu The bdrv_open function in Qemu 1.0 does not properly handle the failure of the mkstemp function, when in snapshot node, which allows local users to overwrite or read arbitrary files via a symlink att… NVD-CWE-Other
CVE-2012-2652 2024-11-21 10:39 2012-08-8 Show GitHub Exploit DB Packet Storm
293948 - goodiware goodreader Cross-site scripting (XSS) vulnerability in the GoodReader app 3.16 and earlier for iOS on the iPad, and 3.15.1 and earlier for iOS on the iPhone and iPod touch, allows remote attackers to inject arb… CWE-79
Cross-site Scripting
CVE-2012-2648 2024-11-21 10:39 2012-08-8 Show GitHub Exploit DB Packet Storm
293949 - apache
libreoffice
redhat
canonical
debian
openoffice
libreoffice
enterprise_linux
ubuntu_linux
enterprise_linux_server_from_rhui_6
enterprise_linux_for_ibm_z_systems
debian_linux
enterprise_linux_desktop
enterprise_li…
Multiple heap-based buffer overflows in the XML manifest encryption tag parsing functionality in OpenOffice.org and LibreOffice before 3.5.5 allow remote attackers to cause a denial of service and po… CWE-787
 Out-of-bounds Write
CVE-2012-2665 2024-11-21 10:39 2012-08-7 Show GitHub Exploit DB Packet Storm
293950 - cisco anyconnect_secure_mobility_client Cisco AnyConnect Secure Mobility Client 3.0 before 3.0.08057 does not verify the certificate name in an X.509 certificate during WebLaunch of IPsec, which allows man-in-the-middle attackers to spoof … CWE-310
Cryptographic Issues
CVE-2012-2500 2024-11-21 10:39 2012-08-7 Show GitHub Exploit DB Packet Storm