Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 10, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
218691 9 危険 AVTECH - AVTECH AVN801 DVR のファームウェアの RTSP Packet Handler におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2013-4980 2014-03-5 14:46 2013-08-28 Show GitHub Exploit DB Packet Storm
218692 10 危険 Hangzhou Hikvision Digital Technology - Hikvision DS-2CD7153-E IP カメラのファームウェアの RTSP Packet Handler におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2013-4977 2014-03-5 14:31 2013-08-6 Show GitHub Exploit DB Packet Storm
218693 6.8 警告 Inmatrix - INMATRIX Zoom Player におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2013-3260 2014-03-5 14:12 2013-06-7 Show GitHub Exploit DB Packet Storm
218694 6.8 警告 Inmatrix - INMATRIX Zoom Player におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2013-3259 2014-03-5 14:12 2013-06-7 Show GitHub Exploit DB Packet Storm
218695 7.5 危険 アドビシステムズ
Apache Software Foundation		 - Windows Phone 7 および 8 上で稼働する Apache Cordova および Adobe PhoneGap におけるデバイスリソース制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2014-1884 2014-03-4 19:45 2014-01-24 Show GitHub Exploit DB Packet Storm
218696 7.5 危険 アドビシステムズ - Android 上で稼働する Adobe PhoneGap におけるデバイスリソース制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2014-1883 2014-03-4 19:41 2014-01-24 Show GitHub Exploit DB Packet Storm
218697 7.5 危険 アドビシステムズ
Apache Software Foundation		 - Apache Cordova および Adobe PhoneGap におけるイベントベースのブリッジのデバイスリソース制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2014-1882 2014-03-4 19:38 2014-01-24 Show GitHub Exploit DB Packet Storm
218698 7.5 危険 アドビシステムズ
Apache Software Foundation		 - Apache Cordova および Adobe PhoneGap におけるイベントベースのブリッジのデバイスリソース制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2014-1881 2014-03-4 19:32 2014-01-24 Show GitHub Exploit DB Packet Storm
218699 7.5 危険 アドビシステムズ
Apache Software Foundation		 - Apache Cordova および Adobe PhoneGap におけるホワイトリスト保護メカニズムを回避される脆弱性 CWE-20
不適切な入力確認 		CVE-2012-6637 2014-03-4 19:07 2012-04-30 Show GitHub Exploit DB Packet Storm
218700 5 警告 PNG Development Group - libpng におけるサービス運用妨害 (DoS) の脆弱性 CWE-189
CWE-Other
CVE-2014-0333 2014-03-4 18:16 2014-02-25 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 10, 2026, 4:58 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
294431 - fourkitchens ed_readmore Cross-site scripting (XSS) vulnerability in the Read More Link module 6.x-3.x before 6.x-3.1 for Drupal allows remote authenticated users with the access administration pages permission to inject arb… CWE-79
Cross-site Scripting 		CVE-2012-1658 2024-11-21 10:37 2012-09-19 Show GitHub Exploit DB Packet Storm
294432 - fourkitchens block_class Cross-site scripting (XSS) vulnerability in block_class.module in the Block Class module before 7.x-1.1 for Drupal allows remote authenticated users with certain permissions to inject arbitrary web s… CWE-79
Cross-site Scripting 		CVE-2012-1657 2024-11-21 10:37 2012-09-19 Show GitHub Exploit DB Packet Storm
294433 - wesjones multisite_search SQL injection vulnerability in the Multisite Search module 6.x-2.2 for Drupal allows remote authenticated users with certain permissions to execute arbitrary SQL commands via the Site table prefix fi… CWE-89
SQL Injection 		CVE-2012-1656 2024-11-21 10:37 2012-09-19 Show GitHub Exploit DB Packet Storm
294434 - sven_decabooter uc_paydutchgroup_\/_wedeal_payment Unspecified vulnerability in the UC PayDutchGroup / WeDeal payment module 6.x-1.0 for Drupal allows remote authenticated users to obtain account credentials via unknown attack vectors. NVD-CWE-noinfo
CVE-2012-1655 2024-11-21 10:37 2012-09-19 Show GitHub Exploit DB Packet Storm
294435 - alex_barth data Multiple cross-site scripting (XSS) vulnerabilities in the Data module 6.x-1.x before 6.x-1.0 and 7.x-1.x before 7.x-1.0-alpha3 for Drupal allow remote authenticated users with the administer data ta… CWE-79
Cross-site Scripting 		CVE-2012-1654 2024-11-21 10:37 2012-09-19 Show GitHub Exploit DB Packet Storm
294436 - microsoft visual_studio_team_foundation_server Cross-site scripting (XSS) vulnerability in Microsoft Visual Studio Team Foundation Server 2010 SP1 allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka "X… CWE-79
Cross-site Scripting 		CVE-2012-1892 2024-11-21 10:37 2012-09-12 Show GitHub Exploit DB Packet Storm
294437 - danielb cool_aid Cool Aid module before 6.x-1.9 for Drupal does not enforce access restrictions, which allows remote authenticated users with the administer coolaid permission to modify arbitrary pages via unspecifie… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2012-1649 2024-11-21 10:37 2012-09-10 Show GitHub Exploit DB Packet Storm
294438 - danielb cool_aid Cross-site scripting (XSS) vulnerability in the Cool Aid module before 6.x-1.9 for Drupal allows remote authenticated users with the administer coolaid permission to inject arbitrary web script or HT… CWE-79
Cross-site Scripting 		CVE-2012-1648 2024-11-21 10:37 2012-09-10 Show GitHub Exploit DB Packet Storm
294439 - mediawiki mediawiki Cross-site scripting (XSS) vulnerability in the wikitext parser in MediaWiki 1.17.x before 1.17.3 and 1.18.x before 1.18.2 allows remote attackers to inject arbitrary web script or HTML via a crafted… CWE-79
Cross-site Scripting 		CVE-2012-1582 2024-11-21 10:37 2012-09-10 Show GitHub Exploit DB Packet Storm
294440 - mediawiki mediawiki MediaWiki 1.17.x before 1.17.3 and 1.18.x before 1.18.2 uses weak random numbers for password reset tokens, which makes it easier for remote attackers to change the passwords of arbitrary users. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2012-1581 2024-11-21 10:37 2012-09-10 Show GitHub Exploit DB Packet Storm