Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 6, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
218711 5 警告 Libreswan Project - libreswan の pluto/ikev2_parent.c 内の ikev2parent_inI1outR1 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2013-7294 2014-01-20 13:53 2013-12-11 Show GitHub Exploit DB Packet Storm
218712 10 危険 アドビシステムズ - Windows および Mac OS X 上で稼働する Adobe Reader および Acrobat における任意のコードを実行される脆弱性 CWE-399
リソース管理の問題
CVE-2014-0496 2014-01-20 13:50 2014-01-14 Show GitHub Exploit DB Packet Storm
218713 10 危険 アドビシステムズ - Windows および Mac OS X 上で稼働する Adobe Reader および Acrobat における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2014-0495 2014-01-20 13:48 2014-01-14 Show GitHub Exploit DB Packet Storm
218714 10 危険 アドビシステムズ - Windows および Mac OS X 上で稼働する Adobe Reader および Acrobat における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2014-0493 2014-01-20 13:47 2014-01-14 Show GitHub Exploit DB Packet Storm
218715 4.3 警告 Schneider Electric - Schneider Electric ClearSCADA および SCADA Expert ClearSCADA の DNP3 ドライバにおけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2013-6142 2014-01-20 11:12 2013-01-14 Show GitHub Exploit DB Packet Storm
218716 7.5 危険 cspmum - CSP MySQL User Manager における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2014-1466 2014-01-20 10:28 2013-01-8 Show GitHub Exploit DB Packet Storm
218717 7.5 危険 Open Web Analytics - Open Web Analytics のパスワードリセットのページにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2014-1206 2014-01-20 10:16 2014-01-9 Show GitHub Exploit DB Packet Storm
218718 10 危険 LOREX Technology - 複数の Lorex Edge 製品のファームウェアの INetViewX ActiveX コントロールにおけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2014-1201 2014-01-20 10:16 2014-01-9 Show GitHub Exploit DB Packet Storm
218719 7.5 危険 WellinTech - 複数の WellinTech 製品の ActiveX コントロールにおける任意の DLL コードをダウンロードされる脆弱性 CWE-94
コード・インジェクション
CVE-2013-2827 2014-01-20 10:15 2014-01-14 Show GitHub Exploit DB Packet Storm
218720 6.4 警告 WellinTech - 複数の WellinTech 製品におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2013-2826 2014-01-20 10:14 2014-01-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 6, 2026, 4:08 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
293141 - orangehrm orangehrm SQL injection vulnerability in the updateStatus function in lib/models/benefits/Hsp.php in OrangeHRM before 2.7 allows remote authenticated users to execute arbitrary SQL commands via the hspSummaryI… CWE-89
SQL Injection
CVE-2012-1506 2024-11-21 10:37 2014-09-17 Show GitHub Exploit DB Packet Storm
293142 - synology diskstation_manager
synology_photo_station
Cross-site scripting (XSS) vulnerability in Synology Photo Station 5 for DiskStation Manager (DSM) 3.2-1955 allows remote attackers to inject arbitrary web script or HTML via the name parameter to ph… CWE-79
Cross-site Scripting
CVE-2012-1556 2024-11-21 10:37 2014-09-12 Show GitHub Exploit DB Packet Storm
293143 - sixapart movable_type Cross-site scripting (XSS) vulnerability in Six Apart (formerly Six Apart KK) Movable Type (MT) Pro 5.13 allows remote attackers to inject arbitrary web script or HTML via the comment section. CWE-79
Cross-site Scripting
CVE-2012-1503 2024-11-21 10:37 2014-08-29 Show GitHub Exploit DB Packet Storm
293144 - apache ofbiz Multiple cross-site scripting (XSS) vulnerabilities in Apache Open For Business Project (aka OFBiz) 10.04.x before 10.04.02 allow remote attackers to inject arbitrary web script or HTML via (1) a par… CWE-79
Cross-site Scripting
CVE-2012-1621 2024-11-21 10:37 2014-06-19 Show GitHub Exploit DB Packet Storm
293145 - phppgadmin_project
opensuse
phppgadmin
opensuse
Multiple cross-site scripting (XSS) vulnerabilities in functions.php in phpPgAdmin before 5.0.4 allow remote attackers to inject arbitrary web script or HTML via the (1) name or (2) type of a functio… CWE-79
Cross-site Scripting
CVE-2012-1600 2024-11-21 10:37 2014-05-14 Show GitHub Exploit DB Packet Storm
293146 - danielb finder Cross-site scripting (XSS) vulnerability in the Finder module 6.x-1.x before 6.x-1.26, 7.x-1.x, and 7.x-2.x before 7.x-2.0-alpha8 for Drupal allows remote attackers to inject arbitrary web script or … CWE-79
Cross-site Scripting
CVE-2012-1561 2024-11-21 10:37 2014-04-8 Show GitHub Exploit DB Packet Storm
293147 - cms_tree_page_view_project cms_tree_page_view Cross-site scripting (XSS) vulnerability in the cms_tpv_admin_head function in functions.php in the CMS Tree Page View plugin before 0.8.9 for WordPress allows remote attackers to inject arbitrary we… CWE-79
Cross-site Scripting
CVE-2012-1834 2024-11-21 10:37 2014-04-8 Show GitHub Exploit DB Packet Storm
293148 - fedoraproject
redhat
fedora
enterprise_linux
The ExecShield feature in a certain Red Hat patch for the Linux kernel in Red Hat Enterprise Linux (RHEL) 5 and 6 and Fedora 15 and 16 does not properly handle use of many shared libraries by a 32-bi… NVD-CWE-noinfo
CVE-2012-1568 2024-11-21 10:37 2013-03-1 Show GitHub Exploit DB Packet Storm
293149 - oracle javafx Unspecified vulnerability in the JavaFX component in Oracle Java SE JavaFX 2.2.4 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a diff… NVD-CWE-noinfo
CVE-2012-1543 2024-11-21 10:37 2013-02-2 Show GitHub Exploit DB Packet Storm
293150 - oracle
sun
jre
jdk
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11 and 6 through Update 38 allows remote attackers to affect confidentiality, integrity, a… NVD-CWE-noinfo
CVE-2012-1541 2024-11-21 10:37 2013-02-2 Show GitHub Exploit DB Packet Storm