Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 15, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
218781 2.1 注意 Canonical
QXL Virtual GPU
レッドハット		 - QXL Virtual GPU におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2013-0241 2014-03-28 16:29 2013-01-31 Show GitHub Exploit DB Packet Storm
218782 5 警告 Squid-cache.org
Canonical		 - Squid の cachemgr.cgi におけるサービス運用妨害 (リソース消費) の脆弱性 CWE-119
バッファエラー 		CVE-2013-0189 2014-03-28 16:24 2013-02-8 Show GitHub Exploit DB Packet Storm
218783 7.5 危険 Google - Google Chrome OS の CrosDisks におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2014-1707 2014-03-28 16:21 2014-03-14 Show GitHub Exploit DB Packet Storm
218784 7.5 危険 アップル
富士通
Ruby on Rails project		 - Ruby on Rails に複数の脆弱性 CWE-20
不適切な入力確認 		CVE-2013-0156 2014-03-28 15:31 2013-01-9 Show GitHub Exploit DB Packet Storm
218785 4.3 警告 The Foreman - Foreman の app/views/common/500.html.erb におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-0089 2014-03-28 14:54 2014-03-24 Show GitHub Exploit DB Packet Storm
218786 4.3 警告 RSAセキュリティ - EMC RSA Authentication Manager のセルフサービス・コンソールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-0623 2014-03-28 14:25 2014-03-26 Show GitHub Exploit DB Packet Storm
218787 9.3 危険 Boris Eyrich Software - Artweaver Plus および Free におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2013-3481 2014-03-28 13:48 2013-05-30 Show GitHub Exploit DB Packet Storm
218788 9.3 危険 Nuance Communications - Nuance PDF Reader の PDFCore8.dll におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2013-0732 2014-03-28 13:47 2013-06-4 Show GitHub Exploit DB Packet Storm
218789 10 危険 アドビシステムズ - Adobe Reader における PDF サンドボックス保護メカニズムを回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2014-0512 2014-03-28 13:35 2014-03-13 Show GitHub Exploit DB Packet Storm
218790 10 危険 アドビシステムズ - Adobe Reader におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2014-0511 2014-03-28 13:34 2014-03-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 15, 2026, 4:28 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
292071 9.8 CRITICAL
Network 		linux linux_kernel In the Linux kernel before 3.4, a buffer overflow occurs in drivers/net/wireless/iwlwifi/iwl-agn-sta.c, which will cause at least memory corruption. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2012-6712 2024-11-21 10:46 2019-07-28 Show GitHub Exploit DB Packet Storm
292072 7.8 HIGH
Local 		gnu
redhat 		bash
enterprise_linux 		A heap-based buffer overflow exists in GNU Bash before 4.3 when wide characters, not supported by the current locale set in the LC_CTYPE environment variable, are printed through the echo built-in fu… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2012-6711 2024-11-21 10:46 2019-06-19 Show GitHub Exploit DB Packet Storm
292073 9.8 CRITICAL
Network 		page_flip_book_project page_flip_book Directory traversal vulnerability in pageflipbook.php script from index.php in Page Flip Book plugin for WordPress (wppageflip) allows remote attackers to include and execute arbitrary local files vi… CWE-22
Path Traversal 		CVE-2012-6652 2024-11-21 10:46 2019-05-13 Show GitHub Exploit DB Packet Storm
292074 9.8 CRITICAL
Network 		extplorer extplorer ext_find_user in eXtplorer through 2.1.2 allows remote attackers to bypass authentication via a password[]= (aka an empty array) in an action=login request to index.php. CWE-287
Improper Authentication 		CVE-2012-6710 2024-11-21 10:46 2018-10-8 Show GitHub Exploit DB Packet Storm
292075 7.1 HIGH
Local 		fedoraproject fedora The fedora-business-cards package before 1-0.1.beta1.fc17 on Fedora 17 and before 1-0.1.beta1.fc18 on Fedora 18 allows local users to cause a denial of service or write to arbitrary files via a symli… CWE-59
Link Following 		CVE-2013-0159 2024-11-21 10:46 2018-05-2 Show GitHub Exploit DB Packet Storm
292076 5.9 MEDIUM
Network 		elinks
twibright 		elinks
links 		ELinks 0.12 and Twibright Links 2.3 have Missing SSL Certificate Validation. CWE-295
Improper Certificate Validation  		CVE-2012-6709 2024-11-21 10:46 2018-02-24 Show GitHub Exploit DB Packet Storm
292077 6.1 MEDIUM
Network 		fortinet fortidb Multiple cross-site scripting (XSS) vulnerabilities in Java number format exception handling in FortiGate FortiDB before 4.4.2 allow remote attackers to inject arbitrary web script or HTML via the co… CWE-79
Cross-site Scripting 		CVE-2012-6347 2024-11-21 10:46 2018-02-10 Show GitHub Exploit DB Packet Storm
292078 6.1 MEDIUM
Network 		fortinet fortiweb Multiple cross-site scripting (XSS) vulnerabilities in FortiWeb before 4.4.4 allow remote attackers to inject arbitrary web script or HTML via the (1) redir or (2) mkey parameter to waf/pcre_expressi… CWE-79
Cross-site Scripting 		CVE-2012-6346 2024-11-21 10:46 2018-02-10 Show GitHub Exploit DB Packet Storm
292079 6.1 MEDIUM
Network 		jquery jquery jQuery before 1.9.0 is vulnerable to Cross-site Scripting (XSS) attacks. The jQuery(strInput) function does not differentiate selectors from HTML in a reliable fashion. In vulnerable versions, jQuery… CWE-79
Cross-site Scripting 		CVE-2012-6708 2024-11-21 10:46 2018-01-19 Show GitHub Exploit DB Packet Storm
292080 6.1 MEDIUM
Network 		dragonbyte-tech vbdownloads_module Cross-site scripting (XSS) vulnerability in downloads/actions/editdownload.php in the DragonByte Technologies vBDownloads module 1.3.2 and earlier for vBulletin allows remote attackers to inject arbi… CWE-79
Cross-site Scripting 		CVE-2012-6682 2024-11-21 10:46 2018-01-12 Show GitHub Exploit DB Packet Storm