Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 8, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
218821 8.5 危険 TRENDnet - TRENDnet TEW-812DRU ルータにおける任意のコマンドを実行される脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2013-3365 2014-02-6 12:20 2013-07-26 Show GitHub Exploit DB Packet Storm
218822 6.8 警告 TRENDnet - TRENDnet TEW-812DRU ルータのファームウェアにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2013-3098 2014-02-6 12:18 2013-07-26 Show GitHub Exploit DB Packet Storm
218823 4.3 警告 Media5 - Media5 Mediatrix 4402 VoIP Gateway ファームウェアの Web Management Interface におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-1612 2014-02-5 18:06 2014-01-23 Show GitHub Exploit DB Packet Storm
218824 8.3 危険 Seowon Intech - Seowon Intech WiMAX SWC-9100 ルータの cgi-bin/diagnostic.cgi の ping 機能における任意のコマンドを実行される脆弱性 CWE-20
CWE-Other
CVE-2013-7179 2014-02-5 17:57 2013-12-19 Show GitHub Exploit DB Packet Storm
218825 10 危険 GateHouse
Harris
Thuraya Telecommunications
Hughes Network Systems
日本無線株式会社
Inmarsat plc.		 - 複数の衛星通信端末のファームウェアにおける任意のコードを実行される脆弱性 CWE-287
CWE-Other
CVE-2013-6035 2014-02-5 17:50 2013-10-4 Show GitHub Exploit DB Packet Storm
218826 10 危険 GateHouse
Harris
Thuraya Telecommunications
Hughes Network Systems
日本無線株式会社
Inmarsat plc.		 - 複数の衛星通信端末のファームウェアにおける不特定のログインアクセス権を取得される脆弱性 CWE-255
CWE-Other
CVE-2013-6034 2014-02-5 17:49 2013-10-4 Show GitHub Exploit DB Packet Storm
218827 3.5 注意 Lexmark - Lexmark の複数のプリンタ製品におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-6033 2014-02-5 17:05 2013-10-4 Show GitHub Exploit DB Packet Storm
218828 10 危険 Lexmark - Lexmark の複数のプリンタ製品の cgi-bin/postpf/cgi-bin/dynamic/config/config.html における Password Protect の管理パスワードを削除される脆弱性 CWE-20
CWE-Other
CVE-2013-6032 2014-02-5 17:00 2013-10-4 Show GitHub Exploit DB Packet Storm
218829 4 警告 IBM - IBM General Parallel File System におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2014-0834 2014-02-5 16:12 2014-01-31 Show GitHub Exploit DB Packet Storm
218830 6.8 警告 IBM - IBM InfoSphere Master Data Management - Collaborative Edition および InfoSphere Master Data Management Server for Product Information Management におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2013-5427 2014-02-5 16:11 2013-08-22 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 8, 2026, 4:54 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
293171 - mediawiki mediawiki Cross-site scripting (XSS) vulnerability in the outputPage function in includes/SkinTemplate.php in MediaWiki before 1.17.5, 1.18.x before 1.18.4, and 1.19.x before 1.19.1 allows remote attackers to … CWE-79
Cross-site Scripting 		CVE-2012-2698 2024-11-21 10:39 2012-06-30 Show GitHub Exploit DB Packet Storm
293172 - libguestfs libguestfs virt-edit in libguestfs before 1.18.0 does not preserve the permissions from the original file and saves the new file with world-readable permissions when editing, which might allow local guest users… CWE-255
Credentials Management 		CVE-2012-2690 2024-11-21 10:39 2012-06-30 Show GitHub Exploit DB Packet Storm
293173 - redhat sos The sosreport utility in the Red Hat sos package before 2.2-29 does not remove the root user password information from the Kickstart configuration file (/root/anaconda-ks.cfg) when creating an archiv… CWE-255
Credentials Management 		CVE-2012-2664 2024-11-21 10:39 2012-06-30 Show GitHub Exploit DB Packet Storm
293174 - mikel_olasagasti revelation Revelation 0.4.13-2 and earlier does not iterate through SHA hashing algorithms for AES encryption, which makes it easier for context-dependent attackers to guess passwords via a brute force attack. CWE-255
Credentials Management 		CVE-2012-2743 2024-11-21 10:39 2012-06-28 Show GitHub Exploit DB Packet Storm
293175 - mikel_olasagasti revelation Revelation 0.4.13-2 and earlier uses only the first 32 characters of a password followed by a sequence of zeros, which reduces the entropy and makes it easier for context-dependent attackers to crack… CWE-255
Credentials Management 		CVE-2012-2742 2024-11-21 10:39 2012-06-28 Show GitHub Exploit DB Packet Storm
293176 - mathew_winstone mobile_tools Multiple cross-site scripting (XSS) vulnerabilities in the Mobile Tools module 6.x-2.x before 6.x-2.3 for Drupal allow remote attackers to inject arbitrary web script or HTML via the (1) Mobile URL f… CWE-79
Cross-site Scripting 		CVE-2012-2717 2024-11-21 10:39 2012-06-28 Show GitHub Exploit DB Packet Storm
293177 - shlomi_fish config-inifiles The Config::IniFiles module before 2.71 for Perl creates temporary files with predictable names, which allows local users to overwrite arbitrary files via a symlink attack. NOTE: some of these detai… NVD-CWE-Other
CVE-2012-2451 2024-11-21 10:39 2012-06-28 Show GitHub Exploit DB Packet Storm
293178 - strongswan strongswan The GMP Plugin in strongSwan 4.2.0 through 4.6.3 allows remote attackers to bypass authentication via a (1) empty or (2) zeroed RSA signature, aka "RSA signature verification vulnerability." CWE-287
Improper Authentication 		CVE-2012-2388 2024-11-21 10:39 2012-06-28 Show GitHub Exploit DB Packet Storm
293179 - google chrome Integer overflow in Google Chrome before 20.0.1132.43 allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted data in the Matroska container format. CWE-189
Numeric Errors 		CVE-2012-2834 2024-11-21 10:39 2012-06-27 Show GitHub Exploit DB Packet Storm
293180 - google chrome Buffer overflow in the JS API in the PDF functionality in Google Chrome before 20.0.1132.43 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown … CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2012-2833 2024-11-21 10:39 2012-06-27 Show GitHub Exploit DB Packet Storm