Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 31, 2026, 2 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
218861	4.3	警告	Appointments Scheduler project	-	WordPress 用 Appointments Scheduler プラグインの js/test.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2014-4579	2014-07-7 18:26	2014-06-12	Show	GitHub Exploit DB Packet Storm

218862	4.3	警告	WP App Maker	-	WordPress 用 WP App Maker プラグインの asset-studio/icons-launcher.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2014-4578	2014-07-7 18:26	2014-06-4	Show	GitHub Exploit DB Packet Storm

218863	5	警告	Linux	-	Linux Kernel の net/sctp/associola.c 内の sctp_association_free 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2014-4667	2014-07-7 16:53	2014-06-26	Show	GitHub Exploit DB Packet Storm

218864	4.9	警告	Linux	-	Linux Kernel の ALSA 制御の実装の sound/core/control.c 内の snd_ctl_elem_add 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-189 数値処理の問題	CVE-2014-4655	2014-07-7 16:51	2014-06-26	Show	GitHub Exploit DB Packet Storm

218865	4.9	警告	Linux	-	Linux Kernel の ALSA 制御の実装の sound/core/control.c 内の snd_ctl_elem_add 関数におけるカーネル制御を削除される脆弱性	CWE-Other その他	CVE-2014-4654	2014-07-7 16:50	2014-06-26	Show	GitHub Exploit DB Packet Storm

218866	6.6	警告	Linux	-	Linux Kernel の ALSA 制御の実装の sound/core/control.c におけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2014-4653	2014-07-7 16:49	2014-06-26	Show	GitHub Exploit DB Packet Storm

218867	4.7	警告	Linux	-	Linux Kernel の ALSA 制御の実装の sound/core/control.c におけるカーネルメモリから重要な情報を取得される脆弱性	CWE-362 競合状態	CVE-2014-4652	2014-07-7 16:48	2014-06-26	Show	GitHub Exploit DB Packet Storm

218868	5	警告	Yann Collet	-	Yann Collet LZ4 におけるサービス運用妨害 (DoS) の脆弱性	CWE-189 数値処理の問題	CVE-2014-4715	2014-07-7 16:47	2014-07-2	Show	GitHub Exploit DB Packet Storm

218869	5	警告	Linux Yann Collet	-	32-bit プラットフォーム上で稼動する Yann Collet LZ4 および Linux Kernel で使用される LZ4 アルゴリズムの実装における整数オーバーフローの脆弱性	CWE-20 不適切な入力確認	CVE-2014-4611	2014-07-7 16:46	2014-06-26	Show	GitHub Exploit DB Packet Storm

218870	2.6	注意	Lamp Design	-	Lamp Design Storesprite の templates/defaultheader.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2014-3737	2014-07-7 15:05	2014-06-19	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 31, 2026, 4:16 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
296971	-	drupal	drupal	Drupal 7.x before 7.16 allows remote attackers to obtain sensitive information and possibly re-install Drupal and execute arbitrary PHP code via an external database server, related to "transient con…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2012-4553	2024-11-21 10:43	2012-11-11	Show	GitHub Exploit DB Packet Storm

296972	-	lars_hjemli	cgit	Argument injection vulnerability in syntax-highlighting.sh in cgit 9.0.3 and earlier allows remote authenticated users with permissions to add files to execute arbitrary commands via the --plug-in ar…	NVD-CWE-Other	CVE-2012-4548	2024-11-21 10:43	2012-11-11	Show	GitHub Exploit DB Packet Storm

296973	-	opensuse redhat	opensuse icedtea-web	Off-by-one error in the invoke function in IcedTeaScriptablePluginObject.cc in IcedTea-Web 1.1.x before 1.1.7, 1.2.x before 1.2.2, 1.3.x before 1.3.1, and 1.4.x before 1.4.1 allows remote attackers t…	CWE-189 Numeric Errors	CVE-2012-4540	2024-11-21 10:43	2012-11-11	Show	GitHub Exploit DB Packet Storm

296974	-	kde	kde	Use-after-free vulnerability in khtml/rendering/render_replaced.cpp in Konqueror in KDE 4.7.3, when the context menu is shown, allows remote attackers to cause a denial of service (crash) and possibl…	CWE-399 Resource Management Errors	CVE-2012-4515	2024-11-21 10:43	2012-11-11	Show	GitHub Exploit DB Packet Storm

296975	-	kde	kde	rendering/render_replaced.cpp in Konqueror in KDE before 4.9.3 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted web page, related to "trying to reuse a fr…	NVD-CWE-noinfo	CVE-2012-4514	2024-11-21 10:43	2012-11-11	Show	GitHub Exploit DB Packet Storm

296976	-	kde	kde	khtml/imload/scaledimageplane.h in Konqueror in KDE 4.7.3 allows remote attackers to cause a denial of service (crash) and possibly read memory via large canvas dimensions, which leads to an unexpect…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2012-4513	2024-11-21 10:43	2012-11-11	Show	GitHub Exploit DB Packet Storm

296977	-	libproxy_project	libproxy	Heap-based buffer overflow in the px_pac_reload function in lib/pac.c in libproxy 0.2.x and 0.3.x allows remote servers to have an unspecified impact via a crafted Content-Length size in an HTTP resp…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2012-4505	2024-11-21 10:43	2012-11-11	Show	GitHub Exploit DB Packet Storm

296978	-	libproxy_project	libproxy	Stack-based buffer overflow in the url::get_pac function in url.cpp in libproxy 0.4.x before 0.4.9 allows remote servers to have an unspecified impact via a large proxy.pac file.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2012-4504	2024-11-21 10:43	2012-11-11	Show	GitHub Exploit DB Packet Storm

296979	-	realnetworks	realplayer	Stack-based buffer overflow in RealNetworks RealPlayer 15.0.5.109 allows user-assisted remote attackers to execute arbitrary code via a crafted ZIP file that triggers incorrect processing of long pat…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2012-4987	2024-11-21 10:43	2012-11-5	Show	GitHub Exploit DB Packet Storm

296980	-	morbus_iff	activism	The Activism module 6.x-2.x before 6.x-2.1 for Drupal does not properly restrict access to the "Campaign" content type, which might allow remote attackers to bypass access restrictions and possibly h…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2012-4498	2024-11-21 10:43	2012-11-3	Show	GitHub Exploit DB Packet Storm