Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 2, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
218891 4.3 警告 Flash Photo Gallery project - WordPress 用 Flash Photo Gallery プラグインの fpg_preview.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-4529 2014-07-4 18:26 2014-04-25 Show GitHub Exploit DB Packet Storm
218892 4.3 警告 Game tabs project - WordPress 用 Game tabs プラグインの main_page.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-4531 2014-07-4 18:26 2014-04-25 Show GitHub Exploit DB Packet Storm
218893 4.3 警告 Rodrigo Primo - WordPress 用 Social Connect プラグインの diagnostics/test.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-4551 2014-07-4 18:26 2014-04-25 Show GitHub Exploit DB Packet Storm
218894 4.3 警告 EnvialoSimple - WordPress 用 EnvialoSimple: Email Marketing and Newsletters プラグインにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-4527 2014-07-4 18:26 2014-05-28 Show GitHub Exploit DB Packet Storm
218895 4.3 警告 efence project - WordPress 用 efence プラグインの callback.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-4526 2014-07-4 18:26 2014-05-28 Show GitHub Exploit DB Packet Storm
218896 4.3 警告 WP Easy Post Types project - WordPress 用 WP Easy Post Types プラグインの classes/custom-image/media.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-4524 2014-07-4 18:26 2014-05-28 Show GitHub Exploit DB Packet Storm
218897 4.3 警告 Diverse Solutions - WordPress 用 dsSearchAgent: WordPress Edition プラグインの client-assist.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-4522 2014-07-4 18:26 2014-04-25 Show GitHub Exploit DB Packet Storm
218898 6.8 警告 Cherokee Project - Cherokee の validator_ldap.c 内の cherokee_validator_ldap_check 関数における認証を回避される脆弱性 CWE-287
不適切な認証
CVE-2014-4668 2014-07-4 14:01 2014-02-12 Show GitHub Exploit DB Packet Storm
218899 5.1 警告 Google - Android の KeyStore サービスの /system/bin/keystore におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2014-3100 2014-07-4 13:56 2014-06-23 Show GitHub Exploit DB Packet Storm
218900 5.5 警告 IBM - IBM Sametime Meeting Server の stconf.nsf におけるアップロードの制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-3088 2014-07-4 11:24 2014-07-1 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 2, 2026, 4:18 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
297181 - patterninsight pattern_insight Cross-site request forgery (CSRF) vulnerability in the web interface in Pattern Insight 2.3 allows remote attackers to hijack the authentication of arbitrary users. CWE-352
 Origin Validation Error
CVE-2012-4935 2024-11-21 10:43 2012-11-19 Show GitHub Exploit DB Packet Storm
297182 - novell file_reporter Directory traversal vulnerability in NFRAgent.exe in Novell File Reporter 1.0.2 allows remote attackers to upload and execute files via a 130 /FSF/CMD request with a .. (dot dot) in a FILE element of… CWE-22
Path Traversal
CVE-2012-4959 2024-11-21 10:43 2012-11-19 Show GitHub Exploit DB Packet Storm
297183 - novell file_reporter Directory traversal vulnerability in NFRAgent.exe in Novell File Reporter 1.0.2 allows remote attackers to read arbitrary files via a 126 /FSF/CMD request with a .. (dot dot) in a FILE element of an … CWE-22
Path Traversal
CVE-2012-4958 2024-11-21 10:43 2012-11-19 Show GitHub Exploit DB Packet Storm
297184 - novell file_reporter Absolute path traversal vulnerability in NFRAgent.exe in Novell File Reporter 1.0.2 allows remote attackers to read arbitrary files via a /FSF/CMD request with a full pathname in a PATH element of an… CWE-22
Path Traversal
CVE-2012-4957 2024-11-21 10:43 2012-11-19 Show GitHub Exploit DB Packet Storm
297185 - novell file_reporter Heap-based buffer overflow in NFRAgent.exe in Novell File Reporter 1.0.2 allows remote attackers to execute arbitrary code via a large number of VOL elements in an SRS record. CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2012-4956 2024-11-21 10:43 2012-11-19 Show GitHub Exploit DB Packet Storm
297186 - pgbouncer_project pgbouncer The add_database function in objects.c in the pgbouncer pooler 1.5.2 for PostgreSQL allows remote attackers to cause a denial of service (daemon outage) via a long database name in a request. CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2012-4575 2024-11-21 10:43 2012-11-19 Show GitHub Exploit DB Packet Storm
297187 - emc rsa_data_protection_manager_appliance EMC RSA Data Protection Manager Appliance 2.7.x and 3.x before 3.2.1 does not properly restrict the number of authentication attempts by a user account, which makes it easier for local users to bypas… CWE-287
Improper Authentication
CVE-2012-4613 2024-11-21 10:43 2012-11-16 Show GitHub Exploit DB Packet Storm
297188 - emc rsa_data_protection_manager_appliance
rsa_data_protection_manager_software_server
Cross-site scripting (XSS) vulnerability in EMC RSA Data Protection Manager Appliance and Software Server 2.7.x and 3.x before 3.2.1 allows remote attackers to inject arbitrary web script or HTML via… CWE-79
Cross-site Scripting
CVE-2012-4612 2024-11-21 10:43 2012-11-16 Show GitHub Exploit DB Packet Storm
297189 - dell openmanage_server_administrator Cross-site scripting (XSS) vulnerability in Dell OpenManage Server Administrator (OMSA) before 6.5.0.1, 7.0 before 7.0.0.1, and 7.1 before 7.1.0.1 allows remote attackers to inject arbitrary web scri… CWE-79
Cross-site Scripting
CVE-2012-4955 2024-11-21 10:43 2012-11-15 Show GitHub Exploit DB Packet Storm
297190 - vanillaforums vanilla_forums
vanilla
The edit-profile page in Vanilla Forums before 2.1a32 allows remote authenticated users to modify arbitrary profile settings by replacing the UserID value during a man-in-the-middle attack, related t… CWE-264
Permissions, Privileges, and Access Controls
CVE-2012-4954 2024-11-21 10:43 2012-11-15 Show GitHub Exploit DB Packet Storm