Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 29, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
218911 9.3 危険 Trimble - Timbre SketchUp における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2013-3662 2014-07-3 17:55 2013-05-23 Show GitHub Exploit DB Packet Storm
218912 6.8 警告 シスコシステムズ - Cisco Small Cell 製品上で稼働する Universal Small Cell ファームウェアの DHCP クライアントの実装における任意のコマンドを実行される脆弱性 CWE-Other
その他
CVE-2014-3307 2014-07-3 17:40 2014-07-1 Show GitHub Exploit DB Packet Storm
218913 4 警告 シスコシステムズ - Cisco Cloud Portal の Cisco Intelligent Automation for Cloud の Form Data Viewer における重要な情報を取得される脆弱性 CWE-255
証明書・パスワード管理
CVE-2014-3298 2014-07-3 17:39 2014-07-1 Show GitHub Exploit DB Packet Storm
218914 7.2 危険 IBM - IBM AIX および VIOS の runtime linker における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-3074 2014-07-3 16:28 2014-06-30 Show GitHub Exploit DB Packet Storm
218915 3.5 注意 IBM - IBM Tivoli Application Dependency Discovery Manager の BIRT-Report Viewer におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2013-3004 2014-07-3 16:26 2013-04-12 Show GitHub Exploit DB Packet Storm
218916 4.3 警告 KDE project - kdelibs の POP3 kioslave の kio/usernotificationhandler.cpp における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2014-3494 2014-07-3 16:25 2014-06-17 Show GitHub Exploit DB Packet Storm
218917 4.3 警告 The Foreman - Foreman のホストの YAML ビューにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-3492 2014-07-3 16:17 2014-06-11 Show GitHub Exploit DB Packet Storm
218918 4.3 警告 The Foreman - Foreman におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-3491 2014-07-3 16:17 2014-06-10 Show GitHub Exploit DB Packet Storm
218919 4.3 警告 XEN Carousel plugin project - WordPress 用 XEN Carousel プラグインの xencarousel-admin.js.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-4602 2014-07-3 15:56 2014-05-28 Show GitHub Exploit DB Packet Storm
218920 4.3 警告 MNT-TECH - WordPress 用 WP-FaceThumb プラグインにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-4585 2014-07-3 15:56 2014-06-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 29, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
296791 - c61 tokyo_bbs Cross-site scripting (XSS) vulnerability in tokyo_bbs.cgi in Come on Girls Interface (CGI) Tokyo BBS allows remote attackers to inject arbitrary web script or HTML via vectors related to the error pa… CWE-79
Cross-site Scripting
CVE-2012-4019 2024-11-21 10:42 2012-10-26 Show GitHub Exploit DB Packet Storm
296792 - mozilla
suse
opensuse
canonical
redhat
firefox
seamonkey
thunderbird
thunderbird_esr
linux_enterprise_server
linux_enterprise_desktop
opensuse
linux_enterprise_software_development_kit
ubuntu_linux
enterprise_li…
Mozilla Firefox before 16.0.2, Firefox ESR 10.x before 10.0.10, Thunderbird before 16.0.2, Thunderbird ESR 10.x before 10.0.10, and SeaMonkey before 2.13.2 allow remote attackers to bypass the Same O… CWE-74
Injection
CVE-2012-4196 2024-11-21 10:42 2012-10-30 Show GitHub Exploit DB Packet Storm
296793 - mozilla
suse
opensuse
canonical
redhat
firefox
seamonkey
thunderbird
thunderbird_esr
linux_enterprise_server
linux_enterprise_desktop
opensuse
linux_enterprise_software_development_kit
ubuntu_linux
enterprise_li…
The nsLocation::CheckURL function in Mozilla Firefox before 16.0.2, Firefox ESR 10.x before 10.0.10, Thunderbird before 16.0.2, Thunderbird ESR 10.x before 10.0.10, and SeaMonkey before 2.13.2 does n… CWE-79
Cross-site Scripting
CVE-2012-4195 2024-11-21 10:42 2012-10-30 Show GitHub Exploit DB Packet Storm
296794 - mozilla
suse
opensuse
canonical
redhat
firefox
seamonkey
thunderbird
thunderbird_esr
linux_enterprise_server
linux_enterprise_desktop
opensuse
linux_enterprise_software_development_kit
ubuntu_linux
enterprise_li…
Mozilla Firefox before 16.0.2, Firefox ESR 10.x before 10.0.10, Thunderbird before 16.0.2, Thunderbird ESR 10.x before 10.0.10, and SeaMonkey before 2.13.2 do not prevent use of the valueOf method to… CWE-79
Cross-site Scripting
CVE-2012-4194 2024-11-21 10:42 2012-10-30 Show GitHub Exploit DB Packet Storm
296795 - adobe shockwave_player Array index error in Adobe Shockwave Player before 11.6.8.638 allows attackers to execute arbitrary code via unspecified vectors. CWE-20
 Improper Input Validation 
CVE-2012-4176 2024-11-21 10:42 2012-10-24 Show GitHub Exploit DB Packet Storm
296796 - adobe shockwave_player Buffer overflow in Adobe Shockwave Player before 11.6.8.638 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2012-4172, CVE-2012-4173, CVE-2012-4… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2012-4175 2024-11-21 10:42 2012-10-24 Show GitHub Exploit DB Packet Storm
296797 - adobe shockwave_player Buffer overflow in Adobe Shockwave Player before 11.6.8.638 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2012-4172, CVE-2012-4173, CVE-2012-4… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2012-4174 2024-11-21 10:42 2012-10-24 Show GitHub Exploit DB Packet Storm
296798 - adobe shockwave_player Buffer overflow in Adobe Shockwave Player before 11.6.8.638 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2012-4172, CVE-2012-4174, CVE-2012-4… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2012-4173 2024-11-21 10:42 2012-10-24 Show GitHub Exploit DB Packet Storm
296799 - adobe shockwave_player Buffer overflow in Adobe Shockwave Player before 11.6.8.638 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2012-4173, CVE-2012-4174, CVE-2012-4… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2012-4172 2024-11-21 10:42 2012-10-24 Show GitHub Exploit DB Packet Storm
296800 - cipherdyne fwknop Buffer overflow in the run_last_args function in client/fwknop.c in fwknop before 2.0.3, when processing --last, might allow local users to cause a denial of service (client crash) and possibly execu… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2012-4436 2024-11-21 10:42 2012-10-23 Show GitHub Exploit DB Packet Storm