Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 10, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
218961 7.5 危険 Parcimonie Project - parcimonie におけるキーフェッチを関連付けられる脆弱性 CWE-362
競合状態
CVE-2014-1921 2014-02-19 14:22 2014-02-7 Show GitHub Exploit DB Packet Storm
218962 4.3 警告 LiveZilla - LiveZilla の Web ベースのオペレータークライアントにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-7032 2014-02-19 14:17 2013-12-10 Show GitHub Exploit DB Packet Storm
218963 7.5 危険 Irfan Skiljan - IrfanView におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2013-5351 2014-02-19 14:07 2013-12-16 Show GitHub Exploit DB Packet Storm
218964 1.9 注意 レッドハット - Red Hat JBoss Enterprise Application Platform および JBoss WildFly Application Server におけるサーバを変更される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-0018 2014-02-19 14:03 2014-02-13 Show GitHub Exploit DB Packet Storm
218965 4.3 警告 Bean Project - Drupal 用 Bean モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-4499 2014-02-19 14:02 2013-10-23 Show GitHub Exploit DB Packet Storm
218966 7.5 危険 Linux NFS - nfs-utils の support/export/hostname.c の host_reliable_addrinfo 関数におけるファイルシステムをマウントされる脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2011-2500 2014-02-19 14:00 2011-06-30 Show GitHub Exploit DB Packet Storm
218967 4.3 警告 SAP - SAP NetWeaver 用 SAP Exchange Infrastructure コンポーネントにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-1965 2014-02-19 13:52 2014-01-25 Show GitHub Exploit DB Packet Storm
218968 4.3 警告 SAP - SAP NetWeaver の Exchange Infrastructure コンポーネントにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-1964 2014-02-19 13:51 2014-01-25 Show GitHub Exploit DB Packet Storm
218969 5 警告 SAP - SAP NetWeaver の Message Server におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足
CVE-2014-1963 2014-02-19 13:50 2014-01-25 Show GitHub Exploit DB Packet Storm
218970 5 警告 SAP - SAP CRM の Gwsync における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2014-1962 2014-02-19 13:50 2014-01-25 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 11, 2026, 4:09 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
294811 - netmechanica netdecision The Traffic Grapher Server for NetMechanica NetDecision before 4.6.1 allows remote attackers to obtain the source code of NtDecision script files with a .nd extension via an invalid version number in… CWE-200
Information Exposure
CVE-2012-1466 2024-11-21 10:37 2012-03-20 Show GitHub Exploit DB Packet Storm
294812 - netmechanica netdecision Stack-based buffer overflow in the HTTP Server in NetMechanica NetDecision before 4.6.1 allows remote attackers to cause a denial of service (application crash) via a long URL in an HTTP request. NO… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2012-1465 2024-11-21 10:37 2012-03-20 Show GitHub Exploit DB Packet Storm
294813 - netmechanica netdecision Dashboard Server for NetMechanica NetDecision before 4.6.1 allows remote attackers to obtain the installation path via a request with a trailing "?" character, which causes Dashboard to attempt to ac… CWE-200
Information Exposure
CVE-2012-1464 2024-11-21 10:37 2012-03-20 Show GitHub Exploit DB Packet Storm
294814 - webgrind_project webgrind Absolute path traversal vulnerability in Webgrind 1.0 and 1.0.2 allows remote attackers to read arbitrary files via a full pathname in the file parameter to index.php. CWE-22
Path Traversal
CVE-2012-1790 2024-11-21 10:37 2012-03-20 Show GitHub Exploit DB Packet Storm
294815 - tskynet kongreg8 Multiple cross-site scripting (XSS) vulnerabilities in Kongreg8 1.7.3 allow remote attackers to inject arbitrary web script or HTML via the (1) surname or (2) firstname parameters to modules/members/… CWE-79
Cross-site Scripting
CVE-2012-1789 2024-11-21 10:37 2012-03-20 Show GitHub Exploit DB Packet Storm
294816 - wonderdesk wonderdesk_sql Multiple cross-site scripting (XSS) vulnerabilities in wonderdesk.cgi in WonderDesk SQL 4.14 allow remote attackers to inject arbitrary web script or HTML via the (1) cus_email parameter in a cust_lo… CWE-79
Cross-site Scripting
CVE-2012-1788 2024-11-21 10:37 2012-03-20 Show GitHub Exploit DB Packet Storm
294817 - webglimpse webglimpse Multiple cross-site scripting (XSS) vulnerabilities in wgarcmin.cgi in Webglimpse 2.20.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) URL, (2) FILE, or (3) DO… CWE-79
Cross-site Scripting
CVE-2012-1787 2024-11-21 10:37 2012-03-20 Show GitHub Exploit DB Packet Storm
294818 - kylegilman video_embed_\&_thumbnail_generator The Media Upload form in the Video Embed & Thumbnail Generator plugin before 2.0 for WordPress allows remote attackers to obtain the installation path via unknown vectors. CWE-200
Information Exposure
CVE-2012-1786 2024-11-21 10:37 2012-03-20 Show GitHub Exploit DB Packet Storm
294819 - kylegilman video_embed_\&_thumbnail_generator kg_callffmpeg.php in the Video Embed & Thumbnail Generator plugin before 2.0 for WordPress allows remote attackers to execute arbitrary commands via unspecified vectors. CWE-20
 Improper Input Validation 
CVE-2012-1785 2024-11-21 10:37 2012-03-20 Show GitHub Exploit DB Packet Storm
294820 - myjoblist myjoblist SQL injection vulnerability in MyJobList 0.1.3 allows remote attackers to execute arbitrary SQL commands via the eid parameter in a profile action to index.php. CWE-89
SQL Injection
CVE-2012-1784 2024-11-21 10:37 2012-03-20 Show GitHub Exploit DB Packet Storm