Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 11, 2026, 6:01 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
218971 4.3 警告 Sprint
Airvana LP
- Airvana HubBub C1-600-RT および Sprint AIRAVE の管理ページにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-2270 2014-03-11 14:19 2013-02-27 Show GitHub Exploit DB Packet Storm
218972 5 警告 IBM - IBM Cognos Business Intelligence のサーバにおける任意のファイルを読まれる脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-0854 2014-03-10 18:40 2014-02-14 Show GitHub Exploit DB Packet Storm
218973 7.1 危険 シスコシステムズ - Cisco IPS ソフトウェアの produce-verbose-alert 機能におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2014-0718 2014-03-10 18:40 2014-02-19 Show GitHub Exploit DB Packet Storm
218974 7.1 危険 シスコシステムズ - Cisco IPS ソフトウェアにおけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2014-0720 2014-03-10 18:39 2014-02-19 Show GitHub Exploit DB Packet Storm
218975 4 警告 MySQL AB
オラクル
- Oracle MySQL の MySQL Server における Optimizer に関する脆弱性 CWE-noinfo
情報不足
CVE-2014-0386 2014-03-10 17:11 2014-01-14 Show GitHub Exploit DB Packet Storm
218976 4.3 警告 OpenStack - OpenStack Object Storage の TempURL ミドルウェアにおける秘密の URL を取得される脆弱性 CWE-200
情報漏えい
CVE-2014-0006 2014-03-10 17:06 2014-01-16 Show GitHub Exploit DB Packet Storm
218977 7.5 危険 MariaDB Corporation Ab.
オラクル
- Oracle MySQL および MariaDB の client/mysql.cc におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2014-0001 2014-03-10 17:06 2014-01-29 Show GitHub Exploit DB Packet Storm
218978 1.9 注意 Linux - Linux Kernel の net/core/rtnetlink.c における重要な情報を取得される脆弱性 CWE-399
リソース管理の問題
CVE-2013-2635 2014-03-10 17:02 2013-03-20 Show GitHub Exploit DB Packet Storm
218979 4.9 警告 Linux - Linux Kernel の net/atm/common.c における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2013-3222 2014-03-10 17:02 2013-04-7 Show GitHub Exploit DB Packet Storm
218980 4.9 警告 Linux - Linux Kernel の net/bluetooth/af_bluetooth.c における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2013-3224 2014-03-10 17:01 2013-04-7 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 11, 2026, 4:09 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
292631 - altrasoft site_uptime_enterprise Cross-site request forgery (CSRF) vulnerability in commonsettings.php in AlstraSoft Site Uptime Enterprise, possibly 5.4, allows remote attackers to hijack the authentication of administrators. CWE-352
 Origin Validation Error
CVE-2012-4326 2024-11-21 10:42 2012-08-15 Show GitHub Exploit DB Packet Storm
292632 - utopiasoftware news_pro Cross-site request forgery (CSRF) vulnerability in upload/users.php in Utopia News Pro (UNP) 1.4.0 and earlier allows remote attackers to hijack the authentication of administrators for requests that… CWE-352
 Origin Validation Error
CVE-2012-4325 2024-11-21 10:42 2012-08-15 Show GitHub Exploit DB Packet Storm
292633 - phpjabbers vacation_rental_script Cross-site request forgery (CSRF) vulnerability in PHPJabbers Vacation Rental Script allows remote attackers to hijack the authentication of administrators for requests that add administrator account… CWE-352
 Origin Validation Error
CVE-2012-4324 2024-11-21 10:42 2012-08-15 Show GitHub Exploit DB Packet Storm
292634 - netweblogic login_with_ajax Cross-site scripting (XSS) vulnerability in the Login With Ajax plugin before 3.0.4.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the callback parameter. CWE-79
Cross-site Scripting
CVE-2012-4283 2024-11-21 10:42 2012-08-14 Show GitHub Exploit DB Packet Storm
292635 - toocharger trombinoscope SQL injection vulnerability in photo.php in Trombinoscope 3.5 allows remote attackers to execute arbitrary SQL commands via the id parameter. CWE-89
SQL Injection
CVE-2012-4282 2024-11-21 10:42 2012-08-14 Show GitHub Exploit DB Packet Storm
292636 - itechscripts travelon_express Multiple SQL injection vulnerabilities in Travelon Express 6.2.2 allow remote attackers to execute arbitrary SQL commands via the hid parameter to (1) holiday.php or (2) holiday_book.php, (3) id para… CWE-89
SQL Injection
CVE-2012-4281 2024-11-21 10:42 2012-08-14 Show GitHub Exploit DB Packet Storm
292637 - rwcinc free_realty Multiple cross-site request forgery (CSRF) vulnerabilities in admin/agenteditor.php in Free Realty 3.1-0.6 allow remote attackers to hijack the authentication of administrators for requests that (1) … CWE-352
 Origin Validation Error
CVE-2012-4280 2024-11-21 10:42 2012-08-14 Show GitHub Exploit DB Packet Storm
292638 - rwcinc free_realty Multiple SQL injection vulnerabilities in Free Realty 3.1-0.6 allow remote attackers to execute arbitrary SQL commands via the (1) view parameter to agentdisplay.php or (2) edit parameter to admin/ad… CWE-89
SQL Injection
CVE-2012-4279 2024-11-21 10:42 2012-08-14 Show GitHub Exploit DB Packet Storm
292639 - rwcinc free_realty Multiple cross-site scripting (XSS) vulnerabilities in Free Realty 3.1-0.6 allow remote attackers to inject arbitrary web script or HTML via the (1) notes parameter to (a) admin/agenteditor.php; (2) … CWE-79
Cross-site Scripting
CVE-2012-4278 2024-11-21 10:42 2012-08-14 Show GitHub Exploit DB Packet Storm
292640 - smarty smarty Cross-site scripting (XSS) vulnerability in the smarty_function_html_options_optoutput function in distribution/libs/plugins/function.html_options.php in Smarty before 3.1.8 allows remote attackers t… CWE-79
Cross-site Scripting
CVE-2012-4277 2024-11-21 10:42 2012-08-14 Show GitHub Exploit DB Packet Storm