Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 12, 2026, 12:02 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
219011 4.9 警告 nongnu - OATH Toolkit の liboath の usersfile.c におけるリプレイ攻撃を実行される脆弱性 CWE-287
不適切な認証 		CVE-2013-7322 2014-03-11 15:15 2013-12-9 Show GitHub Exploit DB Packet Storm
219012 5 警告 Puppet - Puppet Enterprise における重要な情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-4971 2014-03-11 14:43 2013-07-29 Show GitHub Exploit DB Packet Storm
219013 6.4 警告 Puppet - Puppet Enterprise のマスタの外部ノード分類スクリプトにおけるマスタに任意の分類を作成される脆弱性 CWE-287
不適切な認証 		CVE-2013-4966 2014-03-11 14:42 2013-07-29 Show GitHub Exploit DB Packet Storm
219014 6.8 警告 Free Document Management Software - OpenDocMan の ajax_udf.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2014-2317 2014-03-11 14:39 2014-02-24 Show GitHub Exploit DB Packet Storm
219015 7.5 危険 Free Document Management Software - OpenDocMan の ajax_udf.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2014-1945 2014-03-11 14:39 2014-02-24 Show GitHub Exploit DB Packet Storm
219016 4.3 警告 ilch.de - Ilch CMS におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-1944 2014-03-11 14:38 2014-02-19 Show GitHub Exploit DB Packet Storm
219017 4.3 警告 Engineering Ingegneria Informatica - SpagoBI におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-6233 2014-03-11 14:37 2013-12-16 Show GitHub Exploit DB Packet Storm
219018 3.5 注意 Engineering Ingegneria Informatica - SpagoBI におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-6232 2014-03-11 14:36 2013-12-16 Show GitHub Exploit DB Packet Storm
219019 4.3 警告 Sprint
Airvana LP		 - Airvana HubBub C1-600-RT および Sprint AIRAVE の管理ページにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-2270 2014-03-11 14:19 2013-02-27 Show GitHub Exploit DB Packet Storm
219020 5 警告 IBM - IBM Cognos Business Intelligence のサーバにおける任意のファイルを読まれる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2014-0854 2014-03-10 18:40 2014-02-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 12, 2026, 5:06 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
294781 - yaml-fuer-drupal linkchecker includes/linkchecker.pages.inc in the Link checker module 6.x-2.x before 6.x-2.5 for Drupal does not properly enforce access permissions on broken links, which allows remote attackers to obtain sensi… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2012-1642 2024-11-21 10:37 2012-08-29 Show GitHub Exploit DB Packet Storm
294782 - danielb finder The finder_import function in the Finder module 6.x-1.x before 6.x-1.26, 7.x-1.x, and 7.x-2.x before 7.x-2.0-alpha8 for Drupal allows remote authenticated users with the administer finder permission … CWE-264
Permissions, Privileges, and Access Controls 		CVE-2012-1641 2024-11-21 10:37 2012-08-29 Show GitHub Exploit DB Packet Storm
294783 - rik_de_boer revisioning The hook_node_access function in the revisioning module 7.x-1.x before 7.x-1.3 for Drupal checks the permissions of the current user even when it is called to check permissions of other users, which … CWE-264
Permissions, Privileges, and Access Controls 		CVE-2012-1635 2024-11-21 10:37 2012-08-29 Show GitHub Exploit DB Packet Storm
294784 - debian cifs-utils mount.cifs in cifs-utils 2.6 allows local users to determine the existence of arbitrary files or directories via the file path in the second argument, which reveals their existence in an error messag… CWE-200
Information Exposure 		CVE-2012-1586 2024-11-21 10:37 2012-08-28 Show GitHub Exploit DB Packet Storm
294785 - ez ezjscore Cross-site scripting (XSS) vulnerability in the textEncode function in classes/ezjscajaxcontent.php in eZ JS Core in eZ Publish before 1.5 allows remote attackers to inject arbitrary web script or HT… CWE-79
Cross-site Scripting 		CVE-2012-1597 2024-11-21 10:37 2012-08-17 Show GitHub Exploit DB Packet Storm
294786 - openstack nova OpenStack Compute (Nova) Essex before 2011.3 allows remote authenticated users to cause a denial of service (Nova-API log file and disk consumption) via a long server name. CWE-399
 Resource Management Errors 		CVE-2012-1585 2024-11-21 10:37 2012-08-17 Show GitHub Exploit DB Packet Storm
294787 - adobe acrobat
acrobat_reader 		Heap-based buffer overflow in Adobe Reader and Acrobat 9.x before 9.5.2 and 10.x before 10.1.4 on Windows and Mac OS X allows attackers to execute arbitrary code via unspecified vectors. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2012-1525 2024-11-21 10:37 2012-08-15 Show GitHub Exploit DB Packet Storm
294788 - microsoft visio_viewer
visio 		Buffer overflow in Microsoft Visio 2010 SP1 and Visio Viewer 2010 SP1 allows remote attackers to execute arbitrary code via a crafted Visio file, aka "Visio DXF File Format Buffer Overflow Vulnerabil… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2012-1888 2024-11-21 10:37 2012-08-15 Show GitHub Exploit DB Packet Storm
294789 - microsoft windows_xp Stack-based buffer overflow in the Remote Administration Protocol (RAP) implementation in the LanmanWorkstation service in Microsoft Windows XP SP3 allows remote attackers to execute arbitrary code v… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2012-1853 2024-11-21 10:37 2012-08-15 Show GitHub Exploit DB Packet Storm
294790 - microsoft windows_xp Heap-based buffer overflow in the Remote Administration Protocol (RAP) implementation in the LanmanWorkstation service in Microsoft Windows XP SP2 and SP3 allows remote attackers to execute arbitrary… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2012-1852 2024-11-21 10:37 2012-08-15 Show GitHub Exploit DB Packet Storm