Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 13, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
219151 4.3 警告 SFR - SFR Box ルータのファームウェアにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-1599 2014-03-11 15:46 2014-02-25 Show GitHub Exploit DB Packet Storm
219152 4.3 警告 Atlassian - Atlassian JIRA の Issue Collector プラグインにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2014-2314 2014-03-11 15:26 2014-02-26 Show GitHub Exploit DB Packet Storm
219153 4.3 警告 Atlassian - Atlassian JIRA の Importers プラグインにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2014-2313 2014-03-11 15:26 2014-02-26 Show GitHub Exploit DB Packet Storm
219154 4.9 警告 nongnu - OATH Toolkit の liboath の usersfile.c におけるリプレイ攻撃を実行される脆弱性 CWE-287
不適切な認証 		CVE-2013-7322 2014-03-11 15:15 2013-12-9 Show GitHub Exploit DB Packet Storm
219155 5 警告 Puppet - Puppet Enterprise における重要な情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-4971 2014-03-11 14:43 2013-07-29 Show GitHub Exploit DB Packet Storm
219156 6.4 警告 Puppet - Puppet Enterprise のマスタの外部ノード分類スクリプトにおけるマスタに任意の分類を作成される脆弱性 CWE-287
不適切な認証 		CVE-2013-4966 2014-03-11 14:42 2013-07-29 Show GitHub Exploit DB Packet Storm
219157 6.8 警告 Free Document Management Software - OpenDocMan の ajax_udf.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2014-2317 2014-03-11 14:39 2014-02-24 Show GitHub Exploit DB Packet Storm
219158 7.5 危険 Free Document Management Software - OpenDocMan の ajax_udf.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2014-1945 2014-03-11 14:39 2014-02-24 Show GitHub Exploit DB Packet Storm
219159 4.3 警告 ilch.de - Ilch CMS におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-1944 2014-03-11 14:38 2014-02-19 Show GitHub Exploit DB Packet Storm
219160 4.3 警告 Engineering Ingegneria Informatica - SpagoBI におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-6233 2014-03-11 14:37 2013-12-16 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 13, 2026, 5:05 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
295771 - mit kerberos_5 server/server_stubs.c in the kadmin protocol implementation in MIT Kerberos 5 (aka krb5) 1.10 before 1.10.1 does not properly restrict access to (1) SET_STRING and (2) GET_STRINGS operations, which m… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2012-1012 2024-11-21 10:36 2012-06-8 Show GitHub Exploit DB Packet Storm
295772 - sony vaio_easy_connect
smartwi_connection_utillity
vaio_wireless_wizard
vaio_pc_wireless_lan_wizard 		Multiple buffer overflows in the Wireless Manager ActiveX control 4.0.0.0 in WifiMan.dll in Sony VAIO PC Wireless LAN Wizard 1.0; VAIO Wireless Wizard 1.00, 1.00_64, 1.0.1, 2.0, and 3.0; SmartWi Conn… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2012-0985 2024-11-21 10:36 2012-06-8 Show GitHub Exploit DB Packet Storm
295773 5.5 MEDIUM
Local 		imagemagick
debian
canonical
opensuse 		imagemagick
debian_linux
ubuntu_linux
opensuse 		Integer overflow in the SyncImageProfiles function in profile.c in ImageMagick 6.7.5-8 and earlier allows remote attackers to cause a denial of service (infinite loop) via crafted IOP tag offsets in … CWE-835
 Loop with Unreachable Exit Condition ('Infinite Loop') 		CVE-2012-1186 2024-11-21 10:36 2012-06-6 Show GitHub Exploit DB Packet Storm
295774 7.8 HIGH
Local 		imagemagick
debian
canonical
opensuse 		imagemagick
debian_linux
ubuntu_linux
opensuse 		Multiple integer overflows in (1) magick/profile.c or (2) magick/property.c in ImageMagick 6.7.5 and earlier allow remote attackers to cause a denial of service (memory corruption) and possibly execu… CWE-190
 Integer Overflow or Wraparound 		CVE-2012-1185 2024-11-21 10:36 2012-06-6 Show GitHub Exploit DB Packet Storm
295775 - libtiff libtiff Multiple integer overflows in tiff_getimage.c in LibTIFF 3.9.4 allow remote attackers to execute arbitrary code via a crafted tile size in a TIFF file, which is not properly handled by the (1) gtTile… CWE-189
Numeric Errors 		CVE-2012-1173 2024-11-21 10:36 2012-06-5 Show GitHub Exploit DB Packet Storm
295776 - sebastian_heinlein
canonical 		aptdaemon
ubuntu_linux 		Aptdaemon 0.43 and earlier in Ubuntu 11.04, 11.10, and 12.04 LTS does not authenticate packages when the transaction is not simulated, which allows remote attackers to install arbitrary packages via … CWE-287
Improper Authentication 		CVE-2012-0944 2024-11-21 10:36 2012-06-5 Show GitHub Exploit DB Packet Storm
295777 - segue_project segue SQL injection vulnerability in Segue 2.2.10.2 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified vectors. CWE-89
SQL Injection 		CVE-2012-1255 2024-11-21 10:36 2012-06-5 Show GitHub Exploit DB Packet Storm
295778 - segue_project segue Cross-site scripting (XSS) vulnerability in Segue 2.2.10.2 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. CWE-79
Cross-site Scripting 		CVE-2012-1254 2024-11-21 10:36 2012-06-5 Show GitHub Exploit DB Packet Storm
295779 - opera opera_browser Opera before 9.63 does not properly verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. CWE-310
Cryptographic Issues 		CVE-2012-1251 2024-11-21 10:36 2012-06-5 Show GitHub Exploit DB Packet Storm
295780 - logitech lan-w300n\/ru2_firmware Logitec LAN-W300N/R routers with firmware before 2.27 do not properly restrict login access, which allows remote attackers to obtain administrative privileges and modify settings via vectors related … CWE-264
Permissions, Privileges, and Access Controls 		CVE-2012-1250 2024-11-21 10:36 2012-06-5 Show GitHub Exploit DB Packet Storm