Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 16, 2026, 2 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
219291	10	危険	マイクロソフトアドビシステムズ Google	-	Adobe Flash Player および Adobe AIR におけるメモリ二重解放の脆弱性	CWE-399 リソース管理の問題	CVE-2014-0502	2014-03-13 18:24	2014-02-20	Show	GitHub Exploit DB Packet Storm

219292	7.8	危険	マイクロソフトアドビシステムズ Google	-	Adobe Flash Player および Adobe AIR における ASLR 保護メカニズムを回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2014-0499	2014-03-13 18:23	2014-02-20	Show	GitHub Exploit DB Packet Storm

219293	10	危険	マイクロソフトアドビシステムズ Google	-	Adobe Flash Player および Adobe AIR におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2014-0498	2014-03-13 18:19	2014-02-20	Show	GitHub Exploit DB Packet Storm

219294	3.5	注意	MySQL AB オラクル	-	Oracle MySQL の MySQL Server における Optimizer に関する脆弱性	CWE-noinfo 情報不足	CVE-2014-0437	2014-03-13 18:18	2014-01-14	Show	GitHub Exploit DB Packet Storm

219295	10	危険	シスコシステムズ	-	Cisco Unified SIP Phone 3905 のファームウェアにおける root アクセス権を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2014-0721	2014-03-13 17:45	2014-02-19	Show	GitHub Exploit DB Packet Storm

219296	7.5	危険	Raoul Proenca	-	Gnew の users/login.php におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2013-5639	2014-03-13 17:45	2013-10-2	Show	GitHub Exploit DB Packet Storm

219297	7.8	危険	シスコシステムズ	-	Cisco IPS ソフトウェアのコントロールプレーンのアクセスリストの実装におけるサービス運用妨害 (DoS) の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2014-0719	2014-03-13 17:42	2014-02-19	Show	GitHub Exploit DB Packet Storm

219298	4.4	警告	Novell Logilab.org	-	logilab-common の shellutils の Execute クラスにおける脆弱性	CWE-noinfo 情報不足	CVE-2014-1839	2014-03-13 16:43	2014-02-11	Show	GitHub Exploit DB Packet Storm

219299	4.4	警告	Novell Logilab.org	-	logilab-common における任意のファイルを上書きされる脆弱性	CWE-59 リンク解釈の問題	CVE-2014-1838	2014-03-13 16:42	2014-02-11	Show	GitHub Exploit DB Packet Storm

219300	7.5	危険	MODX	-	MODX Revolution の modx.class.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2014-2311	2014-03-13 16:42	2014-03-7	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 16, 2026, 4 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
295881	-		atmail	atmail_open	@Mail WebMail Client in AtMail Open-Source 1.04 and earlier allows remote attackers to obtain configuration information via a direct request to install/info.php, which calls the phpinfo function.	CWE-200 Information Exposure	CVE-2012-1920	2024-11-21 10:38	2012-03-28	Show	GitHub Exploit DB Packet Storm

295882	-		atmail	atmail_open	CRLF injection vulnerability in mime.php in @Mail WebMail Client in AtMail Open-Source before 1.05 allows remote attackers to conduct directory traversal attacks and read arbitrary files via a %0A se…	CWE-94 Code Injection	CVE-2012-1919	2024-11-21 10:38	2012-03-28	Show	GitHub Exploit DB Packet Storm

295883	-		atmail	atmail_open	Multiple directory traversal vulnerabilities in (1) compose.php and (2) libs/Atmail/SendMsg.php in @Mail WebMail Client in AtMail Open-Source before 1.05 allow remote attackers to read arbitrary file…	CWE-22 Path Traversal	CVE-2012-1918	2024-11-21 10:38	2012-03-28	Show	GitHub Exploit DB Packet Storm

295884	-		atmail	atmail_open	compose.php in @Mail WebMail Client in AtMail Open-Source before 1.05 does not properly handle ../ (dot dot slash) sequences in the unique parameter, which allows remote attackers to conduct director…	CWE-22 Path Traversal	CVE-2012-1917	2024-11-21 10:38	2012-03-28	Show	GitHub Exploit DB Packet Storm

295885	-		atmail	atmail_open	@Mail WebMail Client in AtMail Open-Source before 1.05 allows remote attackers to execute arbitrary code via an e-mail attachment with an executable extension, leading to the creation of an executabl…	NVD-CWE-Other	CVE-2012-1916	2024-11-21 10:38	2012-03-28	Show	GitHub Exploit DB Packet Storm

295886	5.4	MEDIUM Network	atlassian	jira greenhopper	Stored XSS vulnerability in UpdateFieldJson.jspa in JIRA 4.4.3 and GreenHopper before 5.9.8 allows an attacker to inject arbitrary script code.	CWE-79 Cross-site Scripting	CVE-2012-1500	2024-11-21 10:37	2020-02-14	Show	GitHub Exploit DB Packet Storm

295887	7.5	HIGH Network	linuxmint	linuxmint	LinuxMint as of 2012-03-19 has temporary file creation vulnerabilities in mintUpdate.	NVD-CWE-noinfo	CVE-2012-1567	2024-11-21 10:37	2020-02-7	Show	GitHub Exploit DB Packet Storm

295888	7.5	HIGH Network	linuxmint	linuxmint	LinuxMint as of 2012-03-19 has temporary file creation vulnerabilities in mintNanny.	NVD-CWE-noinfo	CVE-2012-1566	2024-11-21 10:37	2020-02-7	Show	GitHub Exploit DB Packet Storm

295889	8.8	HIGH Network	webcalendar_project	webcalendar	Local file inclusion in WebCalendar before 1.2.5.	CWE-74 Injection	CVE-2012-1496	2024-11-21 10:37	2020-01-28	Show	GitHub Exploit DB Packet Storm

295890	9.8	CRITICAL Network	webcalendar_project	webcalendar	install/index.php in WebCalendar before 1.2.5 allows remote attackers to execute arbitrary code via the form_single_user_login parameter.	CWE-74 Injection	CVE-2012-1495	2024-11-21 10:37	2020-01-28	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed