Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 20, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
219301 7.5 危険 PaperThin - PaperThin CommonSpot における ColdFusion コードの実行フローを変更される脆弱性脆弱性 CWE-Other
その他 		CVE-2014-2868 2014-04-21 19:01 2014-04-14 Show GitHub Exploit DB Packet Storm
219302 10 危険 PaperThin - PaperThin CommonSpot における任意のコードを実行される脆弱性脆弱性 CWE-Other
その他 		CVE-2014-2867 2014-04-21 19:01 2014-04-14 Show GitHub Exploit DB Packet Storm
219303 10 危険 PaperThin - PaperThin CommonSpot における任意のコードを実行される脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2014-2874 2014-04-21 19:01 2014-04-14 Show GitHub Exploit DB Packet Storm
219304 5 警告 PaperThin - PaperThin CommonSpot における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2014-2873 2014-04-21 19:01 2014-04-14 Show GitHub Exploit DB Packet Storm
219305 5 警告 PaperThin - PaperThin CommonSpot におけるディレクトリ一覧から重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2014-2872 2014-04-21 19:01 2014-04-14 Show GitHub Exploit DB Packet Storm
219306 6.5 警告 PaperThin - PaperThin CommonSpot におけるアクションを実行される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2014-2862 2014-04-21 19:01 2014-04-14 Show GitHub Exploit DB Packet Storm
219307 5 警告 PaperThin - PaperThin CommonSpot における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2014-2871 2014-04-21 19:01 2014-04-14 Show GitHub Exploit DB Packet Storm
219308 4.3 警告 PaperThin - PaperThin CommonSpot におけるクロスサイトスクリプティングの脆弱性 CWE-Other
その他 		CVE-2014-2861 2014-04-21 19:01 2014-04-14 Show GitHub Exploit DB Packet Storm
219309 4.3 警告 PaperThin - PaperThin CommonSpot におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-2860 2014-04-21 19:01 2014-04-14 Show GitHub Exploit DB Packet Storm
219310 7.5 危険 PaperThin - PaperThin CommonSpot におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2014-2859 2014-04-21 19:01 2014-04-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 20, 2026, 4:14 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
294241 - bestpractical rtfm FAQ manager for Request Tracker (RTFM) before 2.4.5 does not properly check user rights, which allows remote authenticated users to create arbitrary articles in arbitrary classes via unknown vectors. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2012-4731 2024-11-21 10:43 2012-11-11 Show GitHub Exploit DB Packet Storm
294242 - bestpractical rt Request Tracker (RT) 3.8.x before 3.8.15 and 4.0.x before 4.0.8 allows remote authenticated users with ModifySelf or AdminUser privileges to inject arbitrary email headers and conduct phishing attack… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2012-4730 2024-11-21 10:43 2012-11-11 Show GitHub Exploit DB Packet Storm
294243 - openstack image_registry_and_delivery_service_\(glance\)
essex
folsom 		The v1 API in OpenStack Glance Grizzly, Folsom (2012.2), and Essex (2012.1) allows remote authenticated users to delete arbitrary non-protected images via an image deletion request, a different vulne… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2012-4573 2024-11-21 10:43 2012-11-11 Show GitHub Exploit DB Packet Storm
294244 - libtiff
debian
canonical
redhat
opensuse 		libtiff
debian_linux
ubuntu_linux
enterprise_linux_server
enterprise_linux_workstation
enterprise_linux_desktop
enterprise_linux_eus
opensuse 		ppm2tiff does not check the return value of the TIFFScanlineSize function, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted PPM ima… NVD-CWE-Other
CVE-2012-4564 2024-11-21 10:43 2012-11-11 Show GitHub Exploit DB Packet Storm
294245 - drupal drupal The OpenID module in Drupal 7.x before 7.16 allows remote OpenID servers to read arbitrary files via a crafted DOCTYPE declaration in an XRDS file. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2012-4554 2024-11-21 10:43 2012-11-11 Show GitHub Exploit DB Packet Storm
294246 - drupal drupal Drupal 7.x before 7.16 allows remote attackers to obtain sensitive information and possibly re-install Drupal and execute arbitrary PHP code via an external database server, related to "transient con… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2012-4553 2024-11-21 10:43 2012-11-11 Show GitHub Exploit DB Packet Storm
294247 - lars_hjemli cgit Argument injection vulnerability in syntax-highlighting.sh in cgit 9.0.3 and earlier allows remote authenticated users with permissions to add files to execute arbitrary commands via the --plug-in ar… NVD-CWE-Other
CVE-2012-4548 2024-11-21 10:43 2012-11-11 Show GitHub Exploit DB Packet Storm
294248 - opensuse
redhat 		opensuse
icedtea-web 		Off-by-one error in the invoke function in IcedTeaScriptablePluginObject.cc in IcedTea-Web 1.1.x before 1.1.7, 1.2.x before 1.2.2, 1.3.x before 1.3.1, and 1.4.x before 1.4.1 allows remote attackers t… CWE-189
Numeric Errors 		CVE-2012-4540 2024-11-21 10:43 2012-11-11 Show GitHub Exploit DB Packet Storm
294249 - kde kde Use-after-free vulnerability in khtml/rendering/render_replaced.cpp in Konqueror in KDE 4.7.3, when the context menu is shown, allows remote attackers to cause a denial of service (crash) and possibl… CWE-399
 Resource Management Errors 		CVE-2012-4515 2024-11-21 10:43 2012-11-11 Show GitHub Exploit DB Packet Storm
294250 - kde kde rendering/render_replaced.cpp in Konqueror in KDE before 4.9.3 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted web page, related to "trying to reuse a fr… NVD-CWE-noinfo
CVE-2012-4514 2024-11-21 10:43 2012-11-11 Show GitHub Exploit DB Packet Storm