Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 3, 2026, noon

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
219371 6.8 警告 Zemanta - WordPress 用 Related Posts プラグインにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2013-3257 2014-06-4 16:07 2013-05-14 Show GitHub Exploit DB Packet Storm
219372 6.8 警告 bufferapp - WordPress 用 Digg Digg プラグインにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2013-3258 2014-06-4 16:07 2013-05-14 Show GitHub Exploit DB Packet Storm
219373 4.3 警告 レッドハット - Red Hat Enterprise Linux OpenStack Platform で使用される OpenStack Heat Templates における任意のパッケージをインストールされる脆弱性 CWE-310
暗号の問題
CVE-2014-0042 2014-06-4 15:52 2014-05-29 Show GitHub Exploit DB Packet Storm
219374 4.3 警告 レッドハット - Red Hat Enterprise Linux OpenStack Platform で使用される OpenStack Heat Templates におけるアップデートを制限される脆弱性 CWE-310
暗号の問題
CVE-2014-0041 2014-06-4 15:51 2014-05-29 Show GitHub Exploit DB Packet Storm
219375 4.3 警告 レッドハット - Red Hat Enterprise Linux OpenStack Platform で使用される OpenStack Heat Templates におけるアップデートを制限される脆弱性 CWE-noinfo
情報不足
CVE-2014-0040 2014-06-4 15:50 2014-05-29 Show GitHub Exploit DB Packet Storm
219376 5 警告 レッドハット - Red Hat Enterprise Linux OpenStack Platform で使用される openstack-foreman-installer におけるアクセス権を取得される脆弱性 CWE-287
不適切な認証
CVE-2013-6470 2014-06-4 15:50 2013-11-4 Show GitHub Exploit DB Packet Storm
219377 7.6 危険 OpenStack
レッドハット
- Red Hat openstack-neutron パッケージのデフォルト設定における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2013-6433 2014-06-4 15:49 2013-12-9 Show GitHub Exploit DB Packet Storm
219378 4 警告 シスコシステムズ - Cisco Unified Communications Domain Manager の VOSS の Web フレームワークにおける重要なユーザ情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-3280 2014-06-4 15:41 2014-05-28 Show GitHub Exploit DB Packet Storm
219379 6.8 警告 DLEVIET - DataLife Engine における Web セッションをハイジャックされる脆弱性 CWE-Other
その他
CVE-2013-7387 2014-06-4 15:24 2013-01-19 Show GitHub Exploit DB Packet Storm
219380 7.5 危険 DLEVIET - DataLife Engine における任意の PHP コードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2013-1412 2014-06-4 15:23 2013-01-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 3, 2026, 4:18 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
296681 - microfocus privileged_user_manager The pa_modify_accounts function in auth.dll in unifid.exe in NetIQ Privileged User Manager 2.3.x before 2.3.1 HF2 does not require authentication for the modifyAccounts method, which allows remote at… CWE-287
Improper Authentication
CVE-2012-5930 2024-11-21 10:45 2012-12-25 Show GitHub Exploit DB Packet Storm
296682 - ibm tivoli_storage_manager_for_space_management Unspecified vulnerability in IBM Tivoli Storage Manager for Space Management (aka TSM HSM) before 6.2.5.0 and 6.3.x before 6.3.1.0 allows remote attackers to read or modify HSM-managed file system ob… NVD-CWE-noinfo
CVE-2012-5954 2024-11-21 10:45 2012-12-21 Show GitHub Exploit DB Packet Storm
296683 - adobe shockwave_player Adobe Shockwave Player through 11.6.8.638 allows remote attackers to trigger installation of arbitrary signed Xtras via a Shockwave movie that contains an Xtra URL, as demonstrated by a URL for an ou… NVD-CWE-Other
CVE-2012-6271 2024-11-21 10:45 2012-12-20 Show GitHub Exploit DB Packet Storm
296684 - adobe shockwave_player Adobe Shockwave Player through 11.6.8.638 allows remote attackers to trigger installation of a Shockwave Player 10.4.0.025 compatibility feature via a crafted HTML document that references Shockwave … NVD-CWE-Other
CVE-2012-6270 2024-11-21 10:45 2012-12-20 Show GitHub Exploit DB Packet Storm
296685 - ibm http_server
websphere_application_server
Unspecified vulnerability in the IBM HTTP Server component 5.3 in IBM WebSphere Application Server (WAS) for z/OS allows remote attackers to execute arbitrary commands via unknown vectors. NVD-CWE-noinfo
CVE-2012-5955 2024-11-21 10:45 2012-12-20 Show GitHub Exploit DB Packet Storm
296686 - ibm rational_clearquest The Web Client (aka CQ Web) in IBM Rational ClearQuest 7.1.2.x before 7.1.2.9 and 8.0.0.x before 8.0.0.5 allows remote attackers to obtain sensitive information via unspecified vectors that trigger a… CWE-200
Information Exposure
CVE-2012-5765 2024-11-21 10:45 2012-12-20 Show GitHub Exploit DB Packet Storm
296687 - squid-cache squid Multiple memory leaks in tools/cachemgr.cc in cachemgr.cgi in Squid 2.x and 3.x before 3.1.22, 3.2.x before 3.2.4, and 3.3.x before 3.3.0.2 allow remote attackers to cause a denial of service (memory… CWE-20
 Improper Input Validation 
CVE-2012-5643 2024-11-21 10:45 2012-12-20 Show GitHub Exploit DB Packet Storm
296688 - ovirt sanlock The setup_logging function in log.h in SANLock uses world-writable permissions for /var/log/sanlock.log, which allows local users to overwrite the file content or bypass intended disk-quota restricti… CWE-264
Permissions, Privileges, and Access Controls
CVE-2012-5638 2024-11-21 10:45 2012-12-20 Show GitHub Exploit DB Packet Storm
296689 - cisco wireless_lan_controller_software
2000_wireless_lan_controller
2100_wireless_lan_controller
2500_wireless_lan_controller
4100_wireless_lan_controller
4400_wireless_lan_controller
550…
Cross-site scripting (XSS) vulnerability in screens/base/web_auth_custom.html on Cisco Wireless LAN Controller (WLC) devices with software 7.2.110.0 allows remote authenticated users to inject arbitr… CWE-79
Cross-site Scripting
CVE-2012-6007 2024-11-21 10:45 2012-12-19 Show GitHub Exploit DB Packet Storm
296690 - cisco wireless_lan_controller_software
2000_wireless_lan_controller
2100_wireless_lan_controller
2500_wireless_lan_controller
4100_wireless_lan_controller
4400_wireless_lan_controller
550…
screens/base/web_auth_custom.html on Cisco Wireless LAN Controller (WLC) devices with software 7.2.110.0 allows remote authenticated users to cause a denial of service (device reload) via a certain b… NVD-CWE-noinfo
CVE-2012-5991 2024-11-21 10:45 2012-12-19 Show GitHub Exploit DB Packet Storm