Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 20, 2026, noon

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
219391 1.8 注意 Memcached - Memcached の items.c の do_item_get 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2013-7290 2014-04-7 17:21 2013-12-20 Show GitHub Exploit DB Packet Storm
219392 4.8 警告 Memcached - Memcached における認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2013-7239 2014-04-7 17:20 2013-12-20 Show GitHub Exploit DB Packet Storm
219393 5 警告 The PHP Group
アップル		 - PHP の SOAP パーサにおける任意のファイルを読まれる脆弱性 CWE-200
情報漏えい 		CVE-2013-1643 2014-04-7 17:18 2013-02-21 Show GitHub Exploit DB Packet Storm
219394 7.5 危険 The PHP Group
アップル		 - PHP の ext/soap/soap.c におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-1635 2014-04-7 17:17 2013-02-21 Show GitHub Exploit DB Packet Storm
219395 5.8 警告 シーメンス - Siemens SIMATIC S7-1500 CPU PLC デバイスのファームウェアにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2014-2249 2014-04-7 17:05 2014-03-12 Show GitHub Exploit DB Packet Storm
219396 7.1 危険 ZyXEL - ZyXEL P660 シリーズにサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2013-3588 2014-04-7 15:44 2014-04-1 Show GitHub Exploit DB Packet Storm
219397 7.5 危険 CA Technologies - CA ERwin Web Portal におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2014-2210 2014-04-7 15:04 2014-04-3 Show GitHub Exploit DB Packet Storm
219398 5 警告 シスコシステムズ - Cisco IOS および IOS XE の IKE の実装におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2014-2143 2014-04-7 14:58 2014-04-3 Show GitHub Exploit DB Packet Storm
219399 4.3 警告 シスコシステムズ - Cisco Emergency Responder におけるオープンリダイレクトの脆弱性 CWE-20
不適切な入力確認 		CVE-2014-2117 2014-04-7 14:58 2014-04-3 Show GitHub Exploit DB Packet Storm
219400 4.3 警告 シスコシステムズ - Cisco Emergency Responder における Web ページを挿入される脆弱性 CWE-20
不適切な入力確認 		CVE-2014-2116 2014-04-7 14:58 2014-04-3 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 20, 2026, 4:14 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
296031 - adam_ross tokenauth The Token Authentication (tokenauth) module 6.x-1.x before 6.x-1.7 for Drupal does not properly revert user sessions, which might allow remote attackers to perform requests with extra privileges. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2012-2720 2024-11-21 10:39 2012-06-27 Show GitHub Exploit DB Packet Storm
296032 - blaine_lang filedepot The filedepot module 6.x-1.x before 6.x-1.3 for Drupal, when accessed using multiple different browsers from the same IP address, causes Internet Explorer sessions to "switch users" when uploading a … CWE-264
Permissions, Privileges, and Access Controls 		CVE-2012-2719 2024-11-21 10:39 2012-06-27 Show GitHub Exploit DB Packet Storm
296033 - jason_moore amadou Cross-site scripting (XSS) vulnerability in the themes_links function in template.php in the Amadou theme module 6.x-1.x before 6.x-1.3 for Drupal allows remote attackers to inject arbitrary web scri… CWE-79
Cross-site Scripting 		CVE-2012-2715 2024-11-21 10:39 2012-06-27 Show GitHub Exploit DB Packet Storm
296034 - browserid_project browserid Cross-site request forgery (CSRF) vulnerability in the BrowserID (Mozilla Persona) module 7.x-1.x before 7.x-1.3 for Drupal allows remote attackers to hijack the authentication of arbitrary users for… CWE-352
 Origin Validation Error 		CVE-2012-2713 2024-11-21 10:39 2012-06-27 Show GitHub Exploit DB Packet Storm
296035 - thomas_seidl search_api Multiple cross-site scripting (XSS) vulnerabilities in the Search API module 7.x-1.x before 7.x-1.1 for Drupal, when supporting manual entry of field identifiers, allow remote attackers to inject arb… CWE-79
Cross-site Scripting 		CVE-2012-2712 2024-11-21 10:39 2012-06-27 Show GitHub Exploit DB Packet Storm
296036 - nancy_wichmann taxonomy_list Multiple cross-site scripting (XSS) vulnerabilities in the Taxonomy List module 6.x-1.x before 6.x-1.4 for Drupal allow remote authenticated users with create or edit taxonomy terms permissions to in… CWE-79
Cross-site Scripting 		CVE-2012-2711 2024-11-21 10:39 2012-06-27 Show GitHub Exploit DB Packet Storm
296037 - john_albin zen Cross-site scripting (XSS) vulnerability in the Zen module 6.x-1.x before 6.x-1.1 for Drupal, when "Append the content title to the end of the breadcrumb" is enabled, allows remote attackers to injec… CWE-79
Cross-site Scripting 		CVE-2012-2710 2024-11-21 10:39 2012-06-27 Show GitHub Exploit DB Packet Storm
296038 - antoine_beaupre hostmaster Cross-site scripting (XSS) vulnerability in the _hosting_task_log_table function in modules/hosting/task/hosting_task.module in the Hostmaster (Aegir) module 6.x-1.x before 6.x-1.9 for Drupal allows … CWE-79
Cross-site Scripting 		CVE-2012-2708 2024-11-21 10:39 2012-06-27 Show GitHub Exploit DB Packet Storm
296039 - antoine_beaupre hostmaster The Hostmaster (Aegir) module 6.x-1.x before 6.x-1.9 for Drupal does not properly exit when users do not have access to package/task nodes, which allows remote attackers to bypass intended access res… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2012-2707 2024-11-21 10:39 2012-06-27 Show GitHub Exploit DB Packet Storm
296040 - peter_pokrivcak post_affiliate_pro Cross-site scripting (XSS) vulnerability in the Post Affiliate Pro (PAP) module for Drupal allows remote attackers to inject arbitrary web script or HTML via vectors related to user registration. CWE-79
Cross-site Scripting 		CVE-2012-2706 2024-11-21 10:39 2012-06-27 Show GitHub Exploit DB Packet Storm