Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 19, 2026, noon

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
219531	3.5	注意	IBM	-	IBM Netezza Performance Portal の Apache HTTP Server コンポーネントにおける暗号保護メカニズムを破られる脆弱性	CWE-310 暗号の問題	CVE-2014-0848	2014-03-27 18:27	2014-03-12	Show	GitHub Exploit DB Packet Storm

219532	3.5	注意	IBM	-	IBM InfoSphere BigInsights の Web Application Enterprise Console における CRLF インジェクションの脆弱性	CWE-94 コード・インジェクション	CVE-2013-3998	2014-03-27 18:26	2013-06-7	Show	GitHub Exploit DB Packet Storm

219533	4.9	警告	IBM	-	IBM InfoSphere BigInsights の Web Application Enterprise Console におけるオープンリダイレクトの脆弱性	CWE-20 不適切な入力確認	CVE-2013-3997	2014-03-27 18:25	2013-06-7	Show	GitHub Exploit DB Packet Storm

219534	2.1	注意	IBM	-	IBM Tivoli Storage Manager for Mail および Tivoli Storage FlashCopy Manager における他のユーザの電子メールを読まれる脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2013-3976	2014-03-27 18:24	2013-07-19	Show	GitHub Exploit DB Packet Storm

219535	5	警告	IBM	-	IBM Cognos Express における重要な平文情報を取得される脆弱性	CWE-310 暗号の問題	CVE-2013-5445	2014-03-27 18:21	2013-08-22	Show	GitHub Exploit DB Packet Storm

219536	5	警告	IBM	-	IBM Cognos Express のサーバにおける暗号化された資格情報を読まれる脆弱性	CWE-310 暗号の問題	CVE-2013-5444	2014-03-27 18:20	2013-08-22	Show	GitHub Exploit DB Packet Storm

219537	6.8	警告	IBM	-	IBM Cognos Express におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2013-5443	2014-03-27 18:19	2013-08-22	Show	GitHub Exploit DB Packet Storm

219538	4.3	警告	Craig Scott	-	iPad デバイス上で稼働する iOS 用 iThoughtsHD アプリケーションの iThoughts Web サーバにおけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2014-1828	2014-03-27 16:48	2014-03-24	Show	GitHub Exploit DB Packet Storm

219539	4.3	警告	Craig Scott	-	iPad デバイス上で稼働する iOS 用 iThoughtsHD アプリケーションにおける任意のファイルをアップロードされる脆弱性	CWE-20 不適切な入力確認	CVE-2014-1827	2014-03-27 16:46	2014-03-24	Show	GitHub Exploit DB Packet Storm

219540	2.6	注意	Craig Scott	-	iPad デバイス上で稼働する iOS 用 iThoughtsHD アプリケーションにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2014-1826	2014-03-27 16:45	2014-03-24	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 19, 2026, 4:16 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
293251	-	php-fusion	php-fusion	Cross-site scripting (XSS) vulnerability in downloads.php in PHP-Fusion 7.02.04 allows remote attackers to inject arbitrary web script or HTML via the cat_id parameter.	CWE-79 Cross-site Scripting	CVE-2012-6043	2024-11-21 10:45	2012-11-27	Show	GitHub Exploit DB Packet Storm

293252	-	geopainting	gpsmapedit	GPSMapEdit 1.1.73.2 allows user-assisted remote attackers to cause a denial of service (crash) via a long string in a lst file.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2012-6042	2024-11-21 10:45	2012-11-27	Show	GitHub Exploit DB Packet Storm

293253	-	morequick	greenbrowser	Double free vulnerability in GreenBrowser before 6.0.1002, when the keyword search bar (F6) is activated, allows remote attackers to execute arbitrary code via a crafted iframe.	CWE-399 Resource Management Errors	CVE-2012-6041	2024-11-21 10:45	2012-11-27	Show	GitHub Exploit DB Packet Storm

293254	-	convergine	file_king_advanced_file_management	Cross-site scripting (XSS) vulnerability in users.php in File King Advanced File Management 1.4 allows remote attackers to inject arbitrary web script or HTML via the page parameter.	CWE-79 Cross-site Scripting	CVE-2012-6040	2024-11-21 10:45	2012-11-27	Show	GitHub Exploit DB Packet Storm

293255	-	yabsoft	advanced_image_hosting_script	SQL injection vulnerability in view_comments.php in YABSoft Advanced Image Hosting (AIH) Script, possibly 2.3, allows remote attackers to execute arbitrary SQL commands via the gal parameter.	CWE-89 SQL Injection	CVE-2012-6039	2024-11-21 10:45	2012-11-27	Show	GitHub Exploit DB Packet Storm

293256	-	razorcms	razorcms	admin/core/admin_func.php in razorCMS before 1.2.1 does not properly restrict access to certain administrator directories and files, which allows remote authenticated users to read, edit, rename, mov…	CWE-22 Path Traversal	CVE-2012-6038	2024-11-21 10:45	2012-11-27	Show	GitHub Exploit DB Packet Storm

293257	-	mahara	mahara	Multiple cross-site scripting (XSS) vulnerabilities in Mahara 1.4.x before 1.4.5 and 1.5.x before 1.5.4, and other versions including 1.2, allow remote attackers to inject arbitrary web script or HTM…	CWE-79 Cross-site Scripting	CVE-2012-6037	2024-11-21 10:45	2012-11-25	Show	GitHub Exploit DB Packet Storm

293258	-	xen	xen	The (1) memc_save_get_next_page, (2) tmemc_restore_put_page and (3) tmemc_restore_flush_page functions in the Transcendent Memory (TMEM) in Xen 4.0, 4.1, and 4.2 do not check for negative id pools, w…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2012-6036	2024-11-21 10:45	2012-11-24	Show	GitHub Exploit DB Packet Storm

293259	-	xen	xen	The do_tmem_destroy_pool function in the Transcendent Memory (TMEM) in Xen 4.0, 4.1, and 4.2 does not properly validate pool ids, which allows local guest OS users to cause a denial of service (memor…	CWE-20 Improper Input Validation	CVE-2012-6035	2024-11-21 10:45	2012-11-24	Show	GitHub Exploit DB Packet Storm

293260	-	xen	xen	The (1) tmemc_save_get_next_page and (2) tmemc_save_get_next_inv functions and the (3) TMEMC_SAVE_GET_POOL_UUID sub-operation in the Transcendent Memory (TMEM) in Xen 4.0, 4.1, and 4.2 "do not check …	CWE-20 Improper Input Validation	CVE-2012-6034	2024-11-21 10:45	2012-11-24	Show	GitHub Exploit DB Packet Storm