Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 19, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
219551 3.5 注意 Moodle - Moodle の mod/quiz/editlib.php の quiz_question_tostring 関数におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-2571 2014-03-26 12:32 2014-03-24 Show GitHub Exploit DB Packet Storm
219552 4 警告 Moodle - Moodle の badges/mybadges.php における任意のバッジの可視性を変更される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2014-0129 2014-03-26 12:32 2014-03-17 Show GitHub Exploit DB Packet Storm
219553 4.9 警告 Moodle - Moodle の mod/feedback/complete.php および mod/feedback/complete_guest.php における Feedback アクティビティ起動時の制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2014-0127 2014-03-26 12:32 2014-03-17 Show GitHub Exploit DB Packet Storm
219554 6.8 警告 Moodle - Moodle の enrol/imsenterprise/importnow.php におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2014-0126 2014-03-26 12:31 2014-03-17 Show GitHub Exploit DB Packet Storm
219555 5.8 警告 Moodle - Moodle の repository/alfresco/lib.php における Alfresco Repository ファイルの制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2014-0125 2014-03-26 12:31 2014-03-17 Show GitHub Exploit DB Packet Storm
219556 4 警告 Moodle - Moodle の mod/forum/renderer.php および mod/quiz/override_form.php における重要な情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2014-0124 2014-03-26 12:30 2014-03-17 Show GitHub Exploit DB Packet Storm
219557 4.9 警告 Moodle - Moodle の wiki サブシステムにおける wiki 操作を実行される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2014-0123 2014-03-26 12:30 2014-03-17 Show GitHub Exploit DB Packet Storm
219558 4.9 警告 Moodle - Moodle の mod/chat/chat_ajax.php におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2014-0122 2014-03-26 12:29 2014-03-17 Show GitHub Exploit DB Packet Storm
219559 6.5 警告 MailPoet - WordPress 用 MailPoet Newsletters プラグインにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2013-1408 2014-03-26 12:02 2013-01-18 Show GitHub Exploit DB Packet Storm
219560 10 危険 キングソフト株式会社 - Kingsoft WPS Office 2012 の wpsio.dll におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2012-4886 2014-03-26 10:53 2012-09-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 19, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
292701 - ffmpeg ffmpeg The mov_text_decode_frame function in libavcodec/movtextdec.c in FFmpeg before 1.0.2 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via crafted 3GPP TS 26.245 dat… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2012-6616 2024-11-21 10:46 2013-12-25 Show GitHub Exploit DB Packet Storm
292702 - ffmpeg ffmpeg The ff_ass_split_override_codes function in libavcodec/ass_split.c in FFmpeg before 1.0.2 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a subtitle dial… NVD-CWE-Other
CVE-2012-6615 2024-11-21 10:46 2013-12-25 Show GitHub Exploit DB Packet Storm
292703 - apache solr The (1) UpdateRequestHandler for XSLT or (2) XPathEntityProcessor in Apache Solr before 4.1 allows remote attackers to have an unspecified impact via XML data containing an external entity declaratio… NVD-CWE-noinfo
CVE-2012-6612 2024-11-21 10:46 2013-12-8 Show GitHub Exploit DB Packet Storm
292704 - djvulibre_project djvulibre DjVuLibre before 3.5.25.3, as used in Evince, Sumatra PDF Reader, VuDroid, and other products, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a… CWE-94
Code Injection 		CVE-2012-6535 2024-11-21 10:46 2013-12-3 Show GitHub Exploit DB Packet Storm
292705 - elastix elastix Cross-site scripting (XSS) vulnerability in xmlservices/E_book.php in Elastix 2.3.0 allows remote attackers to inject arbitrary web script or HTML via the Page parameter. CWE-79
Cross-site Scripting 		CVE-2012-6608 2024-11-21 10:46 2013-11-26 Show GitHub Exploit DB Packet Storm
292706 - augeas augeas The transform_save function in transform.c in Augeas before 1.0.0 allows local users to overwrite arbitrary files and obtain sensitive information via a symlink attack on a .augsave file in a backup … CWE-22
Path Traversal 		CVE-2012-6607 2024-11-21 10:46 2013-11-24 Show GitHub Exploit DB Packet Storm
292707 - microsoft office Microsoft Office 2003 SP3 and 2007 SP3 allows remote attackers to execute arbitrary code via a crafted WordPerfect document (.wpd) file, aka "WPD File Format Memory Corruption Vulnerability." CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2013-0082 2024-11-21 10:46 2013-11-13 Show GitHub Exploit DB Packet Storm
292708 - microsoft sharepoint_services
sharepoint_foundation
sharepoint_server
sharepoint_portal_server 		Microsoft SharePoint Portal Server 2003 SP3 and SharePoint Server 2007 SP3, 2010 SP1 and SP2, and 2013 do not properly process unassigned workflows, which allows remote attackers to cause a denial of… CWE-20
 Improper Input Validation  		CVE-2013-0081 2024-11-21 10:46 2013-09-11 Show GitHub Exploit DB Packet Storm
292709 - paloaltonetworks netconnect
globalprotect 		Palo Alto Networks GlobalProtect before 1.1.7, and NetConnect, does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof portal servers and obtain sensiti… CWE-310
Cryptographic Issues 		CVE-2012-6606 2024-11-21 10:46 2013-09-1 Show GitHub Exploit DB Packet Storm
292710 - paloaltonetworks pan-os The device-management command-line interface in Palo Alto Networks PAN-OS before 3.1.11 and 4.0.x before 4.0.9 allows remote authenticated users to execute arbitrary code via unspecified vectors, aka… CWE-78
OS Command  		CVE-2012-6605 2024-11-21 10:46 2013-09-1 Show GitHub Exploit DB Packet Storm