Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 29, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
219571	4.3	警告	Flying Cart	-	Flying Cart におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2014-3846	2014-05-26 10:23	2014-05-21	Show	GitHub Exploit DB Packet Storm

219572	5.1	警告	ISC, Inc. トレンドマイクロ日本電気アップルサイバートラスト株式会社富士通 SSH コミュニケーションズ・セキュリティアライドテレシス古河電気工業サン・マイクロシステムズターボリナックスヒューレット・パッカード OpenSSL Project BEAシステムズセンドメール社日立 OpenOffice.org Project オラクルレッドハット	-	複数の RSA 実装において署名が正しく検証されない脆弱性	CWE-255 証明書・パスワード管理	CVE-2006-4339	2014-05-23 18:35	2006-09-5	Show	GitHub Exploit DB Packet Storm

219573	5	警告	アドビシステムズ日立	-	Adobe Reader における署名を正しく検証しない脆弱性	CWE-255 証明書・パスワード管理	CVE-2006-4339	2014-05-23 18:33	2012-08-30	Show	GitHub Exploit DB Packet Storm

219574	5	警告	日立	-	Hitachi Web ServerのSSLクライアント認証における脆弱性	CWE-20 不適切な入力確認	CVE-2006-4339 CVE-2007-5810	2014-05-23 18:32	2007-10-5	Show	GitHub Exploit DB Packet Storm

219575	4.7	警告	Linux	-	PowerPC プラットフォーム上で稼動する Linux Kernel におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2014-2673	2014-05-23 18:28	2014-03-23	Show	GitHub Exploit DB Packet Storm

219576	1.9	注意	GNU Project Debian Canonical Novell オラクル	-	マルチコア CPU の共有 L3 キャッシュに対するサイドチャネル攻撃	CWE-200 情報漏えい	CVE-2013-4242	2014-05-23 14:52	2013-07-29	Show	GitHub Exploit DB Packet Storm

219577	4.6	警告	レッドハット GNU Project サイバートラスト株式会社オラクル	-	GNU Texinfo の texindex コマンドにおけるヒープオーバーフローの脆弱性	-	CVE-2006-4810	2014-05-23 14:52	2006-09-15	Show	GitHub Exploit DB Packet Storm

219578	10	危険	Canonical	-	LTSP Display Manager の wwm 用デフォルトのキーバインドにおける任意のコマンドを実行される脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2012-1166	2014-05-23 14:08	2012-03-12	Show	GitHub Exploit DB Packet Storm

219579	5	警告	VMTurbo	-	VMTurbo Operations Manager の cgi-bin/help/doIt.cgi におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2014-3806	2014-05-23 13:50	2014-05-7	Show	GitHub Exploit DB Packet Storm

219580	4.3	警告	Real Time Logic	-	BarracudaDrive におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2014-3808	2014-05-23 13:40	2014-03-27	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 29, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
296211	6.1	MEDIUM Network	letodms_project	letodms	Multiple cross-site scripting (XSS) vulnerabilities in out/out.UsrMgr.php in LetoDMS (formerly MyDMS) before 3.3.9 allow remote attackers to inject arbitrary web script or HTML via unspecified vector…	CWE-79 Cross-site Scripting	CVE-2012-4569	2024-11-21 10:43	2017-10-24	Show	GitHub Exploit DB Packet Storm

296212	8.8	HIGH Network	letodms_project	letodms	Multiple cross-site request forgery (CSRF) vulnerabilities in LetoDMS (formerly MyDMS) before 3.3.8 allow remote attackers to hijack the authentication of unspecified victims via unknown vectors.	CWE-352 Origin Validation Error	CVE-2012-4568	2024-11-21 10:43	2017-10-24	Show	GitHub Exploit DB Packet Storm

296213	6.1	MEDIUM Network	letodms_project	letodms	Multiple cross-site scripting (XSS) vulnerabilities in LetoDMS (formerly MyDMS) before 3.3.8 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters in (1) inc/inc.Cl…	CWE-79 Cross-site Scripting	CVE-2012-4567	2024-11-21 10:43	2017-10-24	Show	GitHub Exploit DB Packet Storm

296214	6.5	MEDIUM Network	cisco	ios	Cisco IOS before 15.2(4)S6 does not initialize an unspecified variable, which might allow remote authenticated users to cause a denial of service (CPU consumption, watchdog timeout, crash) by walking…	CWE-399 Resource Management Errors	CVE-2012-5030	2024-11-21 10:43	2017-08-3	Show	GitHub Exploit DB Packet Storm

296215	8.1	HIGH Adjacent	cisco	adaptive_security_appliance_software	ASA 5515-X Adaptive Security Appliance Adaptive Security Appliance (ASA) Software 9.4.x before 9.4.1 Interim, 9.2.x before 9.2.4 Interim, ASA 5510 Adaptive Security Appliance Adaptive Security Applia…	CWE-254 7PK - Security Features	CVE-2012-5010	2024-11-21 10:43	2017-06-28	Show	GitHub Exploit DB Packet Storm

296216	-		n-tron	702w_industrial_wireless_access_point	N-Tron 702-W Industrial Wireless Access Point devices use the same (1) SSH and (2) HTTPS private keys across different customers' installations, which makes it easier for remote attackers to defeat c…	CWE-310 Cryptographic Issues	CVE-2012-4716	2024-11-21 10:43	2015-06-14	Show	GitHub Exploit DB Packet Storm

296217	-		template_cms_project	template_cms	Multiple cross-site request forgery (CSRF) vulnerabilities in Template CMS 2.1.1 and earlier allow remote attackers to hijack the authentication of administrators for requests that (1) create an admi…	CWE-352 Origin Validation Error	CVE-2012-4902	2024-11-21 10:43	2015-05-21	Show	GitHub Exploit DB Packet Storm

296218	-		template_cms_project	template_cms	Cross-site scripting (XSS) vulnerability in Template CMS 2.1.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the themes_editor parameter in an add_template action to …	CWE-79 Cross-site Scripting	CVE-2012-4901	2024-11-21 10:43	2015-05-21	Show	GitHub Exploit DB Packet Storm

296219	-		mikejolley	download_monitor	Cross-site scripting (XSS) vulnerability in the Download Monitor plugin before 3.3.5.9 for WordPress allows remote attackers to inject arbitrary web script or HTML via the dlsearch parameter to the d…	CWE-79 Cross-site Scripting	CVE-2012-4768	2024-11-21 10:43	2014-09-4	Show	GitHub Exploit DB Packet Storm

296220	-		xnview	xnview	Heap-based buffer overflow in the xjpegls.dll (aka JLS, JPEG-LS, or JPEG lossless) format plugin in XnView 1.99 and 1.99.1 allows remote attackers to execute arbitrary code via a crafted JLS image fi…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2012-4988	2024-11-21 10:43	2014-07-9	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed