Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 18, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
219591 6.5 警告 GPLHost - Domain Technologie Control における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2011-3197 2014-03-25 09:51 2011-08-12 Show GitHub Exploit DB Packet Storm
219592 2.1 注意 GPLHost - Domain Technologie Control のセットアップスクリプトにおける dtcdaemon MySQL パスワードを取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2011-3196 2014-03-25 09:51 2011-08-12 Show GitHub Exploit DB Packet Storm
219593 6.5 警告 GPLHost - Domain Technologie Control の shared/inc/sql/lists.php における任意のコマンドを実行される脆弱性 CWE-20
不適切な入力確認
CVE-2011-3195 2014-03-25 09:51 2011-08-12 Show GitHub Exploit DB Packet Storm
219594 5 警告 Petri Lehtinen - Jansson におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2013-6401 2014-03-24 20:17 2013-11-27 Show GitHub Exploit DB Packet Storm
219595 4.3 警告 Uwe Steinmann - SeedDMS の検索機能 におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-2280 2014-03-24 20:13 2014-02-21 Show GitHub Exploit DB Packet Storm
219596 4.3 警告 Preben Bjorn Biermann Madsen - CMSimple Classic の whizzywig/wb.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-2219 2014-03-24 20:03 2014-03-19 Show GitHub Exploit DB Packet Storm
219597 4.3 警告 Open-Xchange - Open-Xchange AppSuite のフロントエンドにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-2077 2014-03-24 19:57 2014-03-17 Show GitHub Exploit DB Packet Storm
219598 9.3 危険 SolarWinds - DameWare Remote Support の DameWare Exporter ツールにおけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2013-3249 2014-03-24 19:41 2013-07-25 Show GitHub Exploit DB Packet Storm
219599 4.3 警告 Combodo - iTop の検索機能におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-0805 2014-03-24 19:36 2013-01-23 Show GitHub Exploit DB Packet Storm
219600 2.6 注意 株式会社NTTドコモ - spモードメールにおける受信メールの添付ファイルへのアクセスに関する問題 CWE-264
認可・権限・アクセス制御
CVE-2014-1977 2014-03-24 19:04 2014-03-18 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 18, 2026, 4:12 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
295761 - browserid_project browserid Cross-site request forgery (CSRF) vulnerability in the BrowserID (Mozilla Persona) module 7.x-1.x before 7.x-1.3 for Drupal allows remote attackers to hijack the authentication of arbitrary users for… CWE-352
 Origin Validation Error
CVE-2012-2713 2024-11-21 10:39 2012-06-27 Show GitHub Exploit DB Packet Storm
295762 - thomas_seidl search_api Multiple cross-site scripting (XSS) vulnerabilities in the Search API module 7.x-1.x before 7.x-1.1 for Drupal, when supporting manual entry of field identifiers, allow remote attackers to inject arb… CWE-79
Cross-site Scripting
CVE-2012-2712 2024-11-21 10:39 2012-06-27 Show GitHub Exploit DB Packet Storm
295763 - nancy_wichmann taxonomy_list Multiple cross-site scripting (XSS) vulnerabilities in the Taxonomy List module 6.x-1.x before 6.x-1.4 for Drupal allow remote authenticated users with create or edit taxonomy terms permissions to in… CWE-79
Cross-site Scripting
CVE-2012-2711 2024-11-21 10:39 2012-06-27 Show GitHub Exploit DB Packet Storm
295764 - john_albin zen Cross-site scripting (XSS) vulnerability in the Zen module 6.x-1.x before 6.x-1.1 for Drupal, when "Append the content title to the end of the breadcrumb" is enabled, allows remote attackers to injec… CWE-79
Cross-site Scripting
CVE-2012-2710 2024-11-21 10:39 2012-06-27 Show GitHub Exploit DB Packet Storm
295765 - antoine_beaupre hostmaster Cross-site scripting (XSS) vulnerability in the _hosting_task_log_table function in modules/hosting/task/hosting_task.module in the Hostmaster (Aegir) module 6.x-1.x before 6.x-1.9 for Drupal allows … CWE-79
Cross-site Scripting
CVE-2012-2708 2024-11-21 10:39 2012-06-27 Show GitHub Exploit DB Packet Storm
295766 - antoine_beaupre hostmaster The Hostmaster (Aegir) module 6.x-1.x before 6.x-1.9 for Drupal does not properly exit when users do not have access to package/task nodes, which allows remote attackers to bypass intended access res… CWE-264
Permissions, Privileges, and Access Controls
CVE-2012-2707 2024-11-21 10:39 2012-06-27 Show GitHub Exploit DB Packet Storm
295767 - peter_pokrivcak post_affiliate_pro Cross-site scripting (XSS) vulnerability in the Post Affiliate Pro (PAP) module for Drupal allows remote attackers to inject arbitrary web script or HTML via vectors related to user registration. CWE-79
Cross-site Scripting
CVE-2012-2706 2024-11-21 10:39 2012-06-27 Show GitHub Exploit DB Packet Storm
295768 - christopher_mitchell smart_breadcrumb The filter_titles function in the Smart Breadcrumb module 6.x-1.x before 6.x-1.3 for Drupal does not properly convert a title to plain-text, which allows remote authenticated users with create or edi… CWE-20
 Improper Input Validation 
CVE-2012-2705 2024-11-21 10:39 2012-06-27 Show GitHub Exploit DB Packet Storm
295769 - john_franklin advertisement Cross-site scripting (XSS) vulnerability in the Advertisement module 6.x-2.x before 6.x-2.3 for Drupal, when debug mode is enabled, allows remote attackers to inject arbitrary web script or HTML via … CWE-79
Cross-site Scripting
CVE-2012-2703 2024-11-21 10:39 2012-06-27 Show GitHub Exploit DB Packet Storm
295770 - tony_freixas ubercart_product_keys The Ubercart Product Keys module 6.x-1.x before 6.x-1.1 for Drupal does not properly check access for product keys, which allows remote attackers to read all unassigned product keys via certain condi… CWE-264
Permissions, Privileges, and Access Controls
CVE-2012-2702 2024-11-21 10:39 2012-06-27 Show GitHub Exploit DB Packet Storm