Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 19, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
219621 5 警告 Chad Whitacre - Aspen におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2013-2619 2014-03-24 11:12 2013-04-1 Show GitHub Exploit DB Packet Storm
219622 4.3 警告 ownCloud - ownCloud におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-0201 2014-03-24 10:53 2013-01-22 Show GitHub Exploit DB Packet Storm
219623 4.3 警告 マカフィー
インテル		 - 複数の McAfee 製品および Intel Expressway Cloud Access 360-SSO におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2014-2536 2014-03-24 10:30 2014-03-19 Show GitHub Exploit DB Packet Storm
219624 4 警告 マカフィー - McAfee Web Gateway におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2014-2535 2014-03-24 10:29 2014-01-28 Show GitHub Exploit DB Packet Storm
219625 7.8 危険 ソフォス - Sophos UTM のカーネルの TCP スタックにおけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2014-2537 2014-03-24 10:26 2014-02-20 Show GitHub Exploit DB Packet Storm
219626 4.3 警告 ソフォス - Sophos Web Appliance におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-2643 2014-03-24 10:25 2013-04-3 Show GitHub Exploit DB Packet Storm
219627 9.3 危険 ソフォス - Sophos Web Appliance における任意のコマンドを実行される脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2013-2642 2014-03-24 10:25 2013-04-3 Show GitHub Exploit DB Packet Storm
219628 5 警告 ソフォス - Sophos Web Appliance の patience.cgi におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2013-2641 2014-03-24 10:24 2013-04-3 Show GitHub Exploit DB Packet Storm
219629 4.3 警告 Apache Software Foundation - Apache CouchDB の Futon UI におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-5650 2014-03-20 19:21 2012-10-24 Show GitHub Exploit DB Packet Storm
219630 5 警告 Mochi Media
Apache Software Foundation		 - Apache CouchDB で使用される MochiWeb の mochiweb_util.erl の partition2 関数におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2012-5641 2014-03-20 19:18 2012-12-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 19, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
293101 - redhat jboss_enterprise_web_platform
jboss_enterprise_application_platform 		The default configuration of the (1) LdapLoginModule and (2) LdapExtLoginModule modules in JBoss Enterprise Application Platform (EAP) 4.3.0 CP10, 5.2.0, and 6.0.1, and Enterprise Web Platform (EWP) … CWE-264
Permissions, Privileges, and Access Controls 		CVE-2012-5629 2024-11-21 10:45 2013-03-13 Show GitHub Exploit DB Packet Storm
293102 - redhat aeolus_conductor The Administer tab in Aeolus Conductor allows remote authenticated users to bypass intended quota restrictions by updating the Maximum Running Instances quota user setting. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2012-6118 2024-11-21 10:45 2013-03-13 Show GitHub Exploit DB Packet Storm
293103 - redhat cloudforms_cloud_engine Aeolus Configuration Server, as used in Red Hat CloudForms Cloud Engine before 1.1.2, uses world-readable permissions for /var/log/aeolus-configserver/configserver.log, which allows local users to re… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2012-6117 2024-11-21 10:45 2013-03-13 Show GitHub Exploit DB Packet Storm
293104 - inkscape inkscape Inkscape before 0.48.4 reads .eps files from /tmp instead of the current directory, which might cause Inkspace to process unintended files, allow local users to obtain sensitive information, and poss… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2012-6076 2024-11-21 10:45 2013-03-13 Show GitHub Exploit DB Packet Storm
293105 - ibm tivoli_application_dependency_discovery_manager Cross-site scripting (XSS) vulnerability in the Data Management Portal Web User Interface in IBM Tivoli Application Dependency Discovery Manager (TADDM) 7.2.x before 7.2.1.4 allows remote authenticat… CWE-79
Cross-site Scripting 		CVE-2012-5942 2024-11-21 10:45 2013-03-6 Show GitHub Exploit DB Packet Storm
293106 - ibm tivoli_application_dependency_discovery_manager Cross-site scripting (XSS) vulnerability in Welcome.do in the Data Management Portal Web User Interface in IBM Tivoli Application Dependency Discovery Manager (TADDM) 7.2.x before 7.2.1.4 allows remo… CWE-79
Cross-site Scripting 		CVE-2012-5939 2024-11-21 10:45 2013-03-6 Show GitHub Exploit DB Packet Storm
293107 - ibm tivoli_application_dependency_discovery_manager The SSL configuration in IBM Tivoli Application Dependency Discovery Manager (TADDM) 7.2.x before 7.2.1.4 supports the MD5 hash algorithm, which makes it easier for man-in-the-middle attackers to spo… CWE-16
Configuration 		CVE-2012-5770 2024-11-21 10:45 2013-03-6 Show GitHub Exploit DB Packet Storm
293108 - cisco aironet_access_point_software The HTTP Profiler on the Cisco Aironet Access Point with software 15.2 and earlier does not properly manage buffers, which allows remote attackers to cause a denial of service (device reload) via cra… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2012-6026 2024-11-21 10:45 2013-03-5 Show GitHub Exploit DB Packet Storm
293109 - katello katello-configure
katello 		modules/certs/manifests/config.pp in katello-configure before 1.3.3.pulpv2 in Katello uses weak permissions (666) for the Candlepin bootstrap RPM, which allows local users to modify the Candlepin CA … CWE-264
Permissions, Privileges, and Access Controls 		CVE-2012-6116 2024-11-21 10:45 2013-03-1 Show GitHub Exploit DB Packet Storm
293110 - rack_project rack lib/rack/multipart.rb in Rack before 1.1.4, 1.2.x before 1.2.6, 1.3.x before 1.3.7, and 1.4.x before 1.4.2 uses an incorrect regular expression, which allows remote attackers to cause a denial of ser… NVD-CWE-Other
CVE-2012-6109 2024-11-21 10:45 2013-03-1 Show GitHub Exploit DB Packet Storm