Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 27, 2026, noon

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
219781 6.8 警告 CubeCart Limited - CubeCar における Web セッションをハイジャックされる脆弱性 CWE-287
不適切な認証 		CVE-2014-2341 2014-04-24 11:42 2014-04-10 Show GitHub Exploit DB Packet Storm
219782 6.4 警告 pimcore - pimcore の Pimcore_Tool_Newsletter モジュールにおける PHP オブジェクトインジェクション攻撃を実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2014-2922 2014-04-24 10:22 2014-04-11 Show GitHub Exploit DB Packet Storm
219783 7.5 危険 pimcore - pimcore の Pimcore_Tool_Newsletter モジュールにおける PHP オブジェクトインジェクション攻撃を実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2014-2921 2014-04-24 10:21 2014-04-11 Show GitHub Exploit DB Packet Storm
219784 4 警告 MediaWiki - MediaWiki の includes/specials/SpecialChangePassword.php における重要な情報を取得される脆弱性 CWE-287
不適切な認証 		CVE-2014-2665 2014-04-23 20:02 2014-03-28 Show GitHub Exploit DB Packet Storm
219785 4 警告 Mozilla Foundation - Bugzilla のログインフォームにおける重要な情報を取得される脆弱性 CWE-287
不適切な認証 		CVE-2014-1517 2014-04-23 20:00 2014-04-17 Show GitHub Exploit DB Packet Storm
219786 5 警告 シーメンス - Siemens SINEMA サーバにおけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2014-2733 2014-04-23 19:56 2014-04-15 Show GitHub Exploit DB Packet Storm
219787 5 警告 シーメンス - Siemens SINEMA サーバにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2014-2732 2014-04-23 19:55 2014-04-15 Show GitHub Exploit DB Packet Storm
219788 9.3 危険 シーメンス - Siemens SINEMA サーバの統合 Web サーバにおける任意のコードを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2014-2731 2014-04-23 19:55 2014-04-15 Show GitHub Exploit DB Packet Storm
219789 5.5 警告 Moxi9 - PHPFox の static/ajax.php における "Only Me" 制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-7196 2014-04-23 19:23 2013-12-22 Show GitHub Exploit DB Packet Storm
219790 5.5 警告 Moxi9 - PHPFox における "Only Me" 制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-7195 2014-04-23 19:23 2013-12-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 27, 2026, 4:52 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
293881 7.1 HIGH
Local 		fedoraproject fedora The fedora-business-cards package before 1-0.1.beta1.fc17 on Fedora 17 and before 1-0.1.beta1.fc18 on Fedora 18 allows local users to cause a denial of service or write to arbitrary files via a symli… CWE-59
Link Following 		CVE-2013-0159 2024-11-21 10:46 2018-05-2 Show GitHub Exploit DB Packet Storm
293882 5.9 MEDIUM
Network 		elinks
twibright 		elinks
links 		ELinks 0.12 and Twibright Links 2.3 have Missing SSL Certificate Validation. CWE-295
Improper Certificate Validation  		CVE-2012-6709 2024-11-21 10:46 2018-02-24 Show GitHub Exploit DB Packet Storm
293883 6.1 MEDIUM
Network 		fortinet fortidb Multiple cross-site scripting (XSS) vulnerabilities in Java number format exception handling in FortiGate FortiDB before 4.4.2 allow remote attackers to inject arbitrary web script or HTML via the co… CWE-79
Cross-site Scripting 		CVE-2012-6347 2024-11-21 10:46 2018-02-10 Show GitHub Exploit DB Packet Storm
293884 6.1 MEDIUM
Network 		fortinet fortiweb Multiple cross-site scripting (XSS) vulnerabilities in FortiWeb before 4.4.4 allow remote attackers to inject arbitrary web script or HTML via the (1) redir or (2) mkey parameter to waf/pcre_expressi… CWE-79
Cross-site Scripting 		CVE-2012-6346 2024-11-21 10:46 2018-02-10 Show GitHub Exploit DB Packet Storm
293885 6.1 MEDIUM
Network 		jquery jquery jQuery before 1.9.0 is vulnerable to Cross-site Scripting (XSS) attacks. The jQuery(strInput) function does not differentiate selectors from HTML in a reliable fashion. In vulnerable versions, jQuery… CWE-79
Cross-site Scripting 		CVE-2012-6708 2024-11-21 10:46 2018-01-19 Show GitHub Exploit DB Packet Storm
293886 6.1 MEDIUM
Network 		dragonbyte-tech vbdownloads_module Cross-site scripting (XSS) vulnerability in downloads/actions/editdownload.php in the DragonByte Technologies vBDownloads module 1.3.2 and earlier for vBulletin allows remote attackers to inject arbi… CWE-79
Cross-site Scripting 		CVE-2012-6682 2024-11-21 10:46 2018-01-12 Show GitHub Exploit DB Packet Storm
293887 6.1 MEDIUM
Network 		dragonbyte-tech forumon_rpg_module Multiple cross-site scripting (XSS) vulnerabilities in actions/main.php in the DragonByte Technologies Forumon RPG module before 1.0.8 for vBulletin when creating a new monster, allow remote attacker… CWE-79
Cross-site Scripting 		CVE-2012-6671 2024-11-21 10:46 2018-01-12 Show GitHub Exploit DB Packet Storm
293888 6.1 MEDIUM
Network 		dragonbyte-tech vbactivity_module Multiple cross-site scripting (XSS) vulnerabilities in the DragonByte Technologies vbActivity module before 3.0.1 for vBulletin allow remote attackers to inject arbitrary web script or HTML via the r… CWE-79
Cross-site Scripting 		CVE-2012-6670 2024-11-21 10:46 2018-01-12 Show GitHub Exploit DB Packet Storm
293889 6.1 MEDIUM
Network 		dragonbyte-tech vbshout_module Multiple cross-site scripting (XSS) vulnerabilities in the Shout Reports in the DragonByte Technologies vBShout module before 6.0.6 for vBulletin allow remote attackers to inject arbitrary web script… CWE-79
Cross-site Scripting 		CVE-2012-6668 2024-11-21 10:46 2018-01-12 Show GitHub Exploit DB Packet Storm
293890 6.1 MEDIUM
Network 		dragonbyte-tech vbshout Cross-site scripting (XSS) vulnerability in vbshout.php in DragonByte Technologies vBShout module for vBulletin allows remote attackers to inject arbitrary web script or HTML via the shout parameter … CWE-79
Cross-site Scripting 		CVE-2012-6667 2024-11-21 10:46 2018-01-12 Show GitHub Exploit DB Packet Storm