Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":May 22, 2026, 6 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 219791 | 9.3 | 危険 | VMware | - | VMware vSphere Client における任意のプログラムのダウンロードを誘発される脆弱性 |
CWE-20
不適切な入力確認 |
CVE-2014-1209 | 2014-04-16 12:04 | 2014-04-10 | Show | GitHub Exploit DB Packet Storm |
| 219792 | 8.5 | 危険 | ソフォス | - | Sophos Web Appliance のネットワークインターフェースの設定ページにおける任意のコマンドを実行される脆弱性 |
CWE-78
OSコマンド・インジェクション |
CVE-2014-2850 | 2014-04-16 11:42 | 2014-04-2 | Show | GitHub Exploit DB Packet Storm |
| 219793 | 8.5 | 危険 | ソフォス | - | Sophos Web Appliance の Change Password ダイアログボックスにおける管理ユーザパスワードを変更される脆弱性 |
CWE-264
認可・権限・アクセス制御 |
CVE-2014-2849 | 2014-04-16 11:42 | 2014-04-2 | Show | GitHub Exploit DB Packet Storm |
| 219794 | 6.9 | 警告 | Tenable, Inc. | - | Nessus 用 wmi_malware_scan.nbin プラグインにおける権限を取得される脆弱性 |
CWE-362
競合状態 |
CVE-2014-2848 | 2014-04-16 11:19 | 2014-03-20 | Show | GitHub Exploit DB Packet Storm |
| 219795 | 7.8 | 危険 | IOServer | - | IOServer OPC Server の OPC Drivers の Modbus slave/outstation ドライバにおけるサービス運用妨害 (DoS) の脆弱性 |
CWE-119
バッファエラー |
CVE-2014-0777 | 2014-04-16 11:16 | 2014-04-10 | Show | GitHub Exploit DB Packet Storm |
| 219796 | 7.5 | 危険 | OrbitScripts | - | OrbitScripts Orbit Open Ad Server における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2014-2540 | 2014-04-16 11:09 | 2014-03-21 | Show | GitHub Exploit DB Packet Storm |
| 219797 | 2.6 | 注意 | Marcel Brinkkemper | - | WordPress 用 Lazyest Gallery プラグインにおけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2014-2333 | 2014-04-16 11:04 | 2014-04-10 | Show | GitHub Exploit DB Packet Storm |
| 219798 | 4.3 | 警告 | Roundup | - | Roundup の cgi/client.py におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2012-6131 | 2014-04-16 11:01 | 2012-01-5 | Show | GitHub Exploit DB Packet Storm |
| 219799 | 4.3 | 警告 | Roundup | - | Roundup の履歴表示におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2012-6130 | 2014-04-16 11:01 | 2012-01-5 | Show | GitHub Exploit DB Packet Storm |
| 219800 | 6.8 | 警告 | elfutils Project | - | elfutils で使用される libdw ライブラリの dwarf_begin_elf.c 内の check_section 関数における整数オーバーフローの脆弱性 |
CWE-189
数値処理の問題 |
CVE-2014-0172 | 2014-04-16 10:52 | 2014-04-9 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:May 23, 2026, 4:08 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 294741 | - | tomatocart | tomatocart | TomatoCart 1.1.7, when the PayPal Express Checkout module is enabled in sandbox mode, allows remote authenticated users to bypass intended payment requirements by modifying a certain redirection URL. |
CWE-264
Permissions, Privileges, and Access Controls |
CVE-2012-4934 | 2024-11-21 10:43 | 2012-10-31 | Show | GitHub Exploit DB Packet Storm | |
| 294742 | - | emc | avamar | EMC Avamar Client for VMware 6.1 stores the cleartext server root password on the proxy client, which might allow remote attackers to obtain sensitive information by leveraging "network access" to th… |
CWE-255
Credentials Management |
CVE-2012-4610 | 2024-11-21 10:43 | 2012-10-31 | Show | GitHub Exploit DB Packet Storm | |
| 294743 | - | laurent_destailleur | awstats | Unspecified vulnerability in awredir.pl in AWStats before 7.1 has unknown impact and attack vectors. |
CWE-79
Cross-site Scripting |
CVE-2012-4547 | 2024-11-21 10:43 | 2012-10-31 | Show | GitHub Exploit DB Packet Storm | |
| 294744 | - | cisco |
adaptive_security_appliance_software 5500_series_adaptive_security_appliance 7600_router catalyst_6500 catalyst_6503-e catalyst_6504-e catalyst_6506-e catalyst_6509-e catalyst… |
The DCERPC inspection engine on Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services Module (ASASM) in Cisco Catalyst 6500 series devices, with software 8.3 before 8.3(2… |
CWE-119
Incorrect Access of Indexable Resource ('Range Error') |
CVE-2012-4663 | 2024-11-21 10:43 | 2012-10-30 | Show | GitHub Exploit DB Packet Storm | |
| 294745 | - | wftpserver | wing_ftp_server | Wing FTP Server before 4.1.1 allows remote authenticated users to cause a denial of service (daemon crash) via two zip commands. |
CWE-119
Incorrect Access of Indexable Resource ('Range Error') |
CVE-2012-4729 | 2024-11-21 10:43 | 2012-10-26 | Show | GitHub Exploit DB Packet Storm | |
| 294746 | - |
apache citrix |
cloudstack | Citrix Cloud.com CloudStack, and Apache CloudStack pre-release, allows remote attackers to make arbitrary API calls by leveraging the system user account, as demonstrated by API calls to delete VMs. |
CWE-264
Permissions, Privileges, and Access Controls |
CVE-2012-4501 | 2024-11-21 10:43 | 2012-10-26 | Show | GitHub Exploit DB Packet Storm | |
| 294747 | - | cisco |
adaptive_security_appliance_software 5500_series_adaptive_security_appliance 7600_router catalyst_6500 catalyst_6503-e catalyst_6504-e catalyst_6506-e catalyst_6509-e catalyst… |
The DCERPC inspection engine on Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services Module (ASASM) in Cisco Catalyst 6500 series devices, with software 8.3 before 8.3(2… |
CWE-119
Incorrect Access of Indexable Resource ('Range Error') |
CVE-2012-4662 | 2024-11-21 10:43 | 2012-10-30 | Show | GitHub Exploit DB Packet Storm | |
| 294748 | - | cisco |
adaptive_security_appliance_software 5500_series_adaptive_security_appliance 7600_router catalyst_6500 catalyst_6503-e catalyst_6504-e catalyst_6506-e catalyst_6509-e catalyst… |
Stack-based buffer overflow in the DCERPC inspection engine on Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services Module (ASASM) in Cisco Catalyst 6500 series devices,… |
CWE-119
Incorrect Access of Indexable Resource ('Range Error') |
CVE-2012-4661 | 2024-11-21 10:43 | 2012-10-30 | Show | GitHub Exploit DB Packet Storm | |
| 294749 | - | cisco |
adaptive_security_appliance_software 5500_series_adaptive_security_appliance catalyst_6500 catalyst_6503-e catalyst_6504-e catalyst_6506-e catalyst_6509-e catalyst_6509-neb-a … |
The SIP inspection engine on Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services Module (ASASM) in Cisco Catalyst 6500 series devices, with software 8.2 before 8.2(5.17… |
CWE-119
Incorrect Access of Indexable Resource ('Range Error') |
CVE-2012-4660 | 2024-11-21 10:43 | 2012-10-30 | Show | GitHub Exploit DB Packet Storm | |
| 294750 | - | cisco |
adaptive_security_appliance_software 5500_series_adaptive_security_appliance catalyst_6500 catalyst_6503-e catalyst_6504-e catalyst_6506-e catalyst_6509-e catalyst_6509-neb-a … |
The AAA functionality in the IPv4 SSL VPN implementations on Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services Module (ASASM) in Cisco Catalyst 6500 series devices, w… |
CWE-287
Improper Authentication |
CVE-2012-4659 | 2024-11-21 10:43 | 2012-10-30 | Show | GitHub Exploit DB Packet Storm |