Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":May 22, 2026, 6 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 219851 | 6.8 | 警告 | Jeremy Massel | - | WordPress 用 underConstruction プラグインにおけるクロスサイトリクエストフォージェリの脆弱性 |
CWE-352
同一生成元ポリシー違反 |
CVE-2013-2699 | 2014-04-14 18:26 | 2013-06-3 | Show | GitHub Exploit DB Packet Storm |
| 219852 | 6.8 | 警告 | Lester Chan | - | WordPress 用 WP-Print プラグインのオプションにおけるクロスサイトリクエストフォージェリの脆弱性 |
CWE-352
同一生成元ポリシー違反 |
CVE-2013-2693 | 2014-04-14 18:25 | 2013-04-5 | Show | GitHub Exploit DB Packet Storm |
| 219853 | 6.8 | 警告 | Dean Adjie Minwarie | - | WordPress 用 DVS Custom Notification プラグインにおけるクロスサイトリクエストフォージェリの脆弱性 |
CWE-352
同一生成元ポリシー違反 |
CVE-2012-4921 | 2014-04-14 18:24 | 2012-09-14 | Show | GitHub Exploit DB Packet Storm |
| 219854 | 5.8 | 警告 | kernel.org | - | Linux-PAM 用 pam_timestamp モジュールの pam_timestamp.c におけるディレクトリトラバーサルの脆弱性 |
CWE-22
パス・トラバーサル |
CVE-2014-2583 | 2014-04-14 18:04 | 2014-03-26 | Show | GitHub Exploit DB Packet Storm |
| 219855 | 7.5 | 危険 | Pearson Education, Inc. | - | Pearson eSIS Enterprise Student Information System のパスワードリセット機能における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2014-1455 | 2014-04-14 17:52 | 2014-04-6 | Show | GitHub Exploit DB Packet Storm |
| 219856 | 2.1 | 注意 | CloudBees | - | CloudBees Jenkins におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2013-2033 | 2014-04-14 17:38 | 2013-05-2 | Show | GitHub Exploit DB Packet Storm |
| 219857 | 6.5 | 警告 | レッドハット (KIE Group) レッドハット |
- | 複数の Red Hat Jboss 製品における任意の Java コードを実行される脆弱性 |
CWE-94
コード・インジェクション |
CVE-2013-6468 | 2014-04-14 17:23 | 2013-11-4 | Show | GitHub Exploit DB Packet Storm |
| 219858 | 7.5 | 危険 | SAP | - | SAP Business Object Processing Framework for ABAP におけるアクセス権を取得される脆弱性 |
CWE-255
証明書・パスワード管理 |
CVE-2014-2752 | 2014-04-14 17:23 | 2014-03-9 | Show | GitHub Exploit DB Packet Storm |
| 219859 | 7.5 | 危険 | SAP | - | SAP Print and Output Management におけるアクセス権を取得される脆弱性 |
CWE-255
証明書・パスワード管理 |
CVE-2014-2751 | 2014-04-14 17:22 | 2014-03-9 | Show | GitHub Exploit DB Packet Storm |
| 219860 | 5 | 警告 | SAP | - | SAP HANA の HANA ICM プロセスにおける重要な情報を取得される脆弱性 |
CWE-200
情報漏えい |
CVE-2014-2749 | 2014-04-14 17:22 | 2014-01-7 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:May 23, 2026, 4:08 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 294741 | - | tomatocart | tomatocart | TomatoCart 1.1.7, when the PayPal Express Checkout module is enabled in sandbox mode, allows remote authenticated users to bypass intended payment requirements by modifying a certain redirection URL. |
CWE-264
Permissions, Privileges, and Access Controls |
CVE-2012-4934 | 2024-11-21 10:43 | 2012-10-31 | Show | GitHub Exploit DB Packet Storm | |
| 294742 | - | emc | avamar | EMC Avamar Client for VMware 6.1 stores the cleartext server root password on the proxy client, which might allow remote attackers to obtain sensitive information by leveraging "network access" to th… |
CWE-255
Credentials Management |
CVE-2012-4610 | 2024-11-21 10:43 | 2012-10-31 | Show | GitHub Exploit DB Packet Storm | |
| 294743 | - | laurent_destailleur | awstats | Unspecified vulnerability in awredir.pl in AWStats before 7.1 has unknown impact and attack vectors. |
CWE-79
Cross-site Scripting |
CVE-2012-4547 | 2024-11-21 10:43 | 2012-10-31 | Show | GitHub Exploit DB Packet Storm | |
| 294744 | - | cisco |
adaptive_security_appliance_software 5500_series_adaptive_security_appliance 7600_router catalyst_6500 catalyst_6503-e catalyst_6504-e catalyst_6506-e catalyst_6509-e catalyst… |
The DCERPC inspection engine on Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services Module (ASASM) in Cisco Catalyst 6500 series devices, with software 8.3 before 8.3(2… |
CWE-119
Incorrect Access of Indexable Resource ('Range Error') |
CVE-2012-4663 | 2024-11-21 10:43 | 2012-10-30 | Show | GitHub Exploit DB Packet Storm | |
| 294745 | - | wftpserver | wing_ftp_server | Wing FTP Server before 4.1.1 allows remote authenticated users to cause a denial of service (daemon crash) via two zip commands. |
CWE-119
Incorrect Access of Indexable Resource ('Range Error') |
CVE-2012-4729 | 2024-11-21 10:43 | 2012-10-26 | Show | GitHub Exploit DB Packet Storm | |
| 294746 | - |
apache citrix |
cloudstack | Citrix Cloud.com CloudStack, and Apache CloudStack pre-release, allows remote attackers to make arbitrary API calls by leveraging the system user account, as demonstrated by API calls to delete VMs. |
CWE-264
Permissions, Privileges, and Access Controls |
CVE-2012-4501 | 2024-11-21 10:43 | 2012-10-26 | Show | GitHub Exploit DB Packet Storm | |
| 294747 | - | cisco |
adaptive_security_appliance_software 5500_series_adaptive_security_appliance 7600_router catalyst_6500 catalyst_6503-e catalyst_6504-e catalyst_6506-e catalyst_6509-e catalyst… |
The DCERPC inspection engine on Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services Module (ASASM) in Cisco Catalyst 6500 series devices, with software 8.3 before 8.3(2… |
CWE-119
Incorrect Access of Indexable Resource ('Range Error') |
CVE-2012-4662 | 2024-11-21 10:43 | 2012-10-30 | Show | GitHub Exploit DB Packet Storm | |
| 294748 | - | cisco |
adaptive_security_appliance_software 5500_series_adaptive_security_appliance 7600_router catalyst_6500 catalyst_6503-e catalyst_6504-e catalyst_6506-e catalyst_6509-e catalyst… |
Stack-based buffer overflow in the DCERPC inspection engine on Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services Module (ASASM) in Cisco Catalyst 6500 series devices,… |
CWE-119
Incorrect Access of Indexable Resource ('Range Error') |
CVE-2012-4661 | 2024-11-21 10:43 | 2012-10-30 | Show | GitHub Exploit DB Packet Storm | |
| 294749 | - | cisco |
adaptive_security_appliance_software 5500_series_adaptive_security_appliance catalyst_6500 catalyst_6503-e catalyst_6504-e catalyst_6506-e catalyst_6509-e catalyst_6509-neb-a … |
The SIP inspection engine on Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services Module (ASASM) in Cisco Catalyst 6500 series devices, with software 8.2 before 8.2(5.17… |
CWE-119
Incorrect Access of Indexable Resource ('Range Error') |
CVE-2012-4660 | 2024-11-21 10:43 | 2012-10-30 | Show | GitHub Exploit DB Packet Storm | |
| 294750 | - | cisco |
adaptive_security_appliance_software 5500_series_adaptive_security_appliance catalyst_6500 catalyst_6503-e catalyst_6504-e catalyst_6506-e catalyst_6509-e catalyst_6509-neb-a … |
The AAA functionality in the IPv4 SSL VPN implementations on Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services Module (ASASM) in Cisco Catalyst 6500 series devices, w… |
CWE-287
Improper Authentication |
CVE-2012-4659 | 2024-11-21 10:43 | 2012-10-30 | Show | GitHub Exploit DB Packet Storm |