Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 31, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
220081 3.3 注意 npm, Inc. - Node Packaged Modules の lib/npm.js における任意のファイルを上書きされる脆弱性 CWE-59
リンク解釈の問題 		CVE-2013-4116 2014-04-25 14:26 2013-07-8 Show GitHub Exploit DB Packet Storm
220082 4.3 警告 Apache Software Foundation - Apache Archiva におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-2187 2014-04-25 14:14 2013-02-19 Show GitHub Exploit DB Packet Storm
220083 3.3 注意 Jonathan Leung - Ruby 用 Show In Browser gem における任意の Web スクリプトまたは HTML を挿入される脆弱性 CWE-59
リンク解釈の問題 		CVE-2013-2105 2014-04-25 14:06 2013-05-18 Show GitHub Exploit DB Packet Storm
220084 4.3 警告 k5n.us - Craig Knudsen WebCalendar におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-1421 2014-04-25 13:57 2013-02-22 Show GitHub Exploit DB Packet Storm
220085 6.8 警告 PaperCut Software International Pty - Papercut MF および NG の管理 UI におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2014-2659 2014-04-25 13:39 2014-04-10 Show GitHub Exploit DB Packet Storm
220086 4.3 警告 CJ Niemira - phpMyID の MyID.php の wrap_html 関数におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-2890 2014-04-25 12:26 2014-04-17 Show GitHub Exploit DB Packet Storm
220087 4.9 警告 アップル - Apple OS X のカーネルにおける ASLR 保護メカニズムを回避される脆弱性 CWE-200
情報漏えい 		CVE-2014-1322 2014-04-25 12:21 2014-04-22 Show GitHub Exploit DB Packet Storm
220088 3.3 注意 アップル - Apple OS X のパワーマネジメントにおける画面ロック状態への遷移を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2014-1321 2014-04-25 12:21 2014-04-22 Show GitHub Exploit DB Packet Storm
220089 4.9 警告 アップル - 複数の Apple 製品の IOKit における ASLR 保護メカニズムを回避される脆弱性 CWE-200
情報漏えい 		CVE-2014-1320 2014-04-25 12:20 2014-04-22 Show GitHub Exploit DB Packet Storm
220090 5.8 警告 yaSSL - wolfSSL CyaSSL におけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-2900 2014-04-25 12:19 2014-04-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 31, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
296111 - ibm rational_clearquest The Web Client (aka CQ Web) in IBM Rational ClearQuest 7.1.2.x before 7.1.2.9 and 8.0.0.x before 8.0.0.5 allows remote attackers to obtain sensitive information via unspecified vectors that trigger a… CWE-200
Information Exposure 		CVE-2012-5765 2024-11-21 10:45 2012-12-20 Show GitHub Exploit DB Packet Storm
296112 - squid-cache squid Multiple memory leaks in tools/cachemgr.cc in cachemgr.cgi in Squid 2.x and 3.x before 3.1.22, 3.2.x before 3.2.4, and 3.3.x before 3.3.0.2 allow remote attackers to cause a denial of service (memory… CWE-20
 Improper Input Validation  		CVE-2012-5643 2024-11-21 10:45 2012-12-20 Show GitHub Exploit DB Packet Storm
296113 - ovirt sanlock The setup_logging function in log.h in SANLock uses world-writable permissions for /var/log/sanlock.log, which allows local users to overwrite the file content or bypass intended disk-quota restricti… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2012-5638 2024-11-21 10:45 2012-12-20 Show GitHub Exploit DB Packet Storm
296114 - cisco wireless_lan_controller_software
2000_wireless_lan_controller
2100_wireless_lan_controller
2500_wireless_lan_controller
4100_wireless_lan_controller
4400_wireless_lan_controller
550… 		Cross-site scripting (XSS) vulnerability in screens/base/web_auth_custom.html on Cisco Wireless LAN Controller (WLC) devices with software 7.2.110.0 allows remote authenticated users to inject arbitr… CWE-79
Cross-site Scripting 		CVE-2012-6007 2024-11-21 10:45 2012-12-19 Show GitHub Exploit DB Packet Storm
296115 - cisco wireless_lan_controller_software
2000_wireless_lan_controller
2100_wireless_lan_controller
2500_wireless_lan_controller
4100_wireless_lan_controller
4400_wireless_lan_controller
550… 		screens/base/web_auth_custom.html on Cisco Wireless LAN Controller (WLC) devices with software 7.2.110.0 allows remote authenticated users to cause a denial of service (device reload) via a certain b… NVD-CWE-noinfo
CVE-2012-5991 2024-11-21 10:45 2012-12-19 Show GitHub Exploit DB Packet Storm
296116 - vmware view Multiple directory traversal vulnerabilities in the (1) View Connection Server and (2) View Security Server in VMware View 4.x before 4.6.2 and 5.x before 5.1.2 allow remote attackers to read arbitra… CWE-22
Path Traversal 		CVE-2012-5978 2024-11-21 10:45 2012-12-19 Show GitHub Exploit DB Packet Storm
296117 - huawei e585
e585u-82 		The Huawei E585 device allows remote attackers to cause a denial of service (NULL pointer dereference and device outage) via crafted HTTP requests, as demonstrated by unspecified vulnerability-scanni… NVD-CWE-Other
CVE-2012-5970 2024-11-21 10:45 2012-12-19 Show GitHub Exploit DB Packet Storm
296118 - huawei e585
e585u-82 		Multiple directory traversal vulnerabilities on the Huawei E585 device allow remote attackers to (1) read arbitrary files via a .. (dot dot) in the PATH_INFO of an sdcard/ request or (2) modify arbit… CWE-22
Path Traversal 		CVE-2012-5969 2024-11-21 10:45 2012-12-19 Show GitHub Exploit DB Packet Storm
296119 - huawei e585
e585u-82 		The Huawei E585 device does not validate the status of admin sessions, which allows remote attackers to obtain sensitive user information and the session ID, and modify data, by leveraging access to … CWE-20
 Improper Input Validation  		CVE-2012-5968 2024-11-21 10:45 2012-12-19 Show GitHub Exploit DB Packet Storm
296120 - cisco wireless_lan_controller_software
2000_wireless_lan_controller
2100_wireless_lan_controller
2500_wireless_lan_controller
4100_wireless_lan_controller
4400_wireless_lan_controller
550… 		Multiple cross-site request forgery (CSRF) vulnerabilities on Cisco Wireless LAN Controller (WLC) devices with software 7.2.110.0 allow remote attackers to hijack the authentication of administrators… CWE-352
 Origin Validation Error 		CVE-2012-5992 2024-11-21 10:45 2012-12-19 Show GitHub Exploit DB Packet Storm