Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 18, 2026, 4:01 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
224601 10 危険 Mozilla Foundation - 複数の Mozilla 製品の nsRangeUpdater::SelAdjDeleteNode 関数における任意のコードを実行される脆弱性 CWE-399
リソース管理の問題
CVE-2012-3959 2013-06-11 14:54 2012-08-28 Show GitHub Exploit DB Packet Storm
224602 10 危険 Mozilla Foundation - 複数の Mozilla 製品の nsHTMLEditRules::DeleteNonTableElements 関数における任意のコードを実行される脆弱性 CWE-399
リソース管理の問題
CVE-2012-3958 2013-06-11 14:50 2012-08-28 Show GitHub Exploit DB Packet Storm
224603 10 危険 Mozilla Foundation - 複数の Mozilla 製品の nsBlockFrame::MarkLineDirty 関数におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2012-3957 2013-06-11 14:45 2012-08-28 Show GitHub Exploit DB Packet Storm
224604 10 危険 Mozilla Foundation - 複数の Mozilla 製品の MediaStreamGraphThreadRunnable::Run 関数における任意のコードを実行される脆弱性 CWE-399
リソース管理の問題
CVE-2012-3956 2013-06-11 14:42 2012-08-28 Show GitHub Exploit DB Packet Storm
224605 6.8 警告 LibTIFF - LibTIFF の tiff2pdf におけるサービス運用妨害 (クラッシュ) の脆弱性 CWE-119
バッファエラー
CVE-2012-3401 2013-06-11 14:34 2012-08-13 Show GitHub Exploit DB Packet Storm
224606 6.8 警告 Linux - Linux Kernel の net/batman-adv/icmp_socket.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2011-4604 2013-06-10 15:27 2011-12-12 Show GitHub Exploit DB Packet Storm
224607 5 警告 Webmin Project - Webmin の file/edit_html.cgi における任意のファイルを読まれる脆弱性 CWE-287
不適切な認証
CVE-2012-2983 2013-06-10 14:04 2012-09-11 Show GitHub Exploit DB Packet Storm
224608 6.5 警告 Webmin Project - Webmin の file/show.cgi における任意のコマンドを実行される脆弱性 CWE-Other
その他
CVE-2012-2982 2013-06-10 14:02 2012-09-11 Show GitHub Exploit DB Packet Storm
224609 6 警告 Webmin Project - Webmin における任意の Perl コードを実行される脆弱性 CWE-20
不適切な入力確認
CVE-2012-2981 2013-06-10 14:00 2012-09-11 Show GitHub Exploit DB Packet Storm
224610 10 危険 Mozilla Foundation - 複数の Mozilla 製品の nsObjectLoadingContent::LoadObject 関数における任意のコードを実行される脆弱性 CWE-399
リソース管理の問題
CVE-2012-1973 2013-06-10 13:44 2012-08-28 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 18, 2026, 4:12 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
278751 - yurl_retwitt_project yurl_retwitt Multiple cross-site request forgery (CSRF) vulnerabilities in the yURL ReTwitt plugin 1.4 and earlier for WordPress allow remote attackers to hijack the authentication of administrators for requests … CWE-352
 Origin Validation Error
CVE-2014-9341 2024-11-21 11:20 2014-12-20 Show GitHub Exploit DB Packet Storm
278752 - wpcommenttwit_project wpcommenttwit Multiple cross-site request forgery (CSRF) vulnerabilities in the wpCommentTwit plugin 0.5 and earlier for WordPress allow remote attackers to hijack the authentication of administrators for requests… CWE-352
 Origin Validation Error
CVE-2014-9340 2024-11-21 11:20 2014-12-20 Show GitHub Exploit DB Packet Storm
278753 - jayde_online spnbabble Multiple cross-site request forgery (CSRF) vulnerabilities in the SPNbabble plugin 1.4.1 and earlier for WordPress allow remote attackers to hijack the authentication of administrators for requests t… CWE-352
 Origin Validation Error
CVE-2014-9339 2024-11-21 11:20 2014-12-20 Show GitHub Exploit DB Packet Storm
278754 - o2tweet_project o2tweet Multiple cross-site request forgery (CSRF) vulnerabilities in the O2Tweet plugin 0.0.4 and earlier for WordPress allow remote attackers to hijack the authentication of administrators for requests tha… CWE-352
 Origin Validation Error
CVE-2014-9338 2024-11-21 11:20 2014-12-20 Show GitHub Exploit DB Packet Storm
278755 - mikiurl_wordpress_eklentisi_project mikiurl_wordpress_eklentisi Multiple cross-site request forgery (CSRF) vulnerabilities in the Mikiurl Wordpress Eklentisi plugin 2.0 and earlier for WordPress allow remote attackers to hijack the authentication of administrator… CWE-352
 Origin Validation Error
CVE-2014-9337 2024-11-21 11:20 2014-12-20 Show GitHub Exploit DB Packet Storm
278756 - itwitter_project itwitter Multiple cross-site request forgery (CSRF) vulnerabilities in the iTwitter plugin 0.04 and earlier for WordPress allow remote attackers to hijack the authentication of administrators for requests tha… CWE-352
 Origin Validation Error
CVE-2014-9336 2024-11-21 11:20 2014-12-20 Show GitHub Exploit DB Packet Storm
278757 - dandyid_services_project dandyid_services Multiple cross-site request forgery (CSRF) vulnerabilities in the DandyID Services plugin 1.5.9 and earlier for WordPress allow remote attackers to hijack the authentication of administrators for req… CWE-352
 Origin Validation Error
CVE-2014-9335 2024-11-21 11:20 2014-12-20 Show GitHub Exploit DB Packet Storm
278758 - otrs otrs_help_desk The GenericInterface in OTRS Help Desk 3.2.x before 3.2.17, 3.3.x before 3.3.11, and 4.0.x before 4.0.3 allows remote authenticated users to access and modify arbitrary tickets via unspecified vector… CWE-264
Permissions, Privileges, and Access Controls
CVE-2014-9324 2024-11-21 11:20 2014-12-20 Show GitHub Exploit DB Packet Storm
278759 - glpi-project glpi SQL injection vulnerability in ajax/getDropdownValue.php in GLPI before 0.85.1 allows remote authenticated users to execute arbitrary SQL commands via the condition parameter. CWE-89
SQL Injection
CVE-2014-9258 2024-11-21 11:20 2014-12-20 Show GitHub Exploit DB Packet Storm
278760 - morfy_cms_project morfy_cms Static code injection vulnerability in install.php in Morfy CMS 1.05 allows remote authenticated users to inject arbitrary PHP code into config.php via the site_url parameter. CWE-94
Code Injection
CVE-2014-9185 2024-11-21 11:20 2014-12-20 Show GitHub Exploit DB Packet Storm