Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 26, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
230711 5 警告 Firefly Media Server - Firefly Media Server におけるサービス運用妨害 (NULL ポインタデリファレンス) の脆弱性 CWE-Other
その他
CVE-2012-5875 2013-01-22 15:01 2013-01-18 Show GitHub Exploit DB Packet Storm
230712 2.1 注意 Inkscape - Inkscape のラスタ化プロセスにおける任意のファイルを読まれる脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-5656 2013-01-22 15:00 2012-12-17 Show GitHub Exploit DB Packet Storm
230713 4.3 警告 レッドハット - JBoss Enterprise Portal Platform の GateIn Portal におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-5531 2013-01-22 14:59 2013-01-7 Show GitHub Exploit DB Packet Storm
230714 5 警告 レッドハット
SquirrelMail Project
- Red Hat Enterprise Linux で使用される SquirrelMail におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2012-2124 2013-01-22 14:59 2013-01-8 Show GitHub Exploit DB Packet Storm
230715 9.3 危険 DELL EMC (旧 EMC Corporation) - EMC NetWorker の nsrindexd におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2012-4607 2013-01-22 14:58 2013-01-17 Show GitHub Exploit DB Packet Storm
230716 3.5 注意 IBM - IBM Tivoli Federated Identity Manager におけるパスワードを破られる脆弱性 CWE-255
証明書・パスワード管理
CVE-2012-3310 2013-01-22 14:57 2013-01-17 Show GitHub Exploit DB Packet Storm
230717 3.5 注意 Samba Project - Samba における LDAP ディレクトリオブジェクトの変更上の制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2013-0172 2013-01-22 14:56 2013-01-17 Show GitHub Exploit DB Packet Storm
230718 4.6 警告 シスコシステムズ - Windows 上の Cisco VPN Client におけるサービス運用妨害 (カーネルフォルト および システムクラッシュ) の脆弱性 CWE-noinfo
情報不足
CVE-2012-5429 2013-01-22 14:41 2013-01-12 Show GitHub Exploit DB Packet Storm
230719 5 警告 SpecView - SpecView の Web サーバにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2012-5972 2013-01-22 14:28 2013-01-11 Show GitHub Exploit DB Packet Storm
230720 4.3 警告 General Electric Company - GE Intelligent Platforms Proficy HMI/SCADA - CIMPLICITY における整数オーバーフローの脆弱性 CWE-189
数値処理の問題
CVE-2012-4689 2013-01-22 14:18 2013-01-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 27, 2026, 4:35 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
297701 - katello katello_installer Katello Installer before 0.0.18 uses world-readable permissions for /etc/pki/tls/private/katello-node.key when deploying a child Pulp node, which allows local users to obtain the private key by readi… CWE-264
Permissions, Privileges, and Access Controls
CVE-2013-4455 2024-11-21 10:55 2014-05-15 Show GitHub Exploit DB Packet Storm
297702 - madeofcode omniauth-facebook The omniauth-facebook gem 1.4.1 before 1.5.0 does not properly store the session parameter, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks via the state parameter. CWE-352
 Origin Validation Error
CVE-2013-4562 2024-11-21 10:55 2014-05-14 Show GitHub Exploit DB Packet Storm
297703 - drupalauth_project drupalauth lib/Auth/Source/External.php in the drupalauth module before 1.2.2 for simpleSAMLphp allows remote attackers to authenticate as an arbitrary user via the user name (uid) in a cookie. CWE-287
Improper Authentication
CVE-2013-4552 2024-11-21 10:55 2014-05-14 Show GitHub Exploit DB Packet Storm
297704 - gitlab gitlab
gitlab-shell
The repository import feature in gitlab-shell before 1.7.4, as used in GitLab, allows remote authenticated users to execute arbitrary commands via the import URL. NVD-CWE-Other
CVE-2013-4546 2024-11-21 10:55 2014-05-14 Show GitHub Exploit DB Packet Storm
297705 - monster_menus_module_project monster_menus The Monster Menus module 7.x-1.x before 7.x-1.15 allows remote attackers to read arbitrary node comments via a crafted URL. CWE-264
Permissions, Privileges, and Access Controls
CVE-2013-4504 2024-11-21 10:55 2014-05-14 Show GitHub Exploit DB Packet Storm
297706 - feed_element_mapper_project feed_element_mapper Cross-site scripting (XSS) vulnerability in the Feed Element Mapper module for Drupal allows remote authenticated users with the "administer taxonomy" permission to inject arbitrary web script or HTM… CWE-79
Cross-site Scripting
CVE-2013-4503 2024-11-21 10:55 2014-05-14 Show GitHub Exploit DB Packet Storm
297707 - nathan_haug filefield_sources The FileField Sources module 6.x-1.x before 6.x-1.9 and 7.x-1.x before 7.x-1.9 for Drupal does not properly check file permissions, which allows remote authenticated users to read arbitrary files by … CWE-264
Permissions, Privileges, and Access Controls
CVE-2013-4502 2024-11-21 10:55 2014-05-14 Show GitHub Exploit DB Packet Storm
297708 - quiz_module_project quiz The default views in the Quiz module 6.x-4.x before 6.x-4.5 for Drupal allows remote attackers to obtain sensitive quiz results via unspecified vectors. CWE-264
Permissions, Privileges, and Access Controls
CVE-2013-4501 2024-11-21 10:55 2014-05-14 Show GitHub Exploit DB Packet Storm
297709 - quiz_module_project quiz The Quiz module 6.x-4.x before 6.x-4.5 for Drupal allows remote authenticated users with the "view any quiz results" or "view results for own quiz" permission to delete arbitrary results via the dele… CWE-264
Permissions, Privileges, and Access Controls
CVE-2013-4500 2024-11-21 10:55 2014-05-14 Show GitHub Exploit DB Packet Storm
297710 - gitlab gitlab
gitlab-shell
The SSH key upload feature (lib/gitlab_keys.rb) in gitlab-shell before 1.7.3, as used in GitLab 5.0 before 5.4.1 and 6.x before 6.2.3, allows remote authenticated users to execute arbitrary commands … NVD-CWE-Other
CVE-2013-4490 2024-11-21 10:55 2014-05-14 Show GitHub Exploit DB Packet Storm