Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 4, 2026, 10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
230971 3.5 注意 Nancy Wichmann - Drupal 用 Announcements モジュール におけるノードのアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-4500 2012-11-2 15:06 2012-08-28 Show GitHub Exploit DB Packet Storm
230972 5 警告 Matthias Hutterer - Drupal 用 Email Field モジュールにおけるエンティティに格納されたアドレスに電子メールを送信される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-4499 2012-11-2 15:04 2012-08-29 Show GitHub Exploit DB Packet Storm
230973 2.1 注意 inclind - Drupal 用 Custom Publishing Options モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-4496 2012-11-2 15:04 2012-08-14 Show GitHub Exploit DB Packet Storm
230974 4 警告 Mime Mail Module Project - Drupal 用 Mime Mail モジュールにおける任意のファイルを添付ファイルとして送信される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-4495 2012-11-2 15:01 2012-08-8 Show GitHub Exploit DB Packet Storm
230975 4.3 警告 National Information Infrastructure Development Institute - Drupal 用 Shibboleth authentication モジュールにおけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-4494 2012-11-2 14:55 2012-08-8 Show GitHub Exploit DB Packet Storm
230976 2.1 注意 Isaac Sukin - Drupal 用 Shorten URLs モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-4492 2012-11-2 14:54 2012-08-8 Show GitHub Exploit DB Packet Storm
230977 5.8 警告 Earl Dunovant - Drupal 用 Monthly Archive by Node Type モジュールにおける制限しているノードにアクセスされる脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-4491 2012-11-2 14:53 2012-08-1 Show GitHub Exploit DB Packet Storm
230978 4.3 警告 Ricky Morse - Drupal 用 Excluded Users モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-4490 2012-11-2 14:45 2012-08-1 Show GitHub Exploit DB Packet Storm
230979 5.8 警告 Mark Burdett - Drupal 用 Secure Login モジュールにおけるオープンリダイレクトの脆弱性 CWE-20
不適切な入力確認
CVE-2012-4489 2012-11-2 14:43 2012-07-25 Show GitHub Exploit DB Packet Storm
230980 5 警告 Location module project - Drupal 用 Location モジュールにおけるノードまたはユーザの検索結果を読まれる脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-4488 2012-11-2 14:43 2012-07-25 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 4, 2026, 4:06 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
347741 - horde passwd Cross-site scripting (XSS) vulnerability in Horde Passwd module before 2.2.2 allows remote attackers to inject arbitrary web script or HTML via the parent's frame page title. NVD-CWE-Other
CVE-2005-1313 2008-09-6 05:48 2005-05-2 Show GitHub Exploit DB Packet Storm
347742 - horde kronolith Cross-site scripting (XSS) vulnerability in Horde Kronolith module before 1.1.4 allows remote attackers to inject arbitrary web script or HTML via the parent's frame page title. NVD-CWE-Other
CVE-2005-1314 2008-09-6 05:48 2005-05-2 Show GitHub Exploit DB Packet Storm
347743 - horde turba Cross-site scripting (XSS) vulnerability in Horde Turba module before 1.2.5 allows remote attackers to inject arbitrary web script or HTML via the parent's frame page title. NVD-CWE-Other
CVE-2005-1315 2008-09-6 05:48 2005-05-2 Show GitHub Exploit DB Packet Storm
347744 - horde chora Cross-site scripting (XSS) vulnerability in Horde Chora module before 1.2.3 allows remote attackers to inject arbitrary web script or HTML via the parent's frame page title. NVD-CWE-Other
CVE-2005-1317 2008-09-6 05:48 2005-04-25 Show GitHub Exploit DB Packet Storm
347745 - horde forwards Cross-site scripting (XSS) vulnerability in Horde Forwards E-Mail Forwarding Manager before 2.2.2 allows remote attackers to inject arbitrary web script or HTML via the parent's frame page title. NVD-CWE-Other
CVE-2005-1318 2008-09-6 05:48 2005-05-2 Show GitHub Exploit DB Packet Storm
347746 - horde imp Cross-site scripting (XSS) vulnerability in Horde IMP Webmail client before 3.2.8 allows remote attackers to inject arbitrary web script or HTML via the parent's frame page title. NVD-CWE-Other
CVE-2005-1319 2008-09-6 05:48 2005-05-2 Show GitHub Exploit DB Packet Storm
347747 - horde mnemo Cross-site scripting (XSS) vulnerability in Horde Mnemo Note Manager before 1.1.4 allows remote attackers to inject arbitrary web script or HTML via the parent's frame page title. NVD-CWE-Other
CVE-2005-1320 2008-09-6 05:48 2005-05-2 Show GitHub Exploit DB Packet Storm
347748 - horde vaction Cross-site scripting (XSS) vulnerability in Horde Vacation module before 2.2.2 allows remote attackers to inject arbitrary web script or HTML via the parent's frame page title. NVD-CWE-Other
CVE-2005-1321 2008-09-6 05:48 2005-05-2 Show GitHub Exploit DB Packet Storm
347749 - horde nag Cross-site scripting (XSS) vulnerability in Horde Nag Task List Manager before 1.1.3 allows remote attackers to inject arbitrary web script or HTML via the parent's frame page title. NVD-CWE-Other
CVE-2005-1322 2008-09-6 05:48 2005-05-2 Show GitHub Exploit DB Packet Storm
347750 - voodoo_circle voodoo_circle Buffer overflow in VooDoo cIRCle BOTNET before 1.0.33 allows remote authenticated attackers to cause a denial of service (client crash) via a crafted packet. NVD-CWE-Other
CVE-2005-1326 2008-09-6 05:48 2005-05-2 Show GitHub Exploit DB Packet Storm