Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 15, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
240271	4.3	警告	マカフィー	-	McAfee Enterprise Mobility Manager のポータルにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-4590	2012-08-24 11:48	2012-08-22	Show	GitHub Exploit DB Packet Storm

240272	2.1	注意	マカフィー	-	McAfee Enterprise Mobility Manager のポータルにおけるアクセス権を取得される脆弱性	CWE-DesignError	CVE-2012-4589	2012-08-24 11:47	2012-08-22	Show	GitHub Exploit DB Packet Storm

240273	4.3	警告	マカフィー	-	McAfee Enterprise Mobility Manager におけるサービス運用妨害 (DoS) の脆弱性	CWE-255 証明書・パスワード管理	CVE-2012-4588	2012-08-24 11:46	2012-03-23	Show	GitHub Exploit DB Packet Storm

240274	3.5	注意	マカフィー	-	McAfee Enterprise Mobility Manager におけるユーザーパスワードを検出される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-4587	2012-08-24 11:39	2012-03-23	Show	GitHub Exploit DB Packet Storm

240275	3.5	注意	マカフィー	-	McAfee Email and Web Security および McAfee Email Gateway におけるアクセス権の設定を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-4586	2012-08-24 11:36	2012-03-13	Show	GitHub Exploit DB Packet Storm

240276	4	警告	マカフィー	-	McAfee Email and Web Security および McAfee Email Gateway における任意のファイルを読まれる脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-4585	2012-08-24 11:35	2012-03-13	Show	GitHub Exploit DB Packet Storm

240277	3.5	注意	マカフィー	-	McAfee Email and Web Security および McAfee Email Gateway における重要な情報を取得される脆弱性	CWE-310 暗号の問題	CVE-2012-4584	2012-08-24 11:35	2012-03-13	Show	GitHub Exploit DB Packet Storm

240278	4	警告	マカフィー	-	McAfee Email and Web Security および McAfee Email Gateway におけるセッショントークンを取得される脆弱性	CWE-200 情報漏えい	CVE-2012-4583	2012-08-24 11:34	2012-03-13	Show	GitHub Exploit DB Packet Storm

240279	4.9	警告	マカフィー	-	McAfee Email and Web Security および McAfee Email Gateway における任意の管理者アカウントのパスワードをリセットされる脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-4582	2012-08-24 11:32	2012-03-13	Show	GitHub Exploit DB Packet Storm

240280	6.8	警告	マカフィー	-	McAfee Email and Web Security および McAfee Email Gateway におけるセッションをハイジャックされる脆弱性	CWE-287 不適切な認証	CVE-2012-4581	2012-08-24 11:24	2012-03-13	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 15, 2026, 4:28 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
286231	-	microsoft	windows_8.1 windows_8	The Microsoft.XMLDOM ActiveX control in Microsoft Windows 8.1 and earlier does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service (memor…	CWE-399 Resource Management Errors	CVE-2013-7332	2024-11-21 11:00	2014-02-26	Show	GitHub Exploit DB Packet Storm

286232	-	belkin	wemo_home_automation_firmware	The Belkin WeMo Home Automation firmware before 3949 has a hardcoded GPG key, which makes it easier for remote attackers to spoof firmware updates and execute arbitrary code via crafted signed data.	CWE-310 Cryptographic Issues	CVE-2013-6952	2024-11-21 11:00	2014-02-23	Show	GitHub Exploit DB Packet Storm

286233	-	belkin	wemo_home_automation_firmware	The Belkin WeMo Home Automation firmware before 3949 does not maintain a set of Certification Authority public keys, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary X.5…	CWE-310 Cryptographic Issues	CVE-2013-6951	2024-11-21 11:00	2014-02-23	Show	GitHub Exploit DB Packet Storm

286234	-	belkin	wemo_home_automation_firmware	The Belkin WeMo Home Automation firmware before 3949 does not use SSL for the distribution feed, which allows man-in-the-middle attackers to install arbitrary firmware by spoofing a distribution serv…	CWE-310 Cryptographic Issues	CVE-2013-6950	2024-11-21 11:00	2014-02-23	Show	GitHub Exploit DB Packet Storm

286235	-	belkin	wemo_home_automation_firmware	The Belkin WeMo Home Automation firmware before 3949 does not properly use the STUN and TURN protocols, which allows remote attackers to hijack connections and possibly have unspecified other impact …	CWE-264 Permissions, Privileges, and Access Controls	CVE-2013-6949	2024-11-21 11:00	2014-02-23	Show	GitHub Exploit DB Packet Storm

286236	-	belkin	wemo_home_automation_firmware	The peerAddresses API in the Belkin WeMo Home Automation firmware before 3949 allows remote attackers to read arbitrary files via an XML document containing an external entity declaration in conjunct…	CWE-94 Code Injection	CVE-2013-6948	2024-11-21 11:00	2014-02-23	Show	GitHub Exploit DB Packet Storm

286237	-	php	php	Multiple integer signedness errors in the gdImageCrop function in ext/gd/gd.c in PHP 5.5.x before 5.5.9 allow remote attackers to cause a denial of service (application crash) or obtain sensitive inf…	CWE-189 Numeric Errors	CVE-2013-7328	2024-11-21 11:00	2014-02-18	Show	GitHub Exploit DB Packet Storm

286238	-	canonical php	ubuntu_linux php	The gdImageCrop function in ext/gd/gd.c in PHP 5.5.x before 5.5.9 does not check return values, which allows remote attackers to cause a denial of service (application crash) or possibly have unspeci…	CWE-20 Improper Input Validation	CVE-2013-7327	2024-11-21 11:00	2014-02-18	Show	GitHub Exploit DB Packet Storm

286239	-	php	php	Integer overflow in the gdImageCrop function in ext/gd/gd.c in PHP 5.5.x before 5.5.9 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impac…	CWE-189 Numeric Errors	CVE-2013-7226	2024-11-21 11:00	2014-02-18	Show	GitHub Exploit DB Packet Storm

286240	-	vtiger	vtiger_crm	Cross-site scripting (XSS) vulnerability in vTiger CRM 5.4.0 allows remote attackers to inject arbitrary web script or HTML via the (1) return_url parameter to modules\com_vtiger_workflow\savetemplat…	CWE-79 Cross-site Scripting	CVE-2013-7326	2024-11-21 11:00	2014-02-15	Show	GitHub Exploit DB Packet Storm