Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 12, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
240421 5 警告 IBM - IBM WebSphere Portal の Dojo モジュールにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2012-2181 2012-07-5 13:57 2012-07-3 Show GitHub Exploit DB Packet Storm
240422 10 危険 アバイア - Avaya Aura Application Server 5300 におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2011-5096 2012-07-5 13:46 2011-08-2 Show GitHub Exploit DB Packet Storm
240423 10 危険 アバイア - Avaya IP Office Customer Call Reporter における任意のコードを実行される脆弱性 CWE-Other
その他
CVE-2012-3811 2012-07-5 13:44 2012-06-28 Show GitHub Exploit DB Packet Storm
240424 5 警告 Joomla! - Joomla! における重要な情報を取得される脆弱性 CWE-noinfo
情報不足
CVE-2012-2748 2012-07-5 11:57 2012-06-18 Show GitHub Exploit DB Packet Storm
240425 7.5 危険 Joomla! - Joomla! における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-2747 2012-07-5 11:56 2012-06-18 Show GitHub Exploit DB Packet Storm
240426 9.3 危険 Argonne National Laboratory - bcfg2 の Trigger プラグインにおける任意のコマンドを実行される脆弱性 CWE-78
OSコマンド・インジェクション
CVE-2012-3366 2012-07-4 15:54 2012-07-3 Show GitHub Exploit DB Packet Storm
240427 1.2 注意 Fedora Project
レッドハット
- 389 Directory Server におけるパスワードを読まれる脆弱性 CWE-310
暗号の問題
CVE-2012-2678 2012-07-4 15:32 2012-06-20 Show GitHub Exploit DB Packet Storm
240428 4 警告 Linux - Linux Kernel におけるサービス運用妨害 (システムクラッシュ) の脆弱性 CWE-399
リソース管理の問題
CVE-2012-2133 2012-07-4 15:30 2012-07-3 Show GitHub Exploit DB Packet Storm
240429 1.9 注意 レッドハット - Automatic Bug Reporting Tool (ABRT) の C handler プラグインにおける重要な情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-1106 2012-07-4 15:28 2012-06-20 Show GitHub Exploit DB Packet Storm
240430 2.3 注意 Fedora Project - 389 Directory Server の servers/plugins/acl/acllas.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-0833 2012-07-4 15:26 2012-01-6 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 13, 2026, 5:05 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
286241 - simplerisk simplerisk Cross-site scripting (XSS) vulnerability in management/prioritize_planning.php in SimpleRisk before 20130916-001 allows remote attackers to inject arbitrary web script or HTML via the new_project par… CWE-79
Cross-site Scripting
CVE-2013-5749 2024-11-21 10:58 2014-05-12 Show GitHub Exploit DB Packet Storm
286242 - simplerisk simplerisk Cross-site request forgery (CSRF) vulnerability in management/prioritize_planning.php in SimpleRisk before 20130916-001 allows remote attackers to hijack the authentication of users for requests that… CWE-352
 Origin Validation Error
CVE-2013-5748 2024-11-21 10:58 2014-05-12 Show GitHub Exploit DB Packet Storm
286243 - hp network_node_manager_i Cross-site scripting (XSS) vulnerability in HP Network Node Manager i (NNMi) 9.0, 9.10, and 9.20 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. CWE-79
Cross-site Scripting
CVE-2013-6220 2024-11-21 10:58 2014-05-10 Show GitHub Exploit DB Packet Storm
286244 - bradesco_gateway_plugin_project bradesco_gateway Cross-site scripting (XSS) vulnerability in falha.php in the Bradesco Gateway plugin 2.0 for Wordpress, as used in the WP e-Commerce plugin, allows remote attackers to inject arbitrary web script or … CWE-79
Cross-site Scripting
CVE-2013-5916 2024-11-21 10:58 2014-05-9 Show GitHub Exploit DB Packet Storm
286245 - uclouvain openjpeg OpenJPEG 1.5.1 allows remote attackers to obtain sensitive information via unspecified vectors that trigger a heap-based out-of-bounds read. CWE-20
 Improper Input Validation 
CVE-2013-6053 2024-11-21 10:58 2014-04-28 Show GitHub Exploit DB Packet Storm
286246 - joomlaboat com_youtubegallery Cross-site scripting (XSS) vulnerability in includes/flvthumbnail.php in the Youtube Gallery (com_youtubegallery) component 3.4.0 for Joomla! allows remote attackers to inject arbitrary web script or… CWE-79
Cross-site Scripting
CVE-2013-5956 2024-11-21 10:58 2014-04-25 Show GitHub Exploit DB Packet Storm
286247 - revive-adserver
openx
revive_adserver
openx
Multiple cross-site request forgery (CSRF) vulnerabilities in OpenX 2.8.11 and earlier allow remote attackers to hijack the authentication of administrators for requests that delete (1) users via adm… CWE-352
 Origin Validation Error
CVE-2013-5954 2024-11-21 10:58 2014-04-25 Show GitHub Exploit DB Packet Storm
286248 - t-mobile
asus
tm-ac1900
rt-ac68u_firmware
rt-ac68u
The Network Analysis tab (Main_Analysis_Content.asp) in the ASUS RT-AC68U and other RT series routers with firmware before 3.0.0.4.374.5047 allows remote authenticated users to execute arbitrary comm… CWE-78
OS Command 
CVE-2013-5948 2024-11-21 10:58 2014-04-22 Show GitHub Exploit DB Packet Storm
286249 - hp hp-ux_whitelisting Unspecified vulnerability in HP HP-UX Whitelisting (aka WLI) before A.01.02.02 on HP-UX B.11.31 allows local users to bypass intended access restrictions via unknown vectors. NVD-CWE-noinfo
CVE-2013-6219 2024-11-21 10:58 2014-04-20 Show GitHub Exploit DB Packet Storm
286250 - hp network_node_manager_i Unspecified vulnerability in HP Network Node Manager i (NNMi) 9.0x, 9.1x, and 9.2x allows remote attackers to execute arbitrary code via unknown vectors. NVD-CWE-noinfo
CVE-2013-6218 2024-11-21 10:58 2014-04-20 Show GitHub Exploit DB Packet Storm