Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 19, 2026, 2 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
240481 7.8 危険 Arbiter Systems - Arbiter Systems Power Sentinel 1133A デバイスのファームウェアにおけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2012-3012 2012-09-7 15:15 2012-09-5 Show GitHub Exploit DB Packet Storm
240482 6.8 警告 Wikka Development Team - WikkaWiki の AdminUsers コンポーネントにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2011-4452 2012-09-7 15:13 2011-11-13 Show GitHub Exploit DB Packet Storm
240483 6.4 警告 Wikka Development Team - WikkaWiki の handlers/files.xml/files.xml.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2011-4450 2012-09-7 15:12 2011-12-6 Show GitHub Exploit DB Packet Storm
240484 6.8 警告 Wikka Development Team - WikkaWiki の actions/files/files.php における任意の PHP コードを実行される脆弱性 CWE-noinfo
情報不足
CVE-2011-4449 2012-09-7 15:09 2011-12-3 Show GitHub Exploit DB Packet Storm
240485 7.5 危険 Wikka Development Team - WikkaWiki の actions/usersettings/usersettings.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2011-4448 2012-09-7 14:56 2011-12-3 Show GitHub Exploit DB Packet Storm
240486 5 警告 Apache Software Foundation - Apache Struts におけるサービス運用妨害 (CPU 資源の消費) の脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-4387 2012-09-7 14:54 2012-08-3 Show GitHub Exploit DB Packet Storm
240487 6.8 警告 Apache Software Foundation - Apache Struts のトークンチェックメカニズムにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2012-4386 2012-09-7 14:52 2012-08-3 Show GitHub Exploit DB Packet Storm
240488 5 警告 Thomas Eibner - Apache HTTP Server 用 mod_rpaf モジュールにおけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足
CVE-2012-3526 2012-09-7 14:49 2012-09-5 Show GitHub Exploit DB Packet Storm
240489 2.1 注意 Tigerfish - Drupal 用 Fancy Slide モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-2068 2012-09-6 14:05 2012-03-14 Show GitHub Exploit DB Packet Storm
240490 6.8 警告 CKEditor Team - Drupal 用 FCKeditor および CKEditor モジュールにおける任意の PHP コードを実行される脆弱性 CWE-noinfo
情報不足
CVE-2012-2067 2012-09-6 14:03 2012-03-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 19, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
285541 - ganesha_digital_library_project ganesha_digital_library Multiple directory traversal vulnerabilities in class/session.php in Ganesha Digital Library (GDL) 4.2 allow remote attackers to read arbitrary files via a .. (dot dot) in the (1) newlang or (2) newt… CWE-22
Path Traversal
CVE-2014-100029 2024-11-21 11:03 2015-01-14 Show GitHub Exploit DB Packet Storm
285542 - webcrafted_project webcrafted Cross-site scripting (XSS) vulnerability in /signup in WEBCrafted allows remote attackers to inject arbitrary web script or HTML via the username. CWE-79
Cross-site Scripting
CVE-2014-100028 2024-11-21 11:03 2015-01-14 Show GitHub Exploit DB Packet Storm
285543 - getusedtoit wp_slimstat Cross-site scripting (XSS) vulnerability in the WP SlimStat plugin before 3.5.6 for WordPress allows remote attackers to inject arbitrary web script or HTML via a crafted URL. CWE-79
Cross-site Scripting
CVE-2014-100027 2024-11-21 11:03 2015-01-14 Show GitHub Exploit DB Packet Storm
285544 - april\'s_super_functions_pack_project april\'s_super_functions_pack Cross-site scripting (XSS) vulnerability in readme.php in the April's Super Functions Pack plugin before 1.4.8 for WordPress allows remote attackers to inject arbitrary web script or HTML via the pag… CWE-79
Cross-site Scripting
CVE-2014-100026 2024-11-21 11:03 2015-01-14 Show GitHub Exploit DB Packet Storm
285545 - savsoft_technologies savsoft_quiz Cross-site request forgery (CSRF) vulnerability in index.php/user_data/insert_user in Savsoft Quiz allows remote attackers to hijack the authentication of administrators for requests that create an a… CWE-352
 Origin Validation Error
CVE-2014-100025 2024-11-21 11:03 2015-01-14 Show GitHub Exploit DB Packet Storm
285546 - seopanel seo_panel Cross-site scripting (XSS) vulnerability in Seo Panel before 3.4.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. CWE-79
Cross-site Scripting
CVE-2014-100024 2024-11-21 11:03 2015-01-14 Show GitHub Exploit DB Packet Storm
285547 - mtouch_quiz_project mtouch_quiz Multiple cross-site scripting (XSS) vulnerabilities in question.php in the mTouch Quiz before 3.0.7 for WordPress allow remote attackers to inject arbitrary web script or HTML via the quiz parameter … CWE-79
Cross-site Scripting
CVE-2014-100023 2024-11-21 11:03 2015-01-14 Show GitHub Exploit DB Packet Storm
285548 - mtouch_quiz_project mtouch_quiz SQL injection vulnerability in question.php in the mTouch Quiz before 3.0.7 for WordPress allows remote attackers to execute arbitrary SQL commands via the quiz parameter to wp-admin/edit.php. CWE-89
SQL Injection
CVE-2014-100022 2024-11-21 11:03 2015-01-14 Show GitHub Exploit DB Packet Storm
285549 - orangehrm orangehrm Cross-site scripting (XSS) vulnerability in symfony/web/index.php/pim/viewEmployeeList in OrangeHRM before 3.1.2 allows remote attackers to inject arbitrary web script or HTML via the empsearch[emplo… CWE-79
Cross-site Scripting
CVE-2014-100021 2024-11-21 11:03 2015-01-14 Show GitHub Exploit DB Packet Storm
285550 - itechscripts itechclassifieds SQL injection vulnerability in ChangeEmail.php in iTechClassifieds 3.03.057 allows remote attackers to execute arbitrary SQL commands via the PreviewNum parameter. NOTE: the CatID parameter is alrea… CWE-89
SQL Injection
CVE-2014-100020 2024-11-21 11:03 2015-01-14 Show GitHub Exploit DB Packet Storm