Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 16, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
240511 4.3 警告 AfterLogic - AfterLogic MailSuite Pro におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-2587 2012-08-14 16:37 2012-08-12 Show GitHub Exploit DB Packet Storm
240512 4.3 警告 Zoho Corporation - ManageEngine ServiceDesk Plus におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-2585 2012-08-14 16:35 2012-08-12 Show GitHub Exploit DB Packet Storm
240513 4.3 警告 T-dah - T-dah WebMail におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-2573 2012-08-14 16:34 2012-08-12 Show GitHub Exploit DB Packet Storm
240514 4.3 警告 WinWebMail - WinWebMail Servert におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-2571 2012-08-14 16:33 2012-08-12 Show GitHub Exploit DB Packet Storm
240515 10 危険 Amazon.com, Inc. - Amazon Kindle Touch における任意のコマンドを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2012-4249 2012-08-14 16:31 2012-08-12 Show GitHub Exploit DB Packet Storm
240516 9.3 危険 Amazon.com, Inc. - Amazon Kindle Touch における脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-4248 2012-08-14 16:30 2012-08-12 Show GitHub Exploit DB Packet Storm
240517 7.5 危険 Dir2web - Dir2web における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2012-4070 2012-08-14 16:29 2012-08-12 Show GitHub Exploit DB Packet Storm
240518 5 警告 Dir2web - Dir2web におけるデータベースをダウンロードされる脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-4069 2012-08-14 16:26 2012-08-12 Show GitHub Exploit DB Packet Storm
240519 4.3 警告 Alt-N - Alt-N MDaemon フリー版におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-2584 2012-08-14 16:22 2012-08-12 Show GitHub Exploit DB Packet Storm
240520 6.4 警告 Caucho Technology - Resin に同梱されている Caucho Quercus におけるファイル名の拡張子による制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-2969 2012-08-14 16:16 2012-08-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 16, 2026, 4 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
286591 - pidgin pidgin libpurple/protocols/yahoo/libymsg.c in Pidgin before 2.10.8 allows remote attackers to cause a denial of service (crash) via a Yahoo! P2P message with a crafted length field, which triggers a buffer … CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2013-6481 2024-11-21 10:59 2014-02-7 Show GitHub Exploit DB Packet Storm
286592 - pidgin pidgin gtkutils.c in Pidgin before 2.10.8 on Windows allows user-assisted remote attackers to execute arbitrary programs via a message containing a file: URL that is improperly handled during construction o… CWE-20
 Improper Input Validation 
CVE-2013-6486 2024-11-21 10:59 2014-02-7 Show GitHub Exploit DB Packet Storm
286593 - pidgin pidgin Buffer overflow in util.c in libpurple in Pidgin before 2.10.8 allows remote HTTP servers to cause a denial of service (application crash) or possibly have unspecified other impact via an invalid chu… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2013-6485 2024-11-21 10:59 2014-02-7 Show GitHub Exploit DB Packet Storm
286594 - pidgin pidgin The STUN protocol implementation in libpurple in Pidgin before 2.10.8 allows remote STUN servers to cause a denial of service (out-of-bounds write operation and application crash) by triggering a soc… CWE-20
 Improper Input Validation 
CVE-2013-6484 2024-11-21 10:59 2014-02-7 Show GitHub Exploit DB Packet Storm
286595 - pidgin pidgin The XMPP protocol plugin in libpurple in Pidgin before 2.10.8 does not properly determine whether the from address in an iq reply is consistent with the to address in an iq request, which allows remo… CWE-20
 Improper Input Validation 
CVE-2013-6483 2024-11-21 10:59 2014-02-7 Show GitHub Exploit DB Packet Storm
286596 - pidgin pidgin util.c in libpurple in Pidgin before 2.10.8 does not properly allocate memory for HTTP responses that are inconsistent with the Content-Length header, which allows remote HTTP servers to cause a deni… CWE-399
 Resource Management Errors
CVE-2013-6479 2024-11-21 10:59 2014-02-7 Show GitHub Exploit DB Packet Storm
286597 - pidgin pidgin gtkimhtml.c in Pidgin before 2.10.8 does not properly interact with underlying library support for wide Pango layouts, which allows user-assisted remote attackers to cause a denial of service (applic… CWE-20
 Improper Input Validation 
CVE-2013-6478 2024-11-21 10:59 2014-02-7 Show GitHub Exploit DB Packet Storm
286598 - pidgin pidgin Multiple integer signedness errors in libpurple in Pidgin before 2.10.8 allow remote attackers to cause a denial of service (application crash) via a crafted timestamp value in an XMPP message. CWE-189
Numeric Errors
CVE-2013-6477 2024-11-21 10:59 2014-02-7 Show GitHub Exploit DB Packet Storm
286599 - openstack
redhat
oslo
openstack
The python-qpid client (common/rpc/impl_qpid.py) in OpenStack Oslo before 2013.2 does not enforce SSL connections when qpid_protocol is set to ssl, which allows remote attackers to obtain sensitive i… CWE-310
Cryptographic Issues
CVE-2013-6491 2024-11-21 10:59 2014-02-2 Show GitHub Exploit DB Packet Storm
286600 - ibm spss_samplepower Unspecified vulnerability in the vsflex8l ActiveX control in IBM SPSS SamplePower 3.0.1 before FP1 IF1 allows remote attackers to execute arbitrary code via a crafted ComboList property value. NVD-CWE-noinfo
CVE-2013-6724 2024-11-21 10:59 2014-02-2 Show GitHub Exploit DB Packet Storm