Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 21, 2026, 2 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
240701 10 危険 FFmpeg - FFmpeg の libavcodec/rv34.c 内の ff_rv34_decode_frame 関数における脆弱性 CWE-noinfo
情報不足 		CVE-2012-2772 2012-09-13 09:52 2012-05-25 Show GitHub Exploit DB Packet Storm
240702 4.3 警告 Flatnux - FlatnuX CMS におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-4892 2012-09-12 16:34 2012-09-10 Show GitHub Exploit DB Packet Storm
240703 4.3 警告 Flatnux - FlatnuX CMS におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-4890 2012-09-12 16:33 2012-09-10 Show GitHub Exploit DB Packet Storm
240704 4.3 警告 Zoho Corporation - ManageEngine Firewall Analyzer の fw/index2.do におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-4891 2012-09-12 16:33 2012-09-10 Show GitHub Exploit DB Packet Storm
240705 4.3 警告 Zoho Corporation - ManageEngine Firewall Analyzer におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-4889 2012-09-12 16:32 2012-09-10 Show GitHub Exploit DB Packet Storm
240706 4.3 警告 IBM - 複数の IBM 製品で使用される IBM Maximo Asset Management におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-3326 2012-09-12 16:20 2012-09-4 Show GitHub Exploit DB Packet Storm
240707 4.3 警告 IBM - 複数の IBM 製品で使用される IBM Maximo Asset Management におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-3313 2012-09-12 16:19 2012-09-4 Show GitHub Exploit DB Packet Storm
240708 4 警告 IBM - 複数の IBM 製品で使用される IBM Maximo Asset Management における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2012-2185 2012-09-12 16:19 2012-09-4 Show GitHub Exploit DB Packet Storm
240709 6.8 警告 IBM - 複数の IBM 製品で使用される IBM Maximo Asset Management における Web セッションをハイジャックされる脆弱性 CWE-Other
その他 		CVE-2012-2184 2012-09-12 16:18 2012-09-4 Show GitHub Exploit DB Packet Storm
240710 6.8 警告 IBM - 複数の IBM 製品で使用される IBM Maximo Asset Management における Web セッションをハイジャックされる脆弱性 CWE-Other
その他 		CVE-2012-2183 2012-09-12 16:17 2012-09-4 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 21, 2026, 4:10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
286851 - stunnel stunnel stunnel before 5.00, when using fork threading, does not properly update the state of the OpenSSL pseudo-random number generator (PRNG), which causes subsequent children with the same process ID to u… CWE-332
 Insufficient Entropy in PRNG 		CVE-2014-0016 2024-11-21 11:01 2014-03-25 Show GitHub Exploit DB Packet Storm
286852 - moodle moodle The time-validation implementation in (1) mod/feedback/complete.php and (2) mod/feedback/complete_guest.php in Moodle through 2.3.11, 2.4.x before 2.4.9, 2.5.x before 2.5.5, and 2.6.x before 2.6.2 al… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2014-0127 2024-11-21 11:01 2014-03-24 Show GitHub Exploit DB Packet Storm
286853 - moodle moodle badges/mybadges.php in Moodle 2.5.x before 2.5.5 and 2.6.x before 2.6.2 does not properly track the user to whom a badge was issued, which allows remote authenticated users to modify the visibility o… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2014-0129 2024-11-21 11:01 2014-03-24 Show GitHub Exploit DB Packet Storm
286854 - moodle moodle repository/alfresco/lib.php in Moodle through 2.3.11, 2.4.x before 2.4.9, 2.5.x before 2.5.5, and 2.6.x before 2.6.2 places a session key in a URL, which allows remote attackers to bypass intended Al… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2014-0125 2024-11-21 11:01 2014-03-24 Show GitHub Exploit DB Packet Storm
286855 - moodle moodle Cross-site request forgery (CSRF) vulnerability in enrol/imsenterprise/importnow.php in Moodle through 2.3.11, 2.4.x before 2.4.9, 2.5.x before 2.5.5, and 2.6.x before 2.6.2 allows remote attackers t… CWE-352
 Origin Validation Error 		CVE-2014-0126 2024-11-21 11:01 2014-03-24 Show GitHub Exploit DB Packet Storm
286856 - moodle moodle The identity-reporting implementations in mod/forum/renderer.php and mod/quiz/override_form.php in Moodle through 2.3.11, 2.4.x before 2.4.9, 2.5.x before 2.5.5, and 2.6.x before 2.6.2 do not properl… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2014-0124 2024-11-21 11:01 2014-03-24 Show GitHub Exploit DB Packet Storm
286857 - moodle moodle mod/chat/chat_ajax.php in Moodle through 2.3.11, 2.4.x before 2.4.9, 2.5.x before 2.5.5, and 2.6.x before 2.6.2 does not properly check for the mod/chat:chat capability during chat sessions, which al… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2014-0122 2024-11-21 11:01 2014-03-24 Show GitHub Exploit DB Packet Storm
286858 - moodle moodle The wiki subsystem in Moodle through 2.3.11, 2.4.x before 2.4.9, 2.5.x before 2.5.5, and 2.6.x before 2.6.2 does not properly restrict (1) view and (2) edit access, which allows remote authenticated … CWE-264
Permissions, Privileges, and Access Controls 		CVE-2014-0123 2024-11-21 11:01 2014-03-24 Show GitHub Exploit DB Packet Storm
286859 - apache camel The XSLT component in Apache Camel 2.11.x before 2.11.4, 2.12.x before 2.12.3, and possibly earlier versions allows remote attackers to execute arbitrary Java methods via a crafted message. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2014-0003 2024-11-21 11:01 2014-03-21 Show GitHub Exploit DB Packet Storm
286860 - apache camel The XSLT component in Apache Camel before 2.11.4 and 2.12.x before 2.12.3 allows remote attackers to read arbitrary files and possibly have other unspecified impact via an XML document containing an … CWE-264
Permissions, Privileges, and Access Controls 		CVE-2014-0002 2024-11-21 11:01 2014-03-21 Show GitHub Exploit DB Packet Storm