Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 17, 2026, noon

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
240921 9.3 危険 Esri - ESRI ArcMap および ArcGI における任意の VBA コードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2012-1661 2012-07-17 16:29 2012-07-12 Show GitHub Exploit DB Packet Storm
240922 6.8 警告 eXtplorer - eXtplorer におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2012-3362 2012-07-17 16:27 2012-07-12 Show GitHub Exploit DB Packet Storm
240923 10 危険 Lawrence Berkeley National Laboratory - arpwatch における root 権限を取得される脆弱性 CWE-DesignError
CVE-2012-2653 2012-07-17 16:26 2012-07-12 Show GitHub Exploit DB Packet Storm
240924 5 警告 Mahara - Mahara の auth/saml プラグインのデフォルト設定におけるユーザになりすまされる脆弱性 CWE-16
環境設定
CVE-2012-2351 2012-07-17 16:21 2012-03-6 Show GitHub Exploit DB Packet Storm
240925 6.8 警告 NiH - libzip の zip_open.c における整数オーバーフローの脆弱性 CWE-189
数値処理の問題
CVE-2012-1163 2012-07-17 16:19 2012-03-20 Show GitHub Exploit DB Packet Storm
240926 7.5 危険 NiH - libzip の zip_open.c におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2012-1162 2012-07-17 16:18 2012-03-20 Show GitHub Exploit DB Packet Storm
240927 6.5 警告 GLPI-PROJECT.ORG - GLPI の front/popup.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション
CVE-2012-1037 2012-07-17 16:17 2012-02-9 Show GitHub Exploit DB Packet Storm
240928 5.5 警告 Tryton - Tryton アプリケーションフレームワークにおける任意のユーザの権限を変更される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-0215 2012-07-17 16:09 2012-03-28 Show GitHub Exploit DB Packet Storm
240929 5 警告 Tiki Software Community Association - TikiWiki CMS/Groupware におけるインストールパスを取得される脆弱性 CWE-200
情報漏えい
CVE-2012-3996 2012-07-17 16:04 2012-07-12 Show GitHub Exploit DB Packet Storm
240930 7.5 危険 Adrian Chadd - RTG および RTG2 における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2012-3881 2012-07-17 16:03 2012-07-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 17, 2026, 4:15 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
286591 - python
apple
python
mac_os_x
Python before 3.3.4 RC1 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a file size value larger than the size of the zip file to the (1) ZipExtFile.read,… CWE-20
 Improper Input Validation 
CVE-2013-7338 2024-11-21 11:00 2014-04-22 Show GitHub Exploit DB Packet Storm
286592 - phpfox phpfox static/ajax.php in PHPFox 3.7.3, 3.7.4, and 3.7.5 allows remote authenticated users to bypass intended "Only Me" restrictions and comment on a private publication via a request with a modified val[it… CWE-264
Permissions, Privileges, and Access Controls
CVE-2013-7196 2024-11-21 11:00 2014-04-19 Show GitHub Exploit DB Packet Storm
286593 - phpfox phpfox PHPFox 3.7.3 and 3.7.4 allows remote authenticated users to bypass intended "Only Me" restrictions and "like" a publication via a request that specifies the ID for the publication. CWE-264
Permissions, Privileges, and Access Controls
CVE-2013-7195 2024-11-21 11:00 2014-04-19 Show GitHub Exploit DB Packet Storm
286594 - f-secure email_and_server_security
anti-virus
server_security
SQL injection vulnerability in an unspecified DLL in the FSDBCom ActiveX control in F-Secure Anti-Virus for Microsoft Exchange Server before HF02, Anti-Virus for Windows Servers 9.00 before HF09, Ant… CWE-89
SQL Injection
CVE-2013-7369 2024-11-21 11:00 2014-04-18 Show GitHub Exploit DB Packet Storm
286595 - raoul_proenca gnew Multiple cross-site scripting (XSS) vulnerabilities in Gnew 2013.1 allow remote attackers to inject arbitrary web script or HTML via the gnew_template parameter to (1) users/profile.php, (2) articles… CWE-79
Cross-site Scripting
CVE-2013-7368 2024-11-21 11:00 2014-04-16 Show GitHub Exploit DB Packet Storm
286596 - sap enterprise_portal SAP Enterprise Portal does not properly restrict access to the Federation configuration pages, which allows remote attackers to gain privileges via unspecified vectors. CWE-264
Permissions, Privileges, and Access Controls
CVE-2013-7367 2024-11-21 11:00 2014-04-11 Show GitHub Exploit DB Packet Storm
286597 - sap software_deployment_manager The SAP Software Deployment Manager (SDM), in certain unspecified conditions, allows remote attackers to cause a denial of service via vectors related to failed authentications. CWE-287
Improper Authentication
CVE-2013-7366 2024-11-21 11:00 2014-04-11 Show GitHub Exploit DB Packet Storm
286598 - sap enterprise_portal Cross-site scripting (XSS) vulnerability in SAP Enterprise Portal allows remote attackers to inject arbitrary web script or HTML via unspecified parameters. CWE-79
Cross-site Scripting
CVE-2013-7365 2024-11-21 11:00 2014-04-11 Show GitHub Exploit DB Packet Storm
286599 - sap netweaver An unspecified J2EE core service in the J2EE Engine in SAP NetWeaver does not properly restrict access, which allows remote attackers to read and write to arbitrary files via unknown vectors. CWE-264
Permissions, Privileges, and Access Controls
CVE-2013-7364 2024-11-21 11:00 2014-04-11 Show GitHub Exploit DB Packet Storm
286600 - sap solution_manager Unspecified vulnerability in the Diagnostics (SMD) agent in SAP Solution Manager allows remote attackers to obtain sensitive information, modify the configuration of applications, and install or remo… NVD-CWE-noinfo
CVE-2013-7363 2024-11-21 11:00 2014-04-11 Show GitHub Exploit DB Packet Storm