Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 27, 2026, 2:01 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
240931 6.8 警告 Nathan Phillip Brink - Drupal 用 Content Lock モジュールにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2012-2056 2012-09-19 16:31 2012-03-14 Show GitHub Exploit DB Packet Storm
240932 4.3 警告 Nikola Posa - Webfolio CMS におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-1899 2012-09-19 16:29 2012-09-17 Show GitHub Exploit DB Packet Storm
240933 4.3 警告 Netwin Ltd - NetWin SurgeMail におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-2575 2012-09-19 16:25 2012-09-17 Show GitHub Exploit DB Packet Storm
240934 4.3 警告 Oxwall - Oxwall の ow_updates/index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-4928 2012-09-19 16:21 2012-09-15 Show GitHub Exploit DB Packet Storm
240935 7.5 危険 LimeSurvey - LimeSurvey における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2012-4927 2012-09-19 16:21 2012-02-24 Show GitHub Exploit DB Packet Storm
240936 6.4 警告 ImgPals - ImgPals Photo Host の approve.php における管理者のアクティベーションを変更される脆弱性 CWE-287
不適切な認証
CVE-2012-4926 2012-09-19 16:20 2012-09-15 Show GitHub Exploit DB Packet Storm
240937 7.5 危険 ImgPals - ImgPals Photo Host の approve.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2012-4925 2012-09-19 16:20 2012-09-15 Show GitHub Exploit DB Packet Storm
240938 9.3 危険 ASUSTeK Computer Inc. - ASUS Net4Switch 用 ipswcom.dll ActiveX コンポーネントにおけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2012-4924 2012-09-19 16:18 2012-09-15 Show GitHub Exploit DB Packet Storm
240939 4.3 警告 Endian - Endian Firewall におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-4923 2012-09-19 16:17 2012-09-15 Show GitHub Exploit DB Packet Storm
240940 4.3 警告 Mike Carr - Flogr の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-4336 2012-09-19 16:17 2012-09-15 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 27, 2026, 4:52 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
285161 - ibm curam_social_program_management Multiple cross-site scripting (XSS) vulnerabilities in IBM Curam Social Program Management 4.5 SP10 through 6.0.5.4 allow remote authenticated users to inject arbitrary web script or HTML via crafted… CWE-79
Cross-site Scripting
CVE-2014-3013 2024-11-21 11:07 2014-06-19 Show GitHub Exploit DB Packet Storm
285162 - ibm curam_social_program_management Multiple CRLF injection vulnerabilities in IBM Curam Social Program Management 5.2 SP1 through 6.0.5.4 allow remote authenticated users to inject arbitrary HTTP headers and conduct HTTP response spli… NVD-CWE-Other
CVE-2014-3012 2024-11-21 11:07 2014-06-19 Show GitHub Exploit DB Packet Storm
285163 - f5 arx_data_manager SQL injection vulnerability in the web service in F5 ARX Data Manager 3.0.0 through 3.1.0 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors. CWE-89
SQL Injection
CVE-2014-2949 2024-11-21 11:07 2014-06-19 Show GitHub Exploit DB Packet Storm
285164 - puppet puppet_enterprise Puppet Enterprise 2.8.x before 2.8.7 allows remote attackers to obtain sensitive information via vectors involving hiding and unhiding nodes. CWE-200
Information Exposure
CVE-2014-3249 2024-11-21 11:07 2014-06-17 Show GitHub Exploit DB Packet Storm
285165 - cisco ios_xe The mDNS implementation in Cisco IOS XE 3.12S does not properly interact with autonomic networking, which allows remote attackers to obtain sensitive networking-services information by sniffing the n… CWE-264
Permissions, Privileges, and Access Controls
CVE-2014-3290 2024-11-21 11:07 2014-06-14 Show GitHub Exploit DB Packet Storm
285166 - cisco nx-os The HSRP implementation in Cisco NX-OS 6.2(2a) and earlier allows remote attackers to bypass authentication and cause a denial of service (group-member state modification and traffic blackholing) via… CWE-287
Improper Authentication
CVE-2014-3295 2024-11-21 11:07 2014-06-14 Show GitHub Exploit DB Packet Storm
285167 - castor_project
opensuse_project
opensuse
castor
opensuse
The default configuration for the Xerces SAX Parser in Castor before 1.3.3 allows context-dependent attackers to conduct XML External Entity (XXE) attacks via a crafted XML document. CWE-611
XXE
CVE-2014-3004 2024-11-21 11:07 2014-06-11 Show GitHub Exploit DB Packet Storm
285168 - directfb
suse
opensuse
directfb
linux_enterprise_software_development_kit
linux_enterprise_desktop
linux_enterprise_workstation_extension
opensuse
suse_linux_enterprise_server
The Dispatch_Write function in proxy/dispatcher/idirectfbsurface_dispatcher.c in DirectFB 1.4.4 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via th… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2014-2978 2024-11-21 11:07 2014-06-11 Show GitHub Exploit DB Packet Storm
285169 - suse
opensuse
directfb
linux_enterprise_software_development_kit
linux_enterprise_desktop
linux_enterprise_workstation_extension
opensuse
suse_linux_enterprise_server
directfb
Multiple integer signedness errors in the Dispatch_Write function in proxy/dispatcher/idirectfbsurface_dispatcher.c in DirectFB 1.4.13 allow remote attackers to cause a denial of service (crash) and … CWE-189
Numeric Errors
CVE-2014-2977 2024-11-21 11:07 2014-06-11 Show GitHub Exploit DB Packet Storm
285170 - google chrome Heap-based buffer overflow in the FFmpegVideoDecoder::GetVideoBuffer function in media/filters/ffmpeg_video_decoder.cc in Google Chrome before 35.0.1916.153 allows remote attackers to cause a denial … CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2014-3157 2024-11-21 11:07 2014-06-11 Show GitHub Exploit DB Packet Storm