Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 24, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
240991 5 警告 Joomla! - Joomla! における重要な情報を取得される脆弱性 CWE-noinfo
情報不足 		CVE-2012-0819 2012-09-11 09:59 2012-01-24 Show GitHub Exploit DB Packet Storm
240992 7.5 危険 Joomla! - Joomla! および Mambo 用 Weblinks コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2006-7247 2012-09-11 09:58 2012-09-6 Show GitHub Exploit DB Packet Storm
240993 4.3 警告 TagLib - TagLib の toolkit/tbytevector.cpp における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2012-1584 2012-09-11 09:56 2012-09-6 Show GitHub Exploit DB Packet Storm
240994 6.8 警告 Transparent Technologies - Open-Realty CMS におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2012-1112 2012-09-11 09:55 2012-09-6 Show GitHub Exploit DB Packet Storm
240995 4.3 警告 Datemill - Etano におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-1110 2012-09-11 09:53 2012-09-6 Show GitHub Exploit DB Packet Storm
240996 4.3 警告 TagLib - TagLib の ogg/xiphcomment.cpp の parse 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2012-1108 2012-09-11 09:51 2012-09-6 Show GitHub Exploit DB Packet Storm
240997 4.3 警告 TagLib - TagLib の ape/apeproperties.cpp の analyzeCurrent 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2012-1107 2012-09-11 09:50 2012-09-6 Show GitHub Exploit DB Packet Storm
240998 4.3 警告 FreePBX - FreePBX におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-4870 2012-09-11 09:49 2012-03-23 Show GitHub Exploit DB Packet Storm
240999 7.5 危険 FreePBX - FreePBX の recordings/misc/callme_page.php における任意のコマンドを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2012-4869 2012-09-11 09:36 2012-03-23 Show GitHub Exploit DB Packet Storm
241000 7.5 危険 Kunena - Joomla! 用 Kunena コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2012-4868 2012-09-10 16:23 2012-09-6 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 24, 2026, 4:05 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
286941 7.3 HIGH
Network 		vmware spring_security The ActiveDirectoryLdapAuthenticator in Spring Security 3.2.0 to 3.2.1 and 3.1.0 to 3.1.5 does not check the password length. If the directory allows anonymous binds then it may incorrectly authentic… CWE-287
Improper Authentication 		CVE-2014-0097 2024-11-21 11:01 2017-05-26 Show GitHub Exploit DB Packet Storm
286942 7.5 HIGH
Network 		aescrypt_project aescrypt The aescrypt gem 1.0.0 for Ruby does not randomize the CBC IV for use with the AESCrypt.encrypt and AESCrypt.decrypt functions, which allows attackers to defeat cryptographic protection mechanisms vi… CWE-330
 Use of Insufficiently Random Values 		CVE-2013-7463 2024-11-21 11:01 2017-04-20 Show GitHub Exploit DB Packet Storm
286943 7.5 HIGH
Network 		pulpproject pulp Pulp before 2.3.0 uses the same the same certificate authority key and certificate for all installations. CWE-295
Improper Certificate Validation  		CVE-2013-7450 2024-11-21 11:01 2017-04-4 Show GitHub Exploit DB Packet Storm
286944 6.5 MEDIUM
Network 		cloudera
apache 		cdh
hadoop 		Apache Hadoop 0.23.x before 0.23.11 and 2.x before 2.4.1, as used in Cloudera CDH 5.0.x before 5.0.2, do not check authorization for the (1) refreshNamenodes, (2) deleteBlockPool, and (3) shutdownDat… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2014-0229 2024-11-21 11:01 2017-03-24 Show GitHub Exploit DB Packet Storm
286945 7.5 HIGH
Network 		mcafee saas_control_console_platform A directory traversal vulnerability in the web application in McAfee (now Intel Security) SaaS Control Console (SCC) Platform 6.14 before patch 1070, and 6.15 before patch 1076 allows unauthenticated… CWE-22
Path Traversal 		CVE-2013-7462 2024-11-21 11:01 2017-03-15 Show GitHub Exploit DB Packet Storm
286946 5.5 MEDIUM
Local 		mcafee change_control
application_control 		A write protection and execution bypass vulnerability in McAfee (now Intel Security) Change Control (MCC) 6.1.0 for Linux and earlier allows authenticated users to change files that are part of write… CWE-284
Improper Access Control 		CVE-2013-7461 2024-11-21 11:01 2017-03-15 Show GitHub Exploit DB Packet Storm
286947 5.5 MEDIUM
Local 		mcafee change_control
application_control 		A write protection and execution bypass vulnerability in McAfee (now Intel Security) Application Control (MAC) 6.1.0 for Linux and earlier allows authenticated users to change binaries that are part … CWE-284
Improper Access Control 		CVE-2013-7460 2024-11-21 11:01 2017-03-15 Show GitHub Exploit DB Packet Storm
286948 9.8 CRITICAL
Network 		dlitz
fedoraproject 		pycrypto
fedora 		Heap-based buffer overflow in the ALGnew function in block_templace.c in Python Cryptography Toolkit (aka pycrypto) allows remote attackers to execute arbitrary code as demonstrated by a crafted iv p… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2013-7459 2024-11-21 11:01 2017-02-16 Show GitHub Exploit DB Packet Storm
286949 6.1 MEDIUM
Network 		nodejs node.js The validator module before 1.1.0 for Node.js allows remote attackers to bypass the cross-site scripting (XSS) filter via nested forbidden strings. CWE-79
Cross-site Scripting 		CVE-2013-7454 2024-11-21 11:01 2017-01-24 Show GitHub Exploit DB Packet Storm
286950 6.1 MEDIUM
Network 		nodejs node.js The validator module before 1.1.0 for Node.js allows remote attackers to bypass the cross-site scripting (XSS) filter via vectors related to UI redressing. CWE-79
Cross-site Scripting 		CVE-2013-7453 2024-11-21 11:01 2017-01-24 Show GitHub Exploit DB Packet Storm