Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 17, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
241011 4.3 警告 Atmoner - PHP-pastebin の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-3846 2012-07-5 15:58 2012-07-3 Show GitHub Exploit DB Packet Storm
241012 5 警告 Qualia Digital Solutions - LAN Messenger におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2012-3845 2012-07-5 15:56 2012-07-3 Show GitHub Exploit DB Packet Storm
241013 4.3 警告 vBulletin Solutions, Inc. - vBulletin におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-3844 2012-07-5 15:42 2012-07-3 Show GitHub Exploit DB Packet Storm
241014 4.3 警告 e107.org - e107 の登録ページにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-3843 2012-07-5 15:39 2012-07-3 Show GitHub Exploit DB Packet Storm
241015 4.3 警告 JBMC Software - JBMC Software DirectAdmin の CMD_DOMAIN におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-3842 2012-07-5 15:38 2012-07-3 Show GitHub Exploit DB Packet Storm
241016 9.3 危険 KMPlayer's Forums - KMPlayer における任意のコードを実行される脆弱性 CWE-Other
その他
CVE-2012-3841 2012-07-5 15:35 2012-07-3 Show GitHub Exploit DB Packet Storm
241017 4.3 警告 Jesse Terry - MyClientBase の index.php/users/form/user_id におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-3840 2012-07-5 15:32 2012-07-3 Show GitHub Exploit DB Packet Storm
241018 7.5 危険 Jesse Terry - MyClientBase の application/core/MY_Model.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2012-3839 2012-07-5 15:31 2012-07-3 Show GitHub Exploit DB Packet Storm
241019 5 警告 SCHLIX - Gekko におけるインストールパスを取得される脆弱性 CWE-200
情報漏えい
CVE-2012-3838 2012-07-5 15:29 2012-05-2 Show GitHub Exploit DB Packet Storm
241020 4.3 警告 SCHLIX - Baby Gekko の apps/users/registration.template.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-3837 2012-07-5 15:28 2012-07-3 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 17, 2026, 4:15 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
285871 - cybozu garoon Cybozu Garoon 2.x through 2.5.4 and 3.x through 3.7 SP3 does not properly manage sessions, which allows remote authenticated users to impersonate arbitrary users via unspecified vectors. CWE-264
Permissions, Privileges, and Access Controls
CVE-2014-0817 2024-11-21 11:02 2014-02-27 Show GitHub Exploit DB Packet Storm
285872 - norman security_suite Unspecified vulnerability in Norman Security Suite 10.1 and earlier allows local users to gain privileges via unknown vectors. CWE-264
Permissions, Privileges, and Access Controls
CVE-2014-0816 2024-11-21 11:02 2014-02-27 Show GitHub Exploit DB Packet Storm
285873 - cisco unified_communications_manager The Certificate Authority Proxy Function (CAPF) CLI implementation in Cisco Unified Communications Manager (Unified CM) 10.0(1) and earlier allows local users to inject commands via unspecified CAPF … CWE-20
 Improper Input Validation 
CVE-2014-0747 2024-11-21 11:02 2014-02-27 Show GitHub Exploit DB Packet Storm
285874 - cisco unified_contact_center_express_editor_software The disaster recovery system (DRS) in Cisco Unified Contact Center Express (Unified CCX) allows remote authenticated users to obtain sensitive information by reading extraneous fields in an HTML docu… CWE-200
Information Exposure
CVE-2014-0746 2024-11-21 11:02 2014-02-27 Show GitHub Exploit DB Packet Storm
285875 - cisco unified_contact_center_express_editor_software Cross-site request forgery (CSRF) vulnerability in the Unified Serviceability subsystem in Cisco Unified Contact Center Express (Unified CCX) allows remote attackers to hijack the authentication of a… CWE-352
 Origin Validation Error
CVE-2014-0745 2024-11-21 11:02 2014-02-27 Show GitHub Exploit DB Packet Storm
285876 - cisco unified_communications_manager The Certificate Authority Proxy Function (CAPF) component in Cisco Unified Communications Manager (Unified CM) 10.0(1) and earlier allows remote attackers to bypass authentication and modify register… CWE-287
Improper Authentication
CVE-2014-0743 2024-11-21 11:02 2014-02-27 Show GitHub Exploit DB Packet Storm
285877 - cisco unified_communications_manager The Certificate Authority Proxy Function (CAPF) CLI implementation in the CSR management feature in Cisco Unified Communications Manager (Unified CM) 10.0(1) and earlier allows local users to read or… CWE-20
 Improper Input Validation 
CVE-2014-0742 2024-11-21 11:02 2014-02-27 Show GitHub Exploit DB Packet Storm
285878 - cisco unified_communications_manager The certificate-import feature in the Certificate Authority Proxy Function (CAPF) CLI implementation in Cisco Unified Communications Manager (Unified CM) 10.0(1) and earlier allows local users to rea… CWE-310
Cryptographic Issues
CVE-2014-0741 2024-11-21 11:02 2014-02-27 Show GitHub Exploit DB Packet Storm
285879 - cisco unified_communications_manager Cross-site request forgery (CSRF) vulnerability in the Call Detail Records Analysis and Reporting (CAR) interface in the OS Administration component in Cisco Unified Communications Manager (Unified C… CWE-352
 Origin Validation Error
CVE-2014-0740 2024-11-21 11:02 2014-02-27 Show GitHub Exploit DB Packet Storm
285880 - ibm rational_focal_point Multiple cross-site scripting (XSS) vulnerabilities in the (1) ForwardController and (2) AttributeEditor scripts in IBM Rational Focal Point 6.4.x and 6.5.x before 6.5.2.3 and 6.6.x before 6.6.1 allo… CWE-79
Cross-site Scripting
CVE-2014-0853 2024-11-21 11:02 2014-02-26 Show GitHub Exploit DB Packet Storm