Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 16, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
241101 5.1 警告 Nextide - Drupal 用の filedepot モジュールにおける脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-2719 2012-06-29 10:39 2012-05-30 Show GitHub Exploit DB Packet Storm
241102 4.3 警告 Jason Moore - Drupal 用の Amadou テーマモジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-2715 2012-06-29 10:37 2012-05-30 Show GitHub Exploit DB Packet Storm
241103 6.8 警告 Isaac Sukin - Drupal 用の BrowserID モジュールにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2012-2713 2012-06-29 10:35 2012-05-23 Show GitHub Exploit DB Packet Storm
241104 2.6 注意 Thomas Seidl - Drupal 用の Search API モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-2712 2012-06-29 10:29 2012-05-23 Show GitHub Exploit DB Packet Storm
241105 2.1 注意 Nancy Wichmann - Drupal 用 Taxonomy List モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-2711 2012-06-29 10:25 2012-05-23 Show GitHub Exploit DB Packet Storm
241106 2.6 注意 John Albin Wilkins - Drupal 用 Zen モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-2710 2012-06-29 10:13 2012-05-16 Show GitHub Exploit DB Packet Storm
241107 2.1 注意 Aegir project - Drupal 用 Hostmaster モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-2708 2012-06-29 10:11 2012-05-16 Show GitHub Exploit DB Packet Storm
241108 5.8 警告 Aegir project - Drupal 用 Hostmaster モジュールにおけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-2707 2012-06-29 10:10 2012-05-16 Show GitHub Exploit DB Packet Storm
241109 4.3 警告 Peter Pokrivcak - Drupal 用 Post Affiliate Pro モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-2706 2012-06-29 10:09 2012-05-16 Show GitHub Exploit DB Packet Storm
241110 2.1 注意 Christopher M. Mitchell - Drupal 用 Smart Breadcrumb モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-20
不適切な入力確認 		CVE-2012-2705 2012-06-29 10:07 2012-05-16 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 17, 2026, 4:15 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
285971 - cisco secure_access_control_system The RMI interface in Cisco Secure Access Control System (ACS) does not properly enforce authorization requirements, which allows remote authenticated users to read arbitrary files via a request to th… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2014-0667 2024-11-21 11:02 2014-01-17 Show GitHub Exploit DB Packet Storm
285972 - cisco jabber Directory traversal vulnerability in the Send Screen Capture implementation in Cisco Jabber 9.2(.1) and earlier on Windows allows remote attackers to upload arbitrary types of files, and consequently… CWE-22
Path Traversal 		CVE-2014-0666 2024-11-21 11:02 2014-01-17 Show GitHub Exploit DB Packet Storm
285973 - cisco secure_access_control_system The web interface in Cisco Secure Access Control System (ACS) 5.x before 5.4 Patch 3 allows remote attackers to execute arbitrary operating-system commands via a request to this interface, aka Bug ID… CWE-20
 Improper Input Validation  		CVE-2014-0650 2024-11-21 11:02 2014-01-17 Show GitHub Exploit DB Packet Storm
285974 - cisco secure_access_control_system The RMI interface in Cisco Secure Access Control System (ACS) 5.x before 5.5 does not properly enforce authorization requirements, which allows remote authenticated users to obtain superadmin access … CWE-264
Permissions, Privileges, and Access Controls 		CVE-2014-0649 2024-11-21 11:02 2014-01-17 Show GitHub Exploit DB Packet Storm
285975 - cisco secure_access_control_system The RMI interface in Cisco Secure Access Control System (ACS) 5.x before 5.5 does not properly enforce authentication and authorization requirements, which allows remote attackers to obtain administr… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2014-0648 2024-11-21 11:02 2014-01-17 Show GitHub Exploit DB Packet Storm
285976 - adobe acrobat Adobe Reader and Acrobat 10.x before 10.1.9 and 11.x before 11.0.06 on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified … CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2014-0495 2024-11-21 11:02 2014-01-16 Show GitHub Exploit DB Packet Storm
285977 - adobe acrobat Adobe Reader and Acrobat 10.x before 10.1.9 and 11.x before 11.0.06 on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified … CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2014-0493 2024-11-21 11:02 2014-01-16 Show GitHub Exploit DB Packet Storm
285978 - adobe flash_player
adobe_air_sdk
adobe_air 		Adobe Flash Player before 11.7.700.260 and 11.8.x and 11.9.x before 12.0.0.38 on Windows and Mac OS X and before 11.2.202.335 on Linux, Adobe AIR before 4.0.0.1390, Adobe AIR SDK before 4.0.0.1390, a… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2014-0492 2024-11-21 11:02 2014-01-16 Show GitHub Exploit DB Packet Storm
285979 - adobe flash_player
adobe_air_sdk
adobe_air 		Adobe Flash Player before 11.7.700.260 and 11.8.x and 11.9.x before 12.0.0.38 on Windows and Mac OS X and before 11.2.202.335 on Linux, Adobe AIR before 4.0.0.1390, Adobe AIR SDK before 4.0.0.1390, a… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2014-0491 2024-11-21 11:02 2014-01-16 Show GitHub Exploit DB Packet Storm
285980 - cisco identity_services_engine_software The RBAC implementation in Cisco Identity Services Engine (ISE) Software does not properly verify privileges for support-bundle downloads, which allows remote authenticated users to obtain sensitive … CWE-264
Permissions, Privileges, and Access Controls 		CVE-2014-0665 2024-11-21 11:02 2014-01-16 Show GitHub Exploit DB Packet Storm