Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 24, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
241171 6.8 警告 Autosave - Drupal 用 Autosave モジュールにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2012-2097 2012-09-3 16:02 2012-04-11 Show GitHub Exploit DB Packet Storm
241172 7.1 危険 WellinTech - WellinTech KingSCADA における重要な情報を取得される脆弱性 CWE-255
証明書・パスワード管理 		CVE-2012-1977 2012-09-3 15:57 2012-01-20 Show GitHub Exploit DB Packet Storm
241173 6 警告 IBM - IBM WebSphere Application Server における管理者のアクセス権限を取得される脆弱性 CWE-20
不適切な入力確認 		CVE-2012-3325 2012-09-3 14:21 2012-08-30 Show GitHub Exploit DB Packet Storm
241174 6.4 警告 EPractize Labs - EPractize Labs Subscription Manager における任意のファイルを上書きされる脆弱性 CWE-20
不適切な入力確認 		CVE-2011-5136 2012-09-3 14:20 2012-08-30 Show GitHub Exploit DB Packet Storm
241175 6 警告 Docebo - DoceboLMS の iotask モジュールにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2011-5135 2012-09-3 14:18 2012-08-30 Show GitHub Exploit DB Packet Storm
241176 6 警告 Widget Factory Limited - Joomla! 用 JCE コンポーネントにおける任意の PHP コードを実行される脆弱性 CWE-Other
その他 		CVE-2011-5134 2012-09-3 14:15 2012-08-30 Show GitHub Exploit DB Packet Storm
241177 10 危険 MyBB Group - MyBB における脆弱性 CWE-noinfo
情報不足 		CVE-2011-5133 2012-09-3 14:14 2011-11-25 Show GitHub Exploit DB Packet Storm
241178 4.3 警告 MyBB Group - MyBB におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-5132 2012-09-3 14:13 2011-11-25 Show GitHub Exploit DB Packet Storm
241179 6.8 警告 MyBB Group - MyBB の global.php におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2011-5131 2012-09-3 13:53 2011-11-25 Show GitHub Exploit DB Packet Storm
241180 6.8 警告 Haudenschilt - Family Connections CMS の dev/less.php における任意のコマンドを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2011-5130 2012-09-3 13:49 2011-11-30 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 24, 2026, 4:05 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
286691 - cisco unified_communications_manager The certificate-import feature in the Certificate Authority Proxy Function (CAPF) CLI implementation in Cisco Unified Communications Manager (Unified CM) 10.0(1) and earlier allows local users to rea… CWE-310
Cryptographic Issues 		CVE-2014-0741 2024-11-21 11:02 2014-02-27 Show GitHub Exploit DB Packet Storm
286692 - cisco unified_communications_manager Cross-site request forgery (CSRF) vulnerability in the Call Detail Records Analysis and Reporting (CAR) interface in the OS Administration component in Cisco Unified Communications Manager (Unified C… CWE-352
 Origin Validation Error 		CVE-2014-0740 2024-11-21 11:02 2014-02-27 Show GitHub Exploit DB Packet Storm
286693 - ibm rational_focal_point Multiple cross-site scripting (XSS) vulnerabilities in the (1) ForwardController and (2) AttributeEditor scripts in IBM Rational Focal Point 6.4.x and 6.5.x before 6.5.2.3 and 6.6.x before 6.6.1 allo… CWE-79
Cross-site Scripting 		CVE-2014-0853 2024-11-21 11:02 2014-02-26 Show GitHub Exploit DB Packet Storm
286694 - ibm rational_focal_point Cross-site scripting (XSS) vulnerability in IBM Rational Focal Point 6.4.x and 6.5.x before 6.5.2.3 and 6.6.x before 6.6.1 allows remote authenticated users to inject arbitrary web script or HTML by … CWE-79
Cross-site Scripting 		CVE-2014-0843 2024-11-21 11:02 2014-02-26 Show GitHub Exploit DB Packet Storm
286695 - ibm rational_focal_point The account-creation functionality in IBM Rational Focal Point 6.4.x and 6.5.x before 6.5.2.3 and 6.6.x before 6.6.1 places the new user's default password within the creation page, which allows remo… CWE-255
Credentials Management 		CVE-2014-0842 2024-11-21 11:02 2014-02-26 Show GitHub Exploit DB Packet Storm
286696 - ibm rational_focal_point Multiple cross-site scripting (XSS) vulnerabilities in IBM Rational Focal Point 6.4.x and 6.5.x before 6.5.2.3 and 6.6.x before 6.6.1 allow remote authenticated users to inject arbitrary web script o… CWE-79
Cross-site Scripting 		CVE-2014-0840 2024-11-21 11:02 2014-02-26 Show GitHub Exploit DB Packet Storm
286697 - ibm rational_focal_point IBM Rational Focal Point 6.4.x and 6.5.x before 6.5.2.3 and 6.6.x before 6.6.1 allows remote authenticated users to modify data via vectors involving a direct object reference. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2014-0839 2024-11-21 11:02 2014-02-26 Show GitHub Exploit DB Packet Storm
286698 - iconics genesis32 An ActiveX control in GenLaunch.htm in ICONICS GENESIS32 8.0, 8.02, 8.04, and 8.05 allows remote attackers to execute arbitrary programs via a crafted HTML document. CWE-20
 Improper Input Validation  		CVE-2014-0758 2024-11-21 11:02 2014-02-24 Show GitHub Exploit DB Packet Storm
286699 - ibm cognos_business_intelligence Cross-site scripting (XSS) vulnerability in the server in IBM Cognos Business Intelligence (BI) 8.4.1, 10.1 before IF6, 10.1.1 before IF5, 10.2 before IF7, 10.2.1 before IF4, and 10.2.1.1 before IF4 … CWE-79
Cross-site Scripting 		CVE-2014-0861 2024-11-21 11:02 2014-02-23 Show GitHub Exploit DB Packet Storm
286700 - ibm cognos_business_intelligence The server in IBM Cognos Business Intelligence (BI) 8.4.1, 10.1 before IF6, 10.1.1 before IF5, 10.2 before IF7, 10.2.1 before IF4, and 10.2.1.1 before IF4 allows remote authenticated users to read ar… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2014-0854 2024-11-21 11:02 2014-02-23 Show GitHub Exploit DB Packet Storm