Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 24, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
241191 4.6 警告 Ted Felix - acpid の samples/powerbtn/powerbtn.sh における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-2777 2012-08-31 16:04 2012-08-29 Show GitHub Exploit DB Packet Storm
241192 2.6 注意 サイボウズ - サイボウズLive for Android における WebView クラスに関する脆弱性 CWE-Other
その他 		CVE-2012-4009 2012-08-31 16:01 2012-08-31 Show GitHub Exploit DB Packet Storm
241193 5.8 警告 サイボウズ - サイボウズLive for Android において任意の Java のメソッドが実行される脆弱性 CWE-DesignError
CVE-2012-4008 2012-08-31 16:00 2012-08-31 Show GitHub Exploit DB Packet Storm
241194 4.3 警告 Bueltge - WordPress 用 Adminimize プラグインにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-5128 2012-08-31 15:29 2012-08-29 Show GitHub Exploit DB Packet Storm
241195 4.3 警告 Bueltge - WordPress 用 Adminimize プラグインにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-4926 2012-08-31 15:27 2012-08-29 Show GitHub Exploit DB Packet Storm
241196 4.3 警告 Elxis - Elxis CMS におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-4918 2012-08-31 15:26 2011-11-23 Show GitHub Exploit DB Packet Storm
241197 7.5 危険 vBulletin Solutions, Inc. - vBulletin の announcement.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2012-4686 2012-08-31 15:25 2012-08-28 Show GitHub Exploit DB Packet Storm
241198 4.3 警告 Arbor Networks - Arbor Networks Peakflow SP におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-4685 2012-08-31 15:24 2012-08-28 Show GitHub Exploit DB Packet Storm
241199 6.8 警告 Gajim.org - Gajim の common/helpers.py における任意のコマンドを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2012-2085 2012-08-31 15:22 2011-11-4 Show GitHub Exploit DB Packet Storm
241200 6 警告 Giant Robot - Drupal 用 ZipCart モジュールにおけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-1650 2012-08-31 15:05 2012-02-29 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 24, 2026, 4:05 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
285521 - opensuse
logilab 		opensuse
logilab-common 		The (1) extract_keys_from_pdf and (2) fill_pdf functions in pdf_ext.py in logilab-commons before 0.61.0 allows local users to overwrite arbitrary files and possibly have other unspecified impact via … CWE-59
Link Following 		CVE-2014-1838 2024-11-21 11:05 2014-03-12 Show GitHub Exploit DB Packet Storm
285522 - wireshark wireshark epan/dissectors/packet-rlc in the RLC dissector in Wireshark 1.8.x before 1.8.13 and 1.10.x before 1.10.6 uses inconsistent memory-management approaches, which allows remote attackers to cause a deni… NVD-CWE-Other
CVE-2014-2283 2024-11-21 11:05 2014-03-11 Show GitHub Exploit DB Packet Storm
285523 - wireshark wireshark The dissect_protocol_data_parameter function in epan/dissectors/packet-m3ua.c in the M3UA dissector in Wireshark 1.10.x before 1.10.6 does not properly allocate memory, which allows remote attackers … CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2014-2282 2024-11-21 11:05 2014-03-11 Show GitHub Exploit DB Packet Storm
285524 - wireshark wireshark The nfs_name_snoop_add_name function in epan/dissectors/packet-nfs.c in the NFS dissector in Wireshark 1.8.x before 1.8.13 and 1.10.x before 1.10.6 does not validate a certain length value, which all… CWE-20
 Improper Input Validation  		CVE-2014-2281 2024-11-21 11:05 2014-03-11 Show GitHub Exploit DB Packet Storm
285525 - opendocman opendocman SQL injection vulnerability in ajax_udf.php in OpenDocMan before 1.2.7.2 allows remote attackers to execute arbitrary SQL commands via the add_value parameter. CWE-89
SQL Injection 		CVE-2014-1945 2024-11-21 11:05 2014-03-9 Show GitHub Exploit DB Packet Storm
285526 - ilch ilch_cms Cross-site scripting (XSS) vulnerability in Ilch CMS 2.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the text parameter to index.php/guestbook/index/newentry. CWE-79
Cross-site Scripting 		CVE-2014-1944 2024-11-21 11:05 2014-03-9 Show GitHub Exploit DB Packet Storm
285527 - gnu gnutls lib/x509/verify.c in GnuTLS before 3.1.21 and 3.2.x before 3.2.11 treats version 1 X.509 certificates as intermediate CAs, which allows remote attackers to bypass intended restrictions by leveraging … CWE-264
Permissions, Privileges, and Access Controls 		CVE-2014-1959 2024-11-21 11:05 2014-03-7 Show GitHub Exploit DB Packet Storm
285528 - videowhisper live_streaming_integration_plugin Multiple directory traversal vulnerabilities in the VideoWhisper Live Streaming Integration plugin before 4.29.5 for WordPress allow remote attackers to (1) read arbitrary files via a .. (dot dot) in… CWE-22
Path Traversal 		CVE-2014-1907 2024-11-21 11:05 2014-03-7 Show GitHub Exploit DB Packet Storm
285529 - videowhisper live_streaming_integration_plugin Multiple cross-site scripting (XSS) vulnerabilities in the VideoWhisper Live Streaming Integration plugin before 4.29.5 for WordPress allow remote attackers to inject arbitrary web script or HTML via… CWE-79
Cross-site Scripting 		CVE-2014-1906 2024-11-21 11:05 2014-03-7 Show GitHub Exploit DB Packet Storm
285530 - foscam fi8919w_firmware
fi8919w 		The Foscam FI8910W camera with firmware before 11.37.2.55 allows remote attackers to obtain sensitive video and image data via a blank username and password. CWE-287
Improper Authentication 		CVE-2014-1911 2024-11-21 11:05 2014-03-6 Show GitHub Exploit DB Packet Storm