Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 18, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
241201 5 警告 IBM - IBM DB2 の SQLJ.DB2_INSTALL_JAR ストアドプロシージャにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2012-2194 2012-07-26 15:31 2012-06-7 Show GitHub Exploit DB Packet Storm
241202 3.6 注意 Puppet - Puppet および Puppet Enterprise における任意のファイルを上書きされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-1989 2012-07-26 14:07 2012-06-27 Show GitHub Exploit DB Packet Storm
241203 3.5 注意 Puppet - Puppet および Puppet Enterprise におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2012-1987 2012-07-26 13:57 2012-05-29 Show GitHub Exploit DB Packet Storm
241204 10 危険 Google
サムスン		 - 複数の製品の Chromebook プラットフォーム上で稼働する Google Chrome OS における脆弱性 CWE-noinfo
情報不足 		CVE-2012-4050 2012-07-26 11:57 2012-07-23 Show GitHub Exploit DB Packet Storm
241205 2.1 注意 Puppet - Puppet および Puppet Enterprise における任意のファイルを読まれる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-1986 2012-07-25 17:54 2012-05-29 Show GitHub Exploit DB Packet Storm
241206 5 警告 シマンテック - Symantec Web Gateway の管理コンソールにおける任意のパスワードを変更される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-2977 2012-07-25 16:23 2012-07-20 Show GitHub Exploit DB Packet Storm
241207 7.5 危険 シマンテック - Symantec Web Gateway の管理コンソールにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2012-2961 2012-07-25 16:19 2012-07-20 Show GitHub Exploit DB Packet Storm
241208 7.5 危険 シマンテック - Symantec Web Gateway の管理コンソールにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2012-2574 2012-07-25 15:39 2012-07-20 Show GitHub Exploit DB Packet Storm
241209 4.4 警告 シマンテック - Symantec System Recovery および Backup Exec System Recovery における権限を取得される脆弱性 CWE-Other
その他 		CVE-2012-0305 2012-07-25 15:31 2012-07-20 Show GitHub Exploit DB Packet Storm
241210 4 警告 Moodle - Moodle におけるサービス運用妨害 (CPU 資源の消費) の脆弱性 CWE-Other
その他 		CVE-2012-3398 2012-07-25 14:56 2012-07-23 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 19, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
286021 - cisco unified_communications_manager The certificate-import feature in the Certificate Authority Proxy Function (CAPF) CLI implementation in Cisco Unified Communications Manager (Unified CM) 10.0(1) and earlier allows local users to rea… CWE-310
Cryptographic Issues 		CVE-2014-0741 2024-11-21 11:02 2014-02-27 Show GitHub Exploit DB Packet Storm
286022 - cisco unified_communications_manager Cross-site request forgery (CSRF) vulnerability in the Call Detail Records Analysis and Reporting (CAR) interface in the OS Administration component in Cisco Unified Communications Manager (Unified C… CWE-352
 Origin Validation Error 		CVE-2014-0740 2024-11-21 11:02 2014-02-27 Show GitHub Exploit DB Packet Storm
286023 - ibm rational_focal_point Multiple cross-site scripting (XSS) vulnerabilities in the (1) ForwardController and (2) AttributeEditor scripts in IBM Rational Focal Point 6.4.x and 6.5.x before 6.5.2.3 and 6.6.x before 6.6.1 allo… CWE-79
Cross-site Scripting 		CVE-2014-0853 2024-11-21 11:02 2014-02-26 Show GitHub Exploit DB Packet Storm
286024 - ibm rational_focal_point Cross-site scripting (XSS) vulnerability in IBM Rational Focal Point 6.4.x and 6.5.x before 6.5.2.3 and 6.6.x before 6.6.1 allows remote authenticated users to inject arbitrary web script or HTML by … CWE-79
Cross-site Scripting 		CVE-2014-0843 2024-11-21 11:02 2014-02-26 Show GitHub Exploit DB Packet Storm
286025 - ibm rational_focal_point The account-creation functionality in IBM Rational Focal Point 6.4.x and 6.5.x before 6.5.2.3 and 6.6.x before 6.6.1 places the new user's default password within the creation page, which allows remo… CWE-255
Credentials Management 		CVE-2014-0842 2024-11-21 11:02 2014-02-26 Show GitHub Exploit DB Packet Storm
286026 - ibm rational_focal_point Multiple cross-site scripting (XSS) vulnerabilities in IBM Rational Focal Point 6.4.x and 6.5.x before 6.5.2.3 and 6.6.x before 6.6.1 allow remote authenticated users to inject arbitrary web script o… CWE-79
Cross-site Scripting 		CVE-2014-0840 2024-11-21 11:02 2014-02-26 Show GitHub Exploit DB Packet Storm
286027 - ibm rational_focal_point IBM Rational Focal Point 6.4.x and 6.5.x before 6.5.2.3 and 6.6.x before 6.6.1 allows remote authenticated users to modify data via vectors involving a direct object reference. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2014-0839 2024-11-21 11:02 2014-02-26 Show GitHub Exploit DB Packet Storm
286028 - iconics genesis32 An ActiveX control in GenLaunch.htm in ICONICS GENESIS32 8.0, 8.02, 8.04, and 8.05 allows remote attackers to execute arbitrary programs via a crafted HTML document. CWE-20
 Improper Input Validation  		CVE-2014-0758 2024-11-21 11:02 2014-02-24 Show GitHub Exploit DB Packet Storm
286029 - ibm cognos_business_intelligence Cross-site scripting (XSS) vulnerability in the server in IBM Cognos Business Intelligence (BI) 8.4.1, 10.1 before IF6, 10.1.1 before IF5, 10.2 before IF7, 10.2.1 before IF4, and 10.2.1.1 before IF4 … CWE-79
Cross-site Scripting 		CVE-2014-0861 2024-11-21 11:02 2014-02-23 Show GitHub Exploit DB Packet Storm
286030 - ibm cognos_business_intelligence The server in IBM Cognos Business Intelligence (BI) 8.4.1, 10.1 before IF6, 10.1.1 before IF5, 10.2 before IF7, 10.2.1 before IF4, and 10.2.1.1 before IF4 allows remote authenticated users to read ar… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2014-0854 2024-11-21 11:02 2014-02-23 Show GitHub Exploit DB Packet Storm