Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 20, 2026, 4 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
241221	4.3	警告	T-dah	-	T-dah WebMail におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-2573	2012-08-14 16:34	2012-08-12	Show	GitHub Exploit DB Packet Storm

241222	4.3	警告	WinWebMail	-	WinWebMail Servert におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-2571	2012-08-14 16:33	2012-08-12	Show	GitHub Exploit DB Packet Storm

241223	10	危険	Amazon.com, Inc.	-	Amazon Kindle Touch における任意のコマンドを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2012-4249	2012-08-14 16:31	2012-08-12	Show	GitHub Exploit DB Packet Storm

241224	9.3	危険	Amazon.com, Inc.	-	Amazon Kindle Touch における脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-4248	2012-08-14 16:30	2012-08-12	Show	GitHub Exploit DB Packet Storm

241225	7.5	危険	Dir2web	-	Dir2web における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2012-4070	2012-08-14 16:29	2012-08-12	Show	GitHub Exploit DB Packet Storm

241226	5	警告	Dir2web	-	Dir2web におけるデータベースをダウンロードされる脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-4069	2012-08-14 16:26	2012-08-12	Show	GitHub Exploit DB Packet Storm

241227	4.3	警告	Alt-N	-	Alt-N MDaemon フリー版におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-2584	2012-08-14 16:22	2012-08-12	Show	GitHub Exploit DB Packet Storm

241228	6.4	警告	Caucho Technology	-	Resin に同梱されている Caucho Quercus におけるファイル名の拡張子による制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-2969	2012-08-14 16:16	2012-08-12	Show	GitHub Exploit DB Packet Storm

241229	5	警告	Caucho Technology	-	Resin に同梱されている Caucho Quercus におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2012-2968	2012-08-14 16:09	2012-08-12	Show	GitHub Exploit DB Packet Storm

241230	7.5	危険	Caucho Technology	-	Resin に同梱されている Caucho Quercus における脆弱性	CWE-Other その他	CVE-2012-2967	2012-08-14 16:08	2012-08-12	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 20, 2026, 4:14 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
286451	6.1	MEDIUM Network	redhat	satellite	Cross-site scripting (XSS) vulnerability in Red Hat Satellite 6.0.3.	CWE-79 Cross-site Scripting	CVE-2014-0141	2024-11-21 11:01	2017-08-29	Show	GitHub Exploit DB Packet Storm

286452	5.5	MEDIUM Local	qemu	qemu	The qcow2_open function in the (block/qcow2.c) in QEMU before 1.7.2 and 2.x before 2.0.0 allows local users to cause a denial of service (NULL pointer dereference) via a crafted image which causes an…	CWE-476 NULL Pointer Dereference	CVE-2014-0146	2024-11-21 11:01	2017-08-11	Show	GitHub Exploit DB Packet Storm

286453	7.8	HIGH Local	qemu	qemu	Multiple buffer overflows in QEMU before 1.7.2 and 2.x before 2.0.0, allow local users to cause a denial of service (crash) or possibly execute arbitrary code via a large (1) L1 table in the qcow2_sn…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2014-0145	2024-11-21 11:01	2017-08-11	Show	GitHub Exploit DB Packet Storm

286454	5.5	MEDIUM Local	qemu	qemu	QEMU, possibly before 2.0.0, allows local users to cause a denial of service (divide-by-zero error and crash) via a zero value in the (1) tracks field to the seek_to_sector function in block/parallel…	CWE-369 Divide By Zero	CVE-2014-0142	2024-11-21 11:01	2017-08-11	Show	GitHub Exploit DB Packet Storm

286455	7.0	HIGH Local	redhat qemu	enterprise_linux qemu	Multiple integer overflows in the block drivers in QEMU, possibly before 2.0.0, allow local users to cause a denial of service (crash) via a crafted catalog size in (1) the parallels_open function in…	CWE-190 Integer Overflow or Wraparound	CVE-2014-0143	2024-11-21 11:01	2017-08-11	Show	GitHub Exploit DB Packet Storm

286456	8.8	HIGH Network	pivotal_software vmware	spring_framework	When processing user provided XML documents, the Spring Framework 4.0.0 to 4.0.4, 3.0.0 to 3.2.8, and possibly earlier unsupported versions did not disable by default the resolution of URI references…	CWE-611 XXE	CVE-2014-0225	2024-11-21 11:01	2017-05-26	Show	GitHub Exploit DB Packet Storm

286457	7.3	HIGH Network	vmware	spring_security	The ActiveDirectoryLdapAuthenticator in Spring Security 3.2.0 to 3.2.1 and 3.1.0 to 3.1.5 does not check the password length. If the directory allows anonymous binds then it may incorrectly authentic…	CWE-287 Improper Authentication	CVE-2014-0097	2024-11-21 11:01	2017-05-26	Show	GitHub Exploit DB Packet Storm

286458	7.5	HIGH Network	aescrypt_project	aescrypt	The aescrypt gem 1.0.0 for Ruby does not randomize the CBC IV for use with the AESCrypt.encrypt and AESCrypt.decrypt functions, which allows attackers to defeat cryptographic protection mechanisms vi…	CWE-330 Use of Insufficiently Random Values	CVE-2013-7463	2024-11-21 11:01	2017-04-20	Show	GitHub Exploit DB Packet Storm

286459	7.5	HIGH Network	pulpproject	pulp	Pulp before 2.3.0 uses the same the same certificate authority key and certificate for all installations.	CWE-295 Improper Certificate Validation	CVE-2013-7450	2024-11-21 11:01	2017-04-4	Show	GitHub Exploit DB Packet Storm

286460	6.5	MEDIUM Network	cloudera apache	cdh hadoop	Apache Hadoop 0.23.x before 0.23.11 and 2.x before 2.4.1, as used in Cloudera CDH 5.0.x before 5.0.2, do not check authorization for the (1) refreshNamenodes, (2) deleteBlockPool, and (3) shutdownDat…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2014-0229	2024-11-21 11:01	2017-03-24	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed