Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 20, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
241271 4.4 警告 GNU Project - GNU Automake における任意のコードを実行される脆弱性 CWE-264
CWE-362
CVE-2012-3386 2012-08-9 16:36 2012-07-9 Show GitHub Exploit DB Packet Storm
241272 10 危険 Ubisoft - Ubisoft Uplay PC 用 Web ブラウザのプラグインにおける任意のプログラムを実行される脆弱性 CWE-78
OSコマンド・インジェクション
CVE-2012-4177 2012-08-9 16:27 2012-07-30 Show GitHub Exploit DB Packet Storm
241273 3.6 注意 eXtplorer - eXtplorer における任意のファイルを削除または上書きされる脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-3454 2012-08-9 16:26 2012-08-7 Show GitHub Exploit DB Packet Storm
241274 3.6 注意 Debian - logol における任意のファイルを削除または上書きされる脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-3453 2012-08-9 16:22 2012-08-7 Show GitHub Exploit DB Packet Storm
241275 3.3 注意 GNOME Project - gnome-screensaver における無人のワークステーションにアクセスされる脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-3452 2012-08-9 16:20 2012-08-7 Show GitHub Exploit DB Packet Storm
241276 3.6 注意 Open vSwitch - Open vSwitch における任意のファイルを削除される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-3449 2012-08-9 16:12 2012-08-7 Show GitHub Exploit DB Packet Storm
241277 4.3 警告 KDE project - KDE PIM における任意の Web スクリプトまたは HTML を挿入される脆弱性 CWE-16
環境設定
CVE-2012-3413 2012-08-9 16:10 2012-08-7 Show GitHub Exploit DB Packet Storm
241278 4.3 警告 ヒューレット・パッカード - HP Network Node Manager i におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-2022 2012-08-9 15:45 2012-08-2 Show GitHub Exploit DB Packet Storm
241279 7.5 危険 Ganglia - Ganglia Web における任意の PHP コードを実行される脆弱性 CWE-noinfo
情報不足
CVE-2012-3448 2012-08-9 11:48 2012-08-6 Show GitHub Exploit DB Packet Storm
241280 2.6 注意 Puppet - Puppet および Puppet Enterprise におけるエージェントを偽装される脆弱性 CWE-287
不適切な認証
CVE-2012-3408 2012-08-9 11:42 2012-08-6 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 21, 2026, 4:10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
285941 - topicsviewer topicsviewer Multiple SQL injection vulnerabilities in TopicsViewer 3.0 Beta 1 allow remote attackers to execute arbitrary SQL commands via the id parameter to (1) edit_block.php, (2) edit_cat.php, (3) edit_note.… CWE-89
SQL Injection
CVE-2014-10023 2024-11-21 11:03 2015-01-13 Show GitHub Exploit DB Packet Storm
285942 - apache traffic_server Apache Traffic Server before 5.1.2 allows remote attackers to cause a denial of service via unspecified vectors, related to internal buffer sizing. CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2014-10022 2024-11-21 11:03 2015-01-13 Show GitHub Exploit DB Packet Storm
285943 - wpsymposiumpro wp_symposium Unrestricted file upload vulnerability in UploadHandler.php in the WP Symposium plugin 14.11 for WordPress allows remote attackers to execute arbitrary code by uploading a file with an executable ext… NVD-CWE-Other
CVE-2014-10021 2024-11-21 11:03 2015-01-13 Show GitHub Exploit DB Packet Storm
285944 - tecorange simple_e-document SQL injection vulnerability in login.php in Simple e-document 1.31 allows remote attackers to execute arbitrary SQL commands via the username parameter. CWE-89
SQL Injection
CVE-2014-10020 2024-11-21 11:03 2015-01-13 Show GitHub Exploit DB Packet Storm
285945 - teracom t2-b-gawv1.4u10y-bi Multiple cross-site request forgery (CSRF) vulnerabilities in webconfig/wlan/country.html/country in the Teracom T2-B-Gawv1.4U10Y-BI modem allow remote attackers to hijack the authentication of admin… CWE-352
 Origin Validation Error
CVE-2014-10019 2024-11-21 11:03 2015-01-13 Show GitHub Exploit DB Packet Storm
285946 - teracom t2-b-gawv1.4u10y-bi Cross-site scripting (XSS) vulnerability in webconfig/wlan/country.html/country in the Teracom T2-B-Gawv1.4U10Y-BI modem allows remote attackers to inject arbitrary web script or HTML via the essid p… CWE-79
Cross-site Scripting
CVE-2014-10018 2024-11-21 11:03 2015-01-13 Show GitHub Exploit DB Packet Storm
285947 - welcart e-commerce Multiple SQL injection vulnerabilities in the Welcart e-Commerce plugin 1.3.12 for WordPress allow remote attackers to execute arbitrary SQL commands via the (1) changeSort or (2) switch parameter in… CWE-89
SQL Injection
CVE-2014-10017 2024-11-21 11:03 2015-01-13 Show GitHub Exploit DB Packet Storm
285948 - welcart e-commerce Multiple cross-site scripting (XSS) vulnerabilities in the Welcart e-Commerce plugin 1.3.12 for WordPress allow remote attackers to inject arbitrary web script or HTML via (1) unspecified vectors rel… CWE-79
Cross-site Scripting
CVE-2014-10016 2024-11-21 11:03 2015-01-13 Show GitHub Exploit DB Packet Storm
285949 - phpjabbers event_booking_calendar SQL injection vulnerability in load-calendar.php in PHPJabbers Event Booking Calendar 2.0 allows remote attackers to execute arbitrary SQL commands via the cid parameter. CWE-89
SQL Injection
CVE-2014-10015 2024-11-21 11:03 2015-01-13 Show GitHub Exploit DB Packet Storm
285950 - phpjabbers event_booking_calendar Multiple cross-site request forgery (CSRF) vulnerabilities in PHPJabbers Event Booking Calendar 2.0 allow remote attackers to hijack the authentication of administrators for requests that (1) change … CWE-352
 Origin Validation Error
CVE-2014-10014 2024-11-21 11:03 2015-01-13 Show GitHub Exploit DB Packet Storm