Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 27, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
241281 6.8 警告 ZTE - ZTE ZXDSL の accessaccount.cgi におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2012-4746 2012-09-5 11:48 2012-08-31 Show GitHub Exploit DB Packet Storm
241282 4.3 警告 The Collective - Acuity CMS の admin/login.asp におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-4745 2012-09-5 11:47 2012-08-31 Show GitHub Exploit DB Packet Storm
241283 4.3 警告 eos.pe - Zeroboard 用 Siche Search モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-4744 2012-09-5 11:46 2012-08-31 Show GitHub Exploit DB Packet Storm
241284 7.5 危険 eos.pe - Zeroboard 用 Siche Search モジュールにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2012-4743 2012-09-5 11:45 2012-08-31 Show GitHub Exploit DB Packet Storm
241285 7.5 危険 Inverse inc. - PacketFence の web.pm における任意のコードを実行される脆弱性 CWE-noinfo
情報不足
CVE-2012-4742 2012-09-5 11:45 2009-08-11 Show GitHub Exploit DB Packet Storm
241286 5 警告 Inverse inc. - PacketFence におけるユーザになりすまされる脆弱性 CWE-287
不適切な認証
CVE-2012-4741 2012-09-5 11:44 2012-03-2 Show GitHub Exploit DB Packet Storm
241287 4.3 警告 Inverse inc. - PacketFence におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-4740 2012-09-5 11:43 2012-08-31 Show GitHub Exploit DB Packet Storm
241288 4.3 警告 Yaniv Aran-Shamir - Drupal 用 Gigya - Social optimization モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-2117 2012-09-5 11:41 2012-04-18 Show GitHub Exploit DB Packet Storm
241289 6.8 警告 Commerce Guys - Drupal 用 Commerce Reorder モジュールにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2012-2116 2012-09-5 11:41 2012-04-18 Show GitHub Exploit DB Packet Storm
241290 7.5 危険 musl libc - musl の fprintf におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2012-2114 2012-09-5 11:40 2012-04-18 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
285321 - qemu
debian
redhat
canonical
opensuse
qemu
debian_linux
enterprise_linux_desktop
enterprise_linux_workstation
enterprise_linux_server
enterprise_linux_server_tus
enterprise_linux_server_aus
enterprise_linux_eus
op…
The VGA emulator in QEMU allows local guest users to read host memory by setting the display to a high resolution. CWE-200
Information Exposure
CVE-2014-3615 2024-11-21 11:08 2014-11-2 Show GitHub Exploit DB Packet Storm
285322 - openstack
opensuse
horizon
opensuse
Cross-site scripting (XSS) vulnerability in the Users panel (admin/users/) in OpenStack Dashboard (Horizon) before 2013.2.4, 2014.1 before 2014.1.2, and Juno before Juno-2 allows remote administrator… CWE-79
Cross-site Scripting
CVE-2014-3475 2024-11-21 11:08 2014-11-1 Show GitHub Exploit DB Packet Storm
285323 - openstack
opensuse
horizon
opensuse
Cross-site scripting (XSS) vulnerability in horizon/static/horizon/js/horizon.instances.js in the Launch Instance menu in OpenStack Dashboard (Horizon) before 2013.2.4, 2014.1 before 2014.1.2, and Ju… CWE-79
Cross-site Scripting
CVE-2014-3474 2024-11-21 11:08 2014-11-1 Show GitHub Exploit DB Packet Storm
285324 - openstack
opensuse
horizon
opensuse
Cross-site scripting (XSS) vulnerability in the Orchestration/Stack section in the Horizon Orchestration dashboard in OpenStack Dashboard (Horizon) before 2013.2.4, 2014.1 before 2014.1.2, and Juno b… CWE-79
Cross-site Scripting
CVE-2014-3473 2024-11-21 11:08 2014-11-1 Show GitHub Exploit DB Packet Storm
285325 - openstack
redhat
nova
openstack
OpenStack Compute (Nova) before 2014.1.4 and 2014.2.x before 2014.2.1 allows remote authenticated users to cause a denial of service (CPU consumption) via an IP filter in a list active servers API re… CWE-399
 Resource Management Errors
CVE-2014-3708 2024-11-21 11:08 2014-10-31 Show GitHub Exploit DB Packet Storm
285326 - adaptivecomputing torque_resource_manager The tm_adopt function in lib/Libifl/tm.c in Terascale Open-Source Resource and Queue Manager (aka TORQUE Resource Manager) 5.0.x, 4.5.x, 4.2.x, and earlier does not validate that the owner of the pro… CWE-264
Permissions, Privileges, and Access Controls
CVE-2014-3684 2024-11-21 11:08 2014-10-30 Show GitHub Exploit DB Packet Storm
285327 - apache wss4j
cxf
Apache WSS4J before 1.6.17 and 2.x before 2.0.2, as used in Apache CXF 2.7.x before 2.7.13 and 3.0.x before 3.0.2, when using TransportBinding, does not properly enforce the SAML SubjectConfirmation … CWE-287
Improper Authentication
CVE-2014-3623 2024-11-21 11:08 2014-10-30 Show GitHub Exploit DB Packet Storm
285328 - apache cxf The SamlHeaderInHandler in Apache CXF before 2.6.11, 2.7.x before 2.7.8, and 3.0.x before 3.0.1 allows remote attackers to cause a denial of service (infinite loop) via a crafted SAML token in the au… CWE-399
 Resource Management Errors
CVE-2014-3584 2024-11-21 11:08 2014-10-30 Show GitHub Exploit DB Packet Storm
285329 - bss continuity_cms SQL injection vulnerability in wcm/system/pages/admin/getnode.aspx in BSS Continuity CMS 4.2.22640.0 allows remote attackers to execute arbitrary SQL commands via the nodeid parameter. CWE-89
SQL Injection
CVE-2014-3446 2024-11-21 11:08 2014-10-30 Show GitHub Exploit DB Packet Storm
285330 - pidgin pidgin The jabber_idn_validate function in jutil.c in the Jabber protocol plugin in libpurple in Pidgin before 2.10.10 allows remote attackers to obtain sensitive information from process memory via a craft… CWE-200
Information Exposure
CVE-2014-3698 2024-11-21 11:08 2014-10-29 Show GitHub Exploit DB Packet Storm