Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 1, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
241301 6.5 警告 WordPress.org - WordPress の xmlrpc.php におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2010-5106 2012-09-19 11:23 2010-12-8 Show GitHub Exploit DB Packet Storm
241302 6.8 警告 サイバーリンク株式会社 - Power2Go にバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2011-5171 2012-09-19 10:41 2011-12-12 Show GitHub Exploit DB Packet Storm
241303 2.6 注意 マイクロソフト - Windows Phone 7 に SSL サーバ証明書の検証不備の脆弱性 CWE-310
暗号の問題
CVE-2012-2993 2012-09-19 10:39 2012-09-18 Show GitHub Exploit DB Packet Storm
241304 7.5 危険 CoSoSys Ltd - Endpoint Protector 4 の認証機能に脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-2994 2012-09-19 10:37 2012-09-18 Show GitHub Exploit DB Packet Storm
241305 3.5 注意 シスコシステムズ - Cisco IOS の SSLVPN の実装におけるサービス運用妨害 (デバイスクラッシュ) の脆弱性 CWE-DesignError
CVE-2012-3924 2012-09-18 16:57 2012-09-16 Show GitHub Exploit DB Packet Storm
241306 3.5 注意 シスコシステムズ - Cisco IOS の SSLVPN の実装におけるサービス運用妨害 (デバイスクラッシュ) の脆弱性 CWE-noinfo
情報不足
CVE-2012-3923 2012-09-18 16:56 2012-09-16 Show GitHub Exploit DB Packet Storm
241307 5 警告 シスコシステムズ - 複数の Cisco 製品で使用される Cisco ACE モジュールにおけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2012-3919 2012-09-18 16:54 2012-09-16 Show GitHub Exploit DB Packet Storm
241308 5 警告 シスコシステムズ - Cisco IOS の DMVPN トンネルの実装におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2012-3915 2012-09-18 16:54 2012-09-16 Show GitHub Exploit DB Packet Storm
241309 6.8 警告 シスコシステムズ - Cisco ISE 3300 シリーズの ISE 管理者ユーザインターフェースにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2012-3908 2012-09-18 16:53 2012-04-11 Show GitHub Exploit DB Packet Storm
241310 5 警告 シスコシステムズ - Cisco IPS 4200 シリーズセンサーの sensorApp におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2012-3901 2012-09-18 16:53 2010-07-22 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 1, 2026, 4:12 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
286961 - sap netweaver_abap_application_server The ABAP Help documentation and translation tools (BC-DOC-HLP) in Basis in SAP Netweaver ABAP Application Server does not properly restrict access, which allows local users to gain privileges and exe… CWE-264
Permissions, Privileges, and Access Controls
CVE-2014-3130 2024-11-21 11:07 2014-04-30 Show GitHub Exploit DB Packet Storm
286962 - sap netweaver_software_lifecycle_manager The Java Server Pages in the Software Lifecycle Manager (SLM) in SAP NetWeaver allows remote attackers to obtain sensitive information via a crafted request, related to SAP Solution Manager 7.1. CWE-200
Information Exposure
CVE-2014-3129 2024-11-21 11:07 2014-04-30 Show GitHub Exploit DB Packet Storm
286963 - mediawiki mediawiki Cross-site scripting (XSS) vulnerability in includes/actions/InfoAction.php in MediaWiki before 1.21.9 and 1.22.x before 1.22.6 allows remote attackers to inject arbitrary web script or HTML via the … CWE-79
Cross-site Scripting
CVE-2014-2853 2024-11-21 11:07 2014-04-30 Show GitHub Exploit DB Packet Storm
286964 - unitrends enterprise_backup Unitrends Enterprise Backup 7.3.0 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the comm parameter to recoveryconsole/bpl/snmpd.php. CWE-78
OS Command 
CVE-2014-3008 2024-11-21 11:07 2014-04-28 Show GitHub Exploit DB Packet Storm
286965 - xen xen The vgic_distr_mmio_write function in the virtual guest interrupt controller (GIC) distributor (arch/arm/vgic.c) in Xen 4.4.x, when running on an ARM system, allows local guest users to cause a denia… CWE-20
 Improper Input Validation 
CVE-2014-2986 2024-11-21 11:07 2014-04-28 Show GitHub Exploit DB Packet Storm
286966 - gnustep base Tools/gdomap.c in gdomap in GNUstep Base 1.24.6 and earlier, when run in daemon mode, does not properly handle the file descriptor for the logger, which allows remote attackers to cause a denial of s… CWE-20
 Improper Input Validation 
CVE-2014-2980 2024-11-21 11:07 2014-04-28 Show GitHub Exploit DB Packet Storm
286967 - westerndigital arkeia_virtual_appliance_firmware Directory traversal vulnerability in opt/arkeia/wui/htdocs/index.php in the WD Arkeia virtual appliance (AVA) with firmware before 10.2.9 allows remote attackers to read arbitrary files and execute a… CWE-22
Path Traversal
CVE-2014-2846 2024-11-21 11:07 2014-04-28 Show GitHub Exploit DB Packet Storm
286968 - pythonware
python
python_imaging_library
pillow
Python Image Library (PIL) 1.1.7 and earlier and Pillow 2.3 might allow remote attackers to execute arbitrary commands via shell metacharacters in unspecified vectors related to CVE-2014-1932, possib… CWE-78
OS Command 
CVE-2014-3007 2024-11-21 11:07 2014-04-28 Show GitHub Exploit DB Packet Storm
286969 - acunetix web_vulnerability_scanner Stack-based buffer overflow in Acunetix Web Vulnerability Scanner (WVS) 8 build 20120704 allows remote attackers to execute arbitrary code via an HTML file containing an IMG element with a long URL (… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2014-2994 2024-11-21 11:07 2014-04-27 Show GitHub Exploit DB Packet Storm
286970 - linux linux_kernel Off-by-one error in the bpf_jit_compile function in arch/x86/net/bpf_jit_comp.c in the Linux kernel before 3.1.8, when BPF JIT is enabled, allows local users to cause a denial of service (system cras… CWE-189
Numeric Errors
CVE-2014-2889 2024-11-21 11:07 2014-04-27 Show GitHub Exploit DB Packet Storm