Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 29, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
241691 6.8 警告 Autosave - Drupal 用 Autosave モジュールにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2012-2097 2012-09-3 16:02 2012-04-11 Show GitHub Exploit DB Packet Storm
241692 7.1 危険 WellinTech - WellinTech KingSCADA における重要な情報を取得される脆弱性 CWE-255
証明書・パスワード管理 		CVE-2012-1977 2012-09-3 15:57 2012-01-20 Show GitHub Exploit DB Packet Storm
241693 6 警告 IBM - IBM WebSphere Application Server における管理者のアクセス権限を取得される脆弱性 CWE-20
不適切な入力確認 		CVE-2012-3325 2012-09-3 14:21 2012-08-30 Show GitHub Exploit DB Packet Storm
241694 6.4 警告 EPractize Labs - EPractize Labs Subscription Manager における任意のファイルを上書きされる脆弱性 CWE-20
不適切な入力確認 		CVE-2011-5136 2012-09-3 14:20 2012-08-30 Show GitHub Exploit DB Packet Storm
241695 6 警告 Docebo - DoceboLMS の iotask モジュールにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2011-5135 2012-09-3 14:18 2012-08-30 Show GitHub Exploit DB Packet Storm
241696 6 警告 Widget Factory Limited - Joomla! 用 JCE コンポーネントにおける任意の PHP コードを実行される脆弱性 CWE-Other
その他 		CVE-2011-5134 2012-09-3 14:15 2012-08-30 Show GitHub Exploit DB Packet Storm
241697 10 危険 MyBB Group - MyBB における脆弱性 CWE-noinfo
情報不足 		CVE-2011-5133 2012-09-3 14:14 2011-11-25 Show GitHub Exploit DB Packet Storm
241698 4.3 警告 MyBB Group - MyBB におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-5132 2012-09-3 14:13 2011-11-25 Show GitHub Exploit DB Packet Storm
241699 6.8 警告 MyBB Group - MyBB の global.php におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2011-5131 2012-09-3 13:53 2011-11-25 Show GitHub Exploit DB Packet Storm
241700 6.8 警告 Haudenschilt - Family Connections CMS の dev/less.php における任意のコマンドを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2011-5130 2012-09-3 13:49 2011-11-30 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 29, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
285931 - intel indeo_video ir41_32.ax 4.51.16.3 for Intel Indeo Video 4.5 allows remote attackers to cause a denial of service (crash) via a crafted .avi file. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2014-3735 2024-11-21 11:08 2014-05-19 Show GitHub Exploit DB Packet Storm
285932 - xen xen Xen 4.4.x does not properly validate the load address for 64-bit ARM guest kernels, which allows local users to read system memory or cause a denial of service (crash) via a crafted kernel, which tri… CWE-20
 Improper Input Validation  		CVE-2014-3717 2024-11-21 11:08 2014-05-19 Show GitHub Exploit DB Packet Storm
285933 - xen xen Xen 4.4.x does not properly check alignment, which allows local users to cause a denial of service (crash) via an unspecified field in a DTB header in a 32-bit guest kernel. CWE-20
 Improper Input Validation  		CVE-2014-3716 2024-11-21 11:08 2014-05-19 Show GitHub Exploit DB Packet Storm
285934 - xen xen Buffer overflow in Xen 4.4.x allows local users to read system memory or cause a denial of service (crash) via a crafted 32-bit guest kernel, related to searching for an appended DTB. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2014-3715 2024-11-21 11:08 2014-05-19 Show GitHub Exploit DB Packet Storm
285935 - xen xen The ARM image loading functionality in Xen 4.4.x does not properly validate kernel length, which allows local users to read system memory or cause a denial of service (crash) via a crafted 32-bit ARM… CWE-20
 Improper Input Validation  		CVE-2014-3714 2024-11-21 11:08 2014-05-19 Show GitHub Exploit DB Packet Storm
285936 - juniper network_and_security_manager_software
nsm3000
nsmexpress 		Unspecified vulnerability in the NSM XDB service in Juniper NSM before 2012.2R8 allows remote attackers to execute arbitrary code via unspecified vectors. NVD-CWE-noinfo
CVE-2014-3411 2024-11-21 11:08 2014-05-19 Show GitHub Exploit DB Packet Storm
285937 - flag_module_project flag Eval injection vulnerability in the flag_import_form_validate function in includes/flag.export.inc in the Flag module 7.x-3.0, 7.x-3.5, and earlier for Drupal allows remote authenticated administrato… CWE-94
Code Injection 		CVE-2014-3453 2024-11-21 11:08 2014-05-18 Show GitHub Exploit DB Packet Storm
285938 - spumko_project hapi_server_framework The hapi server framework 2.0.x and 2.1.x before 2.2.0 for Node.js allows remote attackers to cause a denial of service (file descriptor consumption and process crash) via unspecified vectors. CWE-399
 Resource Management Errors 		CVE-2014-3742 2024-11-21 11:08 2014-05-17 Show GitHub Exploit DB Packet Storm
285939 - canonical
djangoproject
opensuse
debian 		ubuntu_linux
django
opensuse
debian_linux 		The django.util.http.is_safe_url function in Django 1.4 before 1.4.13, 1.5 before 1.5.8, 1.6 before 1.6.5, and 1.7 before 1.7b4 does not properly validate URLs, which allows remote attackers to condu… CWE-20
 Improper Input Validation  		CVE-2014-3730 2024-11-21 11:08 2014-05-17 Show GitHub Exploit DB Packet Storm
285940 - codecguide k-lite_codec_pack Filters\LAV\avfilter-lav-4.dll in K-lite Codec 10.4.5 and earlier allows remote attackers to cause a denial of service (crash) via a crafted .jpg file. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2014-3452 2024-11-21 11:08 2014-05-17 Show GitHub Exploit DB Packet Storm