Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 5, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
241881	6.8	警告	IBM	-	複数の IBM 製品で使用される IBM Maximo Asset Management におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2012-0714	2012-09-12 16:12	2012-09-4	Show	GitHub Exploit DB Packet Storm

241882	6.8	警告	OpenKM	-	OpenKM におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2012-2316	2012-09-12 14:20	2012-01-4	Show	GitHub Exploit DB Packet Storm

241883	4	警告	OpenKM	-	OpenKM における任意のユーザに管理者権限を割り当てられる脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-2315	2012-09-12 14:19	2012-01-4	Show	GitHub Exploit DB Packet Storm

241884	4.3	警告	chatelao	-	PHP Address Book の preferences.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-1912	2012-09-12 13:54	2012-09-9	Show	GitHub Exploit DB Packet Storm

241885	7.5	危険	chatelao	-	PHP Address Book における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2012-1911	2012-09-12 13:53	2012-09-9	Show	GitHub Exploit DB Packet Storm

241886	4.9	警告	danielb	-	Drupal 用 Cool Aid モジュールにおける任意のページを変更される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-1649	2012-09-12 13:53	2012-02-29	Show	GitHub Exploit DB Packet Storm

241887	2.1	注意	danielb	-	Drupal 用 Cool Aid モジュールにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-1648	2012-09-12 13:52	2012-02-29	Show	GitHub Exploit DB Packet Storm

241888	5	警告	MediaWiki	-	MediaWiki の wikitext パーサにおけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2012-4885	2012-09-12 13:50	2012-03-21	Show	GitHub Exploit DB Packet Storm

241889	4.3	警告	MediaWiki	-	MediaWiki の wikitext パーサにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-1582	2012-09-12 13:47	2012-03-21	Show	GitHub Exploit DB Packet Storm

241890	5	警告	MediaWiki	-	MediaWiki における任意のユーザのパスワードを変更される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-1581	2012-09-12 13:46	2012-03-21	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 5, 2026, 4:11 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
285811	8.8	HIGH Network	sphider	sphider	A Command Execution vulnerability exists in Sphider before 1.3.6 due to insufficient sanitization of fwrite to conf.php, which could let a remote malicious user execute arbitrary code. CVE-2014-5083 …	CWE-74 Injection	CVE-2014-5083	2024-11-21 11:11	2020-02-11	Show	GitHub Exploit DB Packet Storm

285812	5.3	MEDIUM Network	docker	docker	A vulnerability exists in Docker before 1.2 via container names, which may collide with and override container IDs.	NVD-CWE-noinfo	CVE-2014-5278	2024-11-21 11:11	2020-02-8	Show	GitHub Exploit DB Packet Storm

285813	9.8	CRITICAL Network	status2k	status2k	A vulnerability exits in Status2K 2.5 Server Monitoring Software via the multies parameter to includes/functions.php, which could let a malicious user execute arbitrary PHP code.	CWE-20 Improper Input Validation	CVE-2014-5091	2024-11-21 11:11	2020-02-8	Show	GitHub Exploit DB Packet Storm

285814	9.8	CRITICAL Network	sphider sphider-plus sphiderpro	sphider sphider-plus sphider_pro	A vulnerability exists in Sphider Search Engine prior to 1.3.6 due to exec calls in admin/spiderfuncs.php, which could let a remote malicious user execute arbitrary code.	CWE-20 Improper Input Validation	CVE-2014-5087	2024-11-21 11:11	2020-02-8	Show	GitHub Exploit DB Packet Storm

285815	8.8	HIGH Network	kemptechnologies	load_master	A CSRF Vulnerability exists in Kemp Load Master before 7.0-18a via unspecified vectors in administrative pages.	CWE-352 Origin Validation Error	CVE-2014-5288	2024-11-21 11:11	2020-02-8	Show	GitHub Exploit DB Packet Storm

285816	7.5	HIGH Network	open-xchange	open-xchange_appsuite	Multiple absolute path traversal vulnerabilities in documentconverter in Open-Xchange (OX) AppSuite before 7.4.2-rev10 and 7.6.x before 7.6.0-rev10 allow remote attackers to read application files vi…	CWE-22 Path Traversal	CVE-2014-5236	2024-11-21 11:11	2020-02-1	Show	GitHub Exploit DB Packet Storm

285817	9.6	CRITICAL Network	eucalyptus	eucalyptus_management_console	Cross-site scripting (XSS) vulnerability in Eucalyptus Management Console (EMC) 4.0.x before 4.0.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.	CWE-79 Cross-site Scripting	CVE-2014-5039	2024-11-21 11:11	2020-02-1	Show	GitHub Exploit DB Packet Storm

285818	6.8	MEDIUM Physics	tianocore	edk2	Multiple integer overflows in the Pre-EFI Initialization (PEI) boot phase in the Capsule Update feature in the UEFI implementation in EDK2 allow physically proximate attackers to bypass intended acce…	CWE-190 Integer Overflow or Wraparound	CVE-2014-4860	2024-11-21 11:11	2020-02-1	Show	GitHub Exploit DB Packet Storm

285819	6.8	MEDIUM Physics	tianocore	edk2	Integer overflow in the Drive Execution Environment (DXE) phase in the Capsule Update feature in the UEFI implementation in EDK2 allows physically proximate attackers to bypass intended access restri…	CWE-190 Integer Overflow or Wraparound	CVE-2014-4859	2024-11-21 11:11	2020-02-1	Show	GitHub Exploit DB Packet Storm

285820	9.8	CRITICAL Network	zohocorp	manageengine_desktop_central manageengine_desktop_central_managed_service_providers	Directory traversal vulnerability in the agentLogUploader servlet in ZOHO ManageEngine Desktop Central (DC) and Desktop Central Managed Service Providers (MSP) edition before 9 build 90055 allows rem…	CWE-22 Path Traversal	CVE-2014-5007	2024-11-21 11:11	2020-01-18	Show	GitHub Exploit DB Packet Storm