Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 5, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
241981 6.8 警告 Transparent Technologies - Open-Realty CMS におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2012-1112 2012-09-11 09:55 2012-09-6 Show GitHub Exploit DB Packet Storm
241982 4.3 警告 Datemill - Etano におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-1110 2012-09-11 09:53 2012-09-6 Show GitHub Exploit DB Packet Storm
241983 4.3 警告 TagLib - TagLib の ogg/xiphcomment.cpp の parse 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2012-1108 2012-09-11 09:51 2012-09-6 Show GitHub Exploit DB Packet Storm
241984 4.3 警告 TagLib - TagLib の ape/apeproperties.cpp の analyzeCurrent 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足
CVE-2012-1107 2012-09-11 09:50 2012-09-6 Show GitHub Exploit DB Packet Storm
241985 4.3 警告 FreePBX - FreePBX におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-4870 2012-09-11 09:49 2012-03-23 Show GitHub Exploit DB Packet Storm
241986 7.5 危険 FreePBX - FreePBX の recordings/misc/callme_page.php における任意のコマンドを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2012-4869 2012-09-11 09:36 2012-03-23 Show GitHub Exploit DB Packet Storm
241987 7.5 危険 Kunena - Joomla! 用 Kunena コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2012-4868 2012-09-10 16:23 2012-09-6 Show GitHub Exploit DB Packet Storm
241988 5 警告 Vtiger - vtiger CRM におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2012-4867 2012-09-10 16:22 2012-09-6 Show GitHub Exploit DB Packet Storm
241989 6.9 警告 Xtreme RAT - Xtreme RAT における任意のコードを実行される脆弱性 CWE-Other
その他
CVE-2012-4866 2012-09-10 16:21 2012-09-6 Show GitHub Exploit DB Packet Storm
241990 9.3 危険 Oreans Technologies - Oreans Themida におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2012-4865 2012-09-10 16:20 2012-09-6 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 5, 2026, 4:11 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
286081 - alienvault open_source_security_information_management SQL injection vulnerability in the ossim-framework service in AlienVault OSSIM before 4.6.0 allows remote attackers to execute arbitrary SQL commands via the ws_data parameter. CWE-89
SQL Injection
CVE-2014-5159 2024-11-21 11:11 2014-08-21 Show GitHub Exploit DB Packet Storm
286082 - alienvault open_source_security_information_management The (1) av-centerd SOAP service and (2) backup command in the ossim-framework service in AlienVault OSSIM before 4.6.0 allows remote attackers to execute arbitrary commands via unspecified vectors. CWE-94
Code Injection
CVE-2014-5158 2024-11-21 11:11 2014-08-21 Show GitHub Exploit DB Packet Storm
286083 - schrack technik_microcontrol_firmware
technik_microcontrol
Multiple cross-site scripting (XSS) vulnerabilities in the web interface in Schrack Technik microControl with firmware 1.7.0 (937) allow remote attackers to inject arbitrary web script or HTML via th… CWE-79
Cross-site Scripting
CVE-2014-5382 2024-11-21 11:11 2014-08-20 Show GitHub Exploit DB Packet Storm
286084 - owncloud owncloud Directory traversal vulnerability in the routing component in ownCloud Server before 5.0.17 and 6.0.x before 6.0.4 allows remote attackers to include and execute arbitrary local files via a .. (dot d… CWE-22
Path Traversal
CVE-2014-4929 2024-11-21 11:11 2014-08-20 Show GitHub Exploit DB Packet Storm
286085 - bitdefender gravityzone Multiple directory traversal vulnerabilities in Bitdefender GravityZone before 5.1.11.432 allow remote attackers to read arbitrary files via a (1) .. (dot dot) in the id parameter to webservice/CORE/… CWE-22
Path Traversal
CVE-2014-5350 2024-11-21 11:11 2014-08-20 Show GitHub Exploit DB Packet Storm
286086 - baidu spark_browser Stack-based buffer overflow in Baidu Spark Browser 26.5.9999.3511 allows remote attackers to cause a denial of service (application crash) via nested calls to the window.print JavaScript function. CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2014-5349 2024-11-21 11:11 2014-08-20 Show GitHub Exploit DB Packet Storm
286087 - riverbed steelapp_traffic_manager Cross-site scripting (XSS) vulnerability in apps/zxtm/locallog.cgi in Riverbed Stingray (aka SteelApp) Traffic Manager Virtual Appliance 9.6 patchlevel 9620140312 allows remote attackers to inject ar… CWE-79
Cross-site Scripting
CVE-2014-5348 2024-11-21 11:11 2014-08-20 Show GitHub Exploit DB Packet Storm
286088 - disqus disqus_comment_system Multiple cross-site request forgery (CSRF) vulnerabilities in the Disqus Comment System plugin before 2.76 for WordPress allow remote attackers to hijack the authentication of administrators for requ… CWE-352
 Origin Validation Error
CVE-2014-5347 2024-11-21 11:11 2014-08-20 Show GitHub Exploit DB Packet Storm
286089 - disqus disqus_comment_system Multiple cross-site request forgery (CSRF) vulnerabilities in the Disqus Comment System plugin 2.77 for WordPress allow remote attackers to hijack the authentication of administrators for requests th… CWE-352
 Origin Validation Error
CVE-2014-5346 2024-11-21 11:11 2014-08-20 Show GitHub Exploit DB Packet Storm
286090 - disqus disqus_comment_system Cross-site scripting (XSS) vulnerability in upgrade.php in the Disqus Comment System plugin before 2.76 for WordPress allows remote attackers to inject arbitrary web script or HTML via the step param… CWE-79
Cross-site Scripting
CVE-2014-5345 2024-11-21 11:11 2014-08-20 Show GitHub Exploit DB Packet Storm