Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 20, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
251111	5	警告	Broadwin アドバンテック株式会社	-	Advantech/BroadWin WebAccess の uaddUpAdmin.asp における管理者パスワードを変更される脆弱性	CWE-287 不適切な認証	CVE-2012-0239	2012-02-23 11:32	2012-02-21	Show	GitHub Exploit DB Packet Storm

251112	7.5	危険	Broadwin アドバンテック株式会社	-	Advantech/BroadWin WebAccess の opcImg.asp におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2012-0238	2012-02-23 11:29	2012-02-21	Show	GitHub Exploit DB Packet Storm

251113	6.4	警告	Broadwin アドバンテック株式会社	-	Advantech/BroadWin WebAccess における日付と時刻の同期設定を変更される脆弱性	CWE-119 バッファエラー	CVE-2012-0237	2012-02-23 11:27	2012-02-21	Show	GitHub Exploit DB Packet Storm

251114	5	警告	Broadwin アドバンテック株式会社	-	Advantech/BroadWin WebAccess における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2012-0236	2012-02-23 11:23	2012-02-21	Show	GitHub Exploit DB Packet Storm

251115	6	警告	Broadwin アドバンテック株式会社	-	Advantech/BroadWin WebAccess におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2012-0235	2012-02-23 11:22	2012-02-21	Show	GitHub Exploit DB Packet Storm

251116	7.5	危険	Broadwin アドバンテック株式会社	-	Advantech/BroadWin WebAccess における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2012-0234	2012-02-23 11:21	2012-02-21	Show	GitHub Exploit DB Packet Storm

251117	4.3	警告	Broadwin アドバンテック株式会社	-	Advantech/BroadWin WebAccess におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-0233	2012-02-23 11:20	2012-02-21	Show	GitHub Exploit DB Packet Storm

251118	10	危険	Broadwin アドバンテック株式会社	-	Advantech/BroadWin WebAccess の ActiveX コントロールにおけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2011-4526	2012-02-23 11:19	2012-02-21	Show	GitHub Exploit DB Packet Storm

251119	7.5	危険	Broadwin アドバンテック株式会社	-	Advantech/BroadWin WebAccess における任意のコードを実行される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-4525	2012-02-23 11:18	2012-02-21	Show	GitHub Exploit DB Packet Storm

251120	7.5	危険	Broadwin アドバンテック株式会社	-	Advantech/BroadWin WebAccess におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2011-4524	2012-02-23 11:02	2012-02-21	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 20, 2026, 4:14 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
286251	-	cisco	unified_communications_manager	The log4jinit web application in Cisco Unified Communications Manager (UCM) does not properly validate authentication, which allows remote attackers to cause a denial of service (performance degradat…	CWE-287 Improper Authentication	CVE-2014-0722	2024-11-21 11:02	2014-02-13	Show	GitHub Exploit DB Packet Storm

286252	-	adobe	shockwave_player	Adobe Shockwave Player before 12.0.9.149 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2014-0501	2024-11-21 11:02	2014-02-12	Show	GitHub Exploit DB Packet Storm

286253	-	adobe	shockwave_player	Adobe Shockwave Player before 12.0.9.149 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2014-0500	2024-11-21 11:02	2014-02-12	Show	GitHub Exploit DB Packet Storm

286254	-	ibm	lotus_domino	The IMAP server in IBM Domino 8.5.x before 8.5.3 FP6 IF1 and 9.0.x before 9.0.1 FP1 allows remote attackers to cause a denial of service (daemon crash) via unspecified vectors, aka SPR KLYH9F4S2Z.	NVD-CWE-noinfo	CVE-2014-0822	2024-11-21 11:02	2014-02-7	Show	GitHub Exploit DB Packet Storm

286255	-	opera	opera_browser	The intent: URL implementation in Opera before 18 on Android allows attackers to read local files by leveraging an interaction error, as demonstrated by reading stored cookies.	CWE-200 Information Exposure	CVE-2014-0815	2024-11-21 11:02	2014-02-7	Show	GitHub Exploit DB Packet Storm

286256	-	emc	documentum_foundation_services	The web service in EMC Documentum Foundation Services (DFS) 6.5 through 6.7 before 6.7 SP1 P22, 6.7 SP2 before P08, 7.0 before P12, and 7.1 before P01 does not properly implement content uploading, w…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2014-0622	2024-11-21 11:02	2014-02-7	Show	GitHub Exploit DB Packet Storm

286257	-	rockwellautomation	rslogix_5000_design_and_configuration_software	Rockwell Automation RSLogix 5000 7 through 20.01, and 21.0, does not properly implement password protection for .ACD files (aka project files), which allows local users to obtain sensitive informatio…	CWE-255 Credentials Management	CVE-2014-0755	2024-11-21 11:02	2014-02-5	Show	GitHub Exploit DB Packet Storm

286258	-	ibm	general_parallel_file_system	IBM General Parallel File System (GPFS) 3.4 through 3.4.0.27 and 3.5 through 3.5.0.16 allows attackers to cause a denial of service (daemon crash) via crafted arguments to a setuid program.	CWE-20 Improper Input Validation	CVE-2014-0834	2024-11-21 11:02	2014-02-4	Show	GitHub Exploit DB Packet Storm

286259	-	cisco	unified_communications_manager	Cisco Unified Communications Manager (aka Unified CM) 9.1 (2.10000.28) and earlier allows local users to gain privileges by leveraging incorrect file permissions, aka Bug IDs CSCul24917 and CSCul2490…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2014-0686	2024-11-21 11:02	2014-02-4	Show	GitHub Exploit DB Packet Storm

286260	-	ibm	financial_transaction_manager	The OAC component in IBM Financial Transaction Manager (FTM) 2.0 before 2.0.0.3 does not properly enforce operator-intervention requirements, which allows remote authenticated users to bypass intende…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2014-0833	2024-11-21 11:02	2014-02-2	Show	GitHub Exploit DB Packet Storm