Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 19, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
251261 4.3 警告 OETIKER - Smokeping の smokeping_cgi におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-0790 2012-01-27 11:03 2012-01-24 Show GitHub Exploit DB Packet Storm
251262 4.3 警告 MailEnable - MailEnable の ForgottenPassword.aspx におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-0389 2012-01-27 11:01 2012-01-24 Show GitHub Exploit DB Packet Storm
251263 7.5 危険 Batavi - Batavi の ajax.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2012-0069 2012-01-27 10:55 2012-01-24 Show GitHub Exploit DB Packet Storm
251264 10 危険 日立 - 日立の複数の COBOL2002 製品における任意のコードを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2012-0918 2012-01-26 16:54 2012-01-20 Show GitHub Exploit DB Packet Storm
251265 4.3 警告 日立 - Hitachi IT Operations Director におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-0919 2012-01-26 16:53 2012-01-10 Show GitHub Exploit DB Packet Storm
251266 4.3 警告 日立 - Hitachi IT Operations Analyzer におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-0917 2012-01-26 16:49 2012-01-10 Show GitHub Exploit DB Packet Storm
251267 7.5 危険 Google - Google Chrome で使用される Skia におけるサービス運用妨害 (DoS) の脆弱性 CWE-DesignError
CVE-2011-3927 2012-01-25 16:09 2012-01-23 Show GitHub Exploit DB Packet Storm
251268 7.5 危険 Google - Google Chrome の Safe Browsing 機能におけるサービス運用妨害 (ヒープメモリ破損) の脆弱性 CWE-399
リソース管理の問題 		CVE-2011-3925 2012-01-25 16:07 2012-01-23 Show GitHub Exploit DB Packet Storm
251269 4.3 警告 SimpleSAMLphp - SimpleSAMLphp の modules/core/www/no_cookie.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-0040 2012-01-25 14:16 2012-01-24 Show GitHub Exploit DB Packet Storm
251270 7.5 危険 Stoneware - Stoneware webNetwork における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2012-0912 2012-01-25 14:15 2012-01-23 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 19, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
290431 7.5 HIGH
Network 		cryptocat_project cryptocat Cryptocat before 2.0.22 Chrome Extension 'img/keygen.gif' has Information Disclosure CWE-200
Information Exposure 		CVE-2013-2261 2024-11-21 10:51 2019-11-5 Show GitHub Exploit DB Packet Storm
290432 5.9 MEDIUM
Network 		redhat
openstack
debian 		openstack
compute
keystone
debian_linux 		HTTPSConnections in OpenStack Keystone 2013, OpenStack Compute 2013.1, and possibly other OpenStack components, fail to validate server-side SSL certificates. CWE-295
Improper Certificate Validation  		CVE-2013-2255 2024-11-21 10:51 2019-11-2 Show GitHub Exploit DB Packet Storm
290433 7.5 HIGH
Network 		glpi-project
debian 		glpi
debian_linux 		GLPI 0.83.7 has Local File Inclusion in common.tabs.php. CWE-20
 Improper Input Validation  		CVE-2013-2227 2024-11-21 10:51 2019-11-2 Show GitHub Exploit DB Packet Storm
290434 5.3 MEDIUM
Network 		mambo-foundation mambo_cms A vulnerability in Mambo CMS v4.6.5 where the scripts thumbs.php, editorFrame.php, editor.php, images.php, manager.php discloses the root path of the webserver. CWE-22
Path Traversal 		CVE-2013-2565 2024-11-21 10:51 2019-02-16 Show GitHub Exploit DB Packet Storm
290435 8.8 HIGH
Network 		fileutils_project fileutils Vulnerability in FileUtils v0.7, Ruby Gem Fileutils <= v0.7 Command Injection vulnerability in user supplied url variable that is passed to the shell. CWE-77
Command Injection 		CVE-2013-2516 2024-11-21 10:51 2019-02-16 Show GitHub Exploit DB Packet Storm
290436 7.4 HIGH
Network 		redhat ansible Ansible before 1.2.1 makes it easier for remote attackers to conduct man-in-the-middle attacks by leveraging failure to cache SSH host keys. CWE-320
 Key Management Errors 		CVE-2013-2233 2024-11-21 10:51 2018-05-5 Show GitHub Exploit DB Packet Storm
290437 - sixapart movable_type Movable Type before 5.2.6 does not properly use the Storable::thaw function, which allows remote attackers to execute arbitrary code via the comment_state parameter. CWE-17
Code 		CVE-2013-2184 2024-11-21 10:51 2015-03-27 Show GitHub Exploit DB Packet Storm
290438 - rrdtool_project rrdtool Format string vulnerability in the rrdtool module 1.4.7 for Python, as used in Zenoss, allows context-dependent attackers to cause a denial of service (crash) via format string specifiers to the rrdt… CWE-134
Use of Externally-Controlled Format String 		CVE-2013-2131 2024-11-21 10:51 2015-01-5 Show GitHub Exploit DB Packet Storm
290439 - gentoo portage The urlopen function in pym/portage/util/_urlopen.py in Gentoo Portage 2.1.12, when using HTTPS, does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof… CWE-310
Cryptographic Issues 		CVE-2013-2100 2024-11-21 10:51 2014-09-30 Show GitHub Exploit DB Packet Storm
290440 - monkey-project monkey The Mandril security plugin in Monkey HTTP Daemon (monkeyd) before 1.5.0 allows remote attackers to bypass access restrictions via a crafted URI, as demonstrated by an encoded forward slash. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2013-2182 2024-11-21 10:51 2014-06-13 Show GitHub Exploit DB Packet Storm