Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 24, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
251301 2.6 注意 SquirrelMail Project - SquirrelMail 用プラグイン Autocomplete におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-0323 2012-03-9 12:01 2012-03-9 Show GitHub Exploit DB Packet Storm
251302 10 危険 Goforandroid - Android 用 GO Message Widget アプリケーションにおける詳細不明な脆弱性 CWE-noinfo
情報不足 		CVE-2012-1407 2012-03-9 11:26 2011-03-7 Show GitHub Exploit DB Packet Storm
251303 10 危険 Goforandroid - Android 用 GO Bookmark Widget アプリケーションにおける詳細不明な脆弱性 CWE-noinfo
情報不足 		CVE-2012-1406 2012-03-9 11:24 2011-03-7 Show GitHub Exploit DB Packet Storm
251304 10 危険 Goforandroid - Android 用 GO Note Widget アプリケーションにおける詳細不明な脆弱性 CWE-noinfo
情報不足 		CVE-2012-1405 2012-03-9 11:23 2011-03-7 Show GitHub Exploit DB Packet Storm
251305 10 危険 Goforandroid - Android 用 GO WeiboWidget アプリケーションにおける詳細不明な脆弱性 CWE-noinfo
情報不足 		CVE-2012-1398 2012-03-9 11:22 2012-03-7 Show GitHub Exploit DB Packet Storm
251306 10 危険 Goforandroid - Android 用 GO QQWeiboWidget アプリケーションにおける詳細不明な脆弱性 CWE-noinfo
情報不足 		CVE-2012-1397 2012-03-9 11:16 2012-03-7 Show GitHub Exploit DB Packet Storm
251307 10 危険 Goforandroid - Android 用 GO FBWidget アプリケーションにおける詳細不明な脆弱性 CWE-noinfo
情報不足 		CVE-2012-1396 2012-03-9 11:15 2012-03-7 Show GitHub Exploit DB Packet Storm
251308 10 危険 Goforandroid - Android 用 GO TwiWidget アプリケーションにおける詳細不明な脆弱性 CWE-noinfo
情報不足 		CVE-2012-1395 2012-03-9 11:10 2012-03-7 Show GitHub Exploit DB Packet Storm
251309 10 危険 Goforandroid - Android 用 GO Email Widget アプリケーションにおける詳細不明な脆弱性 CWE-noinfo
情報不足 		CVE-2012-1394 2012-03-9 11:08 2012-03-7 Show GitHub Exploit DB Packet Storm
251310 10 危険 Goforandroid - Android 用 GO SMS Pro アプリケーションにおける詳細不明な脆弱性 CWE-noinfo
情報不足 		CVE-2012-1393 2012-03-9 11:06 2012-03-7 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 24, 2026, 4:05 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
280871 - symantec encryption_management_server
pgp_universal_server 		Symantec PGP Universal Server and Encryption Management Server before 3.3.2 MP7 allow remote authenticated administrators to execute arbitrary shell commands via a crafted command line in a database-… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2014-7288 2024-11-21 11:16 2015-02-1 Show GitHub Exploit DB Packet Storm
280872 - symantec encryption_management_server
pgp_universal_server 		The key-management component in Symantec PGP Universal Server and Encryption Management Server before 3.3.2 MP7 allows remote attackers to trigger unintended content in outbound e-mail messages via a… CWE-74
Injection 		CVE-2014-7287 2024-11-21 11:16 2015-02-1 Show GitHub Exploit DB Packet Storm
280873 - broadcom
symantec 		symantec_critical_system_protection
data_center_security 		SQL injection vulnerability in the management server in Symantec Critical System Protection (SCSP) 5.2.9 before MP6 and Symantec Data Center Security: Server Advanced (SDCS:SA) 6.0.x before 6.0 MP1 a… CWE-89
SQL Injection 		CVE-2014-7289 2024-11-21 11:16 2015-01-22 Show GitHub Exploit DB Packet Storm
280874 - debian mime-support run-mailcap in the Debian mime-support package before 3.52-1+deb7u1 allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a filename. CWE-77
Command Injection 		CVE-2014-7209 2024-11-21 11:16 2015-01-7 Show GitHub Exploit DB Packet Storm
280875 - nyu opensso_integration Open redirect vulnerability in the logon page in NYU OpenSSO Integration 2.1 and earlier for Ex Libris Patron Directory Services (PDS) allows remote attackers to redirect users to arbitrary web sites… NVD-CWE-Other
CVE-2014-7294 2024-11-21 11:16 2015-01-3 Show GitHub Exploit DB Packet Storm
280876 - nyu opensso_integration Cross-site scripting (XSS) vulnerability in the logon page in NYU OpenSSO Integration 2.1 and earlier for Ex Libris Patron Directory Services (PDS) allows remote attackers to inject arbitrary web scr… CWE-79
Cross-site Scripting 		CVE-2014-7293 2024-11-21 11:16 2015-01-3 Show GitHub Exploit DB Packet Storm
280877 - gnome
redhat 		gnome-shell
enterprise_linux_desktop
enterprise_linux_workstation
enterprise_linux_server
enterprise_linux_hpc_node 		GNOME Shell 3.14.x before 3.14.1, when the Screen Lock feature is used, does not limit the aggregate memory consumption of all active PrtSc requests, which allows physically proximate attackers to ex… CWE-399
 Resource Management Errors 		CVE-2014-7300 2024-11-21 11:16 2014-12-26 Show GitHub Exploit DB Packet Storm
280878 - sideway hapi_crumb The Crumb plugin before 3.0.0 for Node.js does not properly restrict token access in situations where a hapi route handler has CORS enabled, which allows remote attackers to obtain sensitive informat… CWE-284
Improper Access Control 		CVE-2014-7193 2024-11-21 11:16 2014-12-25 Show GitHub Exploit DB Packet Storm
280879 - symantec deployment_solution Buffer overflow in AClient in Symantec Deployment Solution 6.9 and earlier on Windows XP and Server 2003 allows local users to gain privileges via unspecified vectors. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2014-7286 2024-11-21 11:16 2014-12-23 Show GitHub Exploit DB Packet Storm
280880 - gparted gparted GParted before 0.15.0 allows local users to execute arbitrary commands with root privileges via shell metacharacters in a crafted filesystem label. CWE-77
Command Injection 		CVE-2014-7208 2024-11-21 11:16 2014-12-20 Show GitHub Exploit DB Packet Storm