Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 21, 2026, 6:01 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
251611 2.6 注意 Acidcat - Acidcat CMS におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-0933 2012-02-1 11:01 2012-01-29 Show GitHub Exploit DB Packet Storm
251612 5.8 警告 Lead Capture Page System - Lead Capture Page System におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-0932 2012-02-1 11:00 2012-01-29 Show GitHub Exploit DB Packet Storm
251613 7.8 危険 Schneider Electric - Schneider Electric Modicon Quantum PLC におけるサービス運用妨害 (DoS) の脆弱性 CWE-287
不適切な認証
CVE-2012-0931 2012-02-1 10:08 2012-01-20 Show GitHub Exploit DB Packet Storm
251614 4.3 警告 Schneider Electric - Schneider Electric Modicon Quantum PLC におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-0930 2012-02-1 10:05 2012-01-20 Show GitHub Exploit DB Packet Storm
251615 7.8 危険 Schneider Electric - Schneider Electric Modicon Quantum PLC におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2012-0929 2012-02-1 10:04 2012-01-20 Show GitHub Exploit DB Packet Storm
251616 7.2 危険 Linux - Linux kernel の hfs_mac2asc 関数におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2011-4330 2012-01-31 16:45 2011-11-14 Show GitHub Exploit DB Packet Storm
251617 6.9 警告 Linux - Linux kernel の xfs_readlink 関数におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2011-4077 2012-01-31 16:19 2012-01-27 Show GitHub Exploit DB Packet Storm
251618 2.1 注意 Linux - Linux kernel におけるサービス運用妨害 (NULL ポインタデリファレンスおよび OOPS) の脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2011-2203 2012-01-31 16:15 2012-01-27 Show GitHub Exploit DB Packet Storm
251619 2.1 注意 Linux - Linux kernel の tpm_read 関数 における TPM コマンドの結果を読まれる脆弱性 CWE-200
情報漏えい
CVE-2011-1162 2012-01-31 16:13 2012-01-27 Show GitHub Exploit DB Packet Storm
251620 6.9 警告 Linux - Linux kernel の mem_write 関数における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-0056 2012-01-31 11:27 2012-01-17 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 21, 2026, 4:10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
282661 - netfortris trixbox Cross-site scripting (XSS) vulnerability in user/help/html/index.php in Fonality trixbox allows remote attackers to inject arbitrary web script or HTML via the id_nodo parameter. CWE-79
Cross-site Scripting
CVE-2014-5110 2024-11-21 11:11 2014-07-29 Show GitHub Exploit DB Packet Storm
282662 - netfortris trixbox SQL injection vulnerability in maint/modules/endpointcfg/endpoint_generic.php in Fonality trixbox allows remote attackers to execute arbitrary SQL commands via the mac parameter in a Submit action. CWE-89
SQL Injection
CVE-2014-5109 2024-11-21 11:11 2014-07-29 Show GitHub Exploit DB Packet Storm
282663 - concrete5
concretecms
concrete5
concrete_cms
Cross-site scripting (XSS) vulnerability in single_pages\download_file.php in concrete5 before 5.6.3 allows remote attackers to inject arbitrary web script or HTML via the HTTP Referer header to inde… CWE-79
Cross-site Scripting
CVE-2014-5108 2024-11-21 11:11 2014-07-29 Show GitHub Exploit DB Packet Storm
282664 - concrete5
concretecms
concrete5
concrete_cms
concrete5 before 5.6.3 allows remote attackers to obtain the installation path via a direct request to (1) system/basics/editor.php, (2) system/view.php, (3) system/environment/file_storage_locations… CWE-200
Information Exposure
CVE-2014-5107 2024-11-21 11:11 2014-07-29 Show GitHub Exploit DB Packet Storm
282665 - invisioncommunity invision_power_board Cross-site scripting (XSS) vulnerability in Invision Power IP.Board (aka IPB or Power Board) 3.4.x through 3.4.6 allows remote attackers to inject arbitrary web script or HTML via the HTTP Referer he… CWE-79
Cross-site Scripting
CVE-2014-5106 2024-11-21 11:11 2014-07-29 Show GitHub Exploit DB Packet Storm
282666 - ol-commerce_project ol-commerce Multiple cross-site scripting (XSS) vulnerabilities in ol-commerce 2.1.1 allow remote attackers to inject arbitrary web script or HTML via the (1) a_country parameter in a process action to affiliate… CWE-79
Cross-site Scripting
CVE-2014-5105 2024-11-21 11:11 2014-07-29 Show GitHub Exploit DB Packet Storm
282667 - ol-commerce_project ol-commerce Multiple SQL injection vulnerabilities in ol-commerce 2.1.1 allow remote attackers to execute arbitrary SQL commands via the (1) a_country parameter in a process action to affiliate_signup.php, (2) a… CWE-89
SQL Injection
CVE-2014-5104 2024-11-21 11:11 2014-07-29 Show GitHub Exploit DB Packet Storm
282668 - microsoft windows_xp Microsoft Windows XP SP3 does not validate addresses in certain IRP handler routines, which allows local users to write data to arbitrary memory locations, and consequently gain privileges, via a cra… CWE-20
 Improper Input Validation 
CVE-2014-4971 2024-11-21 11:11 2014-07-27 Show GitHub Exploit DB Packet Storm
282669 - apple quicktime Apple QuickTime allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a malformed version number and flags in an mvhd atom. CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2014-4979 2024-11-21 11:11 2014-07-26 Show GitHub Exploit DB Packet Storm
282670 - sabreairlinesolutions crew_management
crew_services
crew_training
crew_operations
crew_planning
Multiple SQL injection vulnerabilities in CWPLogin.aspx in Sabre AirCentre Crew products 2010.2.12.20008 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) username or (… CWE-89
SQL Injection
CVE-2014-4858 2024-11-21 11:11 2014-07-26 Show GitHub Exploit DB Packet Storm