Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 3, 2026, 6:08 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
209231 5 警告 The PHP Group
アップル
file project
- PHP の Fileinfo コンポーネントで使用される file の softmagic.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2014-9652 2015-10-6 10:34 2014-11-10 Show GitHub Exploit DB Packet Storm
209232 7.5 危険 The PHP Group
アップル
- PHP の ext/enchant/enchant.c の enchant_broker_request_dict 関数におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2014-9705 2015-10-6 10:34 2014-12-5 Show GitHub Exploit DB Packet Storm
209233 5 警告 The PHP Group
LibGD project
アップル
- PHP で使用される LibGD の gd_gif_in.c 内の GetCode_ 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2014-9709 2015-10-6 10:34 2014-12-13 Show GitHub Exploit DB Packet Storm
209234 7.5 危険 The PHP Group
アップル
- PHP の CGI コンポーネントの sapi/cgi/cgi_main.c における php-cgi プロセスメモリから重要な情報を取得される脆弱性 CWE-119
バッファエラー
CVE-2014-9427 2015-10-6 10:33 2014-12-30 Show GitHub Exploit DB Packet Storm
209235 7.5 危険 The PHP Group
アップル
- PHP の Zend Engine の zend_ts_hash.c の zend_ts_hash_graceful_destroy 関数におけるメモリ二重解放の脆弱性 CWE-Other
その他
CVE-2014-9425 2015-10-6 10:33 2014-12-29 Show GitHub Exploit DB Packet Storm
209236 5 警告 アップル
Ruby-lang.org
- Ruby の REXML パーサにおけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2014-8090 2015-10-6 10:33 2014-11-13 Show GitHub Exploit DB Packet Storm
209237 5 警告 アップル
Ruby-lang.org
- Ruby の REXML パーサにおけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2014-8080 2015-10-6 10:33 2014-10-27 Show GitHub Exploit DB Packet Storm
209238 7.5 危険 アップル
Canonical
procmail project
- Procmail の formail の formisc.c におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2014-3618 2015-10-6 10:33 2014-09-4 Show GitHub Exploit DB Packet Storm
209239 4.3 警告 アップル
HTACG
- tidy の lexer.c の ParseValue 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2015-5523 2015-10-6 10:26 2015-06-4 Show GitHub Exploit DB Packet Storm
209240 6.8 警告 アップル
HTACG
- tidy の lexer.c の ParseValue 関数におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2015-5522 2015-10-6 10:26 2015-06-4 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 3, 2026, 4:18 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
297831 - cisco unified_computing_system MCTools in the Cisco Management Controller in Cisco Unified Computing System (UCS) allows local users to gain privileges by entering crafted command-line parameters on a Fabric Interconnect device, a… CWE-20
 Improper Input Validation 
CVE-2012-4082 2024-11-21 10:42 2013-09-21 Show GitHub Exploit DB Packet Storm
297832 - cisco unified_computing_system MCServer in the Cisco Management Controller in Cisco Unified Computing System (UCS) allows local users to cause a denial of service (application crash) via invalid MCTools parameters, aka Bug ID CSCt… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2012-4081 2024-11-21 10:42 2013-09-21 Show GitHub Exploit DB Packet Storm
297833 - cisco unified_computing_system The Manager component in Cisco Unified Computing System (UCS) allows local users to cause a denial of service via an invalid Smart Call Home contact address, aka Bug ID CSCtl00186. CWE-20
 Improper Input Validation 
CVE-2012-4093 2024-11-21 10:42 2013-09-21 Show GitHub Exploit DB Packet Storm
297834 - cisco unified_computing_system Multiple buffer overflows in the administrative web interface in Cisco Unified Computing System (UCS) allow remote authenticated users to cause a denial of service (memory corruption and session term… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2012-4083 2024-11-21 10:42 2013-09-21 Show GitHub Exploit DB Packet Storm
297835 - cisco unified_computing_system The Board Management Controller (BMC) in the Serial over LAN (SoL) subsystem in Cisco Unified Computing System (UCS) relies on a hardcoded private key, which allows man-in-the-middle attackers to obt… CWE-255
Credentials Management
CVE-2012-4074 2024-11-21 10:42 2013-09-21 Show GitHub Exploit DB Packet Storm
297836 - cisco unified_computing_system The KVM subsystem in the client in Cisco Unified Computing System (UCS) does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers, and read or mod… CWE-310
Cryptographic Issues
CVE-2012-4073 2024-11-21 10:42 2013-09-21 Show GitHub Exploit DB Packet Storm
297837 - cisco unified_computing_system The KVM subsystem in Cisco Unified Computing System (UCS) relies on a hardcoded X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers, and read keyboard and mouse events, b… CWE-20
 Improper Input Validation 
CVE-2012-4072 2024-11-21 10:42 2013-09-21 Show GitHub Exploit DB Packet Storm
297838 - eucalyptus eucalyptus Walrus in Eucalyptus before 3.2.2 allows remote attackers to cause a denial of service (memory, thread, and CPU consumption) via a crafted XML message containing a DTD, as demonstrated by a bucket-lo… CWE-399
 Resource Management Errors
CVE-2012-4067 2024-11-21 10:42 2013-09-17 Show GitHub Exploit DB Packet Storm
297839 - ruby-lang ruby The safe-level feature in Ruby 1.8.7 allows context-dependent attackers to modify strings via the NameError#to_s method when operating on Ruby objects. NOTE: this issue is due to an incomplete fix f… CWE-264
Permissions, Privileges, and Access Controls
CVE-2012-4481 2024-11-21 10:42 2013-05-2 Show GitHub Exploit DB Packet Storm
297840 - ruby-lang ruby Ruby 1.8.7 before patchlevel 371, 1.9.3 before patchlevel 286, and 2.0 before revision r37068 allows context-dependent attackers to bypass safe-level restrictions and modify untainted strings via the… CWE-264
Permissions, Privileges, and Access Controls
CVE-2012-4466 2024-11-21 10:42 2013-04-26 Show GitHub Exploit DB Packet Storm