Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 20, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
215941 7.5 危険 （複数のベンダ） - 複数の NAT-PMP デバイスが WAN 側から操作可能な問題 - - 2014-10-27 14:46 2014-10-23 Show GitHub Exploit DB Packet Storm
215942 4.3 警告 The Jamroom Network - Jamroom の Search モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-5098 2014-10-27 14:43 2014-07-23 Show GitHub Exploit DB Packet Storm
215943 5 警告 Status2K.com - Status2k における設定情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2014-5094 2014-10-27 14:42 2014-06-20 Show GitHub Exploit DB Packet Storm
215944 7.5 危険 Innovative Interfaces Inc. - Innovative vtls-Virtua の web_reports/cgi-bin/InfoStation.cgi のログインにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2014-2081 2014-10-27 14:42 2014-08-22 Show GitHub Exploit DB Packet Storm
215945 4.3 警告 Achievo - Achievo の include.php における クロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-5866 2014-10-27 14:41 2012-12-5 Show GitHub Exploit DB Packet Storm
215946 6.5 警告 Achievo - Achievo の dispatch.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2012-5865 2014-10-27 14:41 2012-12-5 Show GitHub Exploit DB Packet Storm
215947 6.8 警告 dotProject - dotProject における SQL インジェクションの脆弱性 CWE-352
CWE-89
CVE-2012-5701 2014-10-27 14:40 2012-11-15 Show GitHub Exploit DB Packet Storm
215948 5 警告 OSClass - OSClass におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2014-6308 2014-10-27 14:40 2014-09-15 Show GitHub Exploit DB Packet Storm
215949 4.3 警告 OSClass - OSClass におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-6280 2014-10-27 14:39 2014-09-15 Show GitHub Exploit DB Packet Storm
215950 7.5 危険 Banana Dance - Banana Dance におけるSQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2012-5244 2014-10-27 14:39 2012-12-19 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 20, 2026, 4:14 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
293801 - sgi performance_co-pilot The (1) pcmd and (2) pmlogger init scripts in Performance Co-Pilot (PCP) before 3.6.10 allow local users to overwrite arbitrary files via a symlink attack on a /var/tmp/##### temporary file. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2012-5530 2024-11-21 10:44 2012-11-29 Show GitHub Exploit DB Packet Storm
293802 - oracle jdk
jre
openjdk 		Oracle Java SE 7 and earlier, and OpenJDK 7 and earlier, computes hash values without properly restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers… CWE-310
Cryptographic Issues 		CVE-2012-5373 2024-11-21 10:44 2012-11-28 Show GitHub Exploit DB Packet Storm
293803 - rubinius rubinius Rubinius computes hash values without properly restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) … CWE-310
Cryptographic Issues 		CVE-2012-5372 2024-11-21 10:44 2012-11-28 Show GitHub Exploit DB Packet Storm
293804 - ruby-lang ruby Ruby (aka CRuby) 1.9 before 1.9.3-p327 and 2.0 before r37575 computes hash values without properly restricting the ability to trigger hash collisions predictably, which allows context-dependent attac… CWE-310
Cryptographic Issues 		CVE-2012-5371 2024-11-21 10:44 2012-11-28 Show GitHub Exploit DB Packet Storm
293805 - jruby jruby JRuby computes hash values without properly restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via… CWE-310
Cryptographic Issues 		CVE-2012-5370 2024-11-21 10:44 2012-11-28 Show GitHub Exploit DB Packet Storm
293806 - google
opensuse 		chrome
opensuse 		Google Chrome before 23.0.1271.91 does not properly perform a cast of an unspecified variable during handling of the INPUT element, which allows remote attackers to cause a denial of service or possi… CWE-20
 Improper Input Validation  		CVE-2012-5136 2024-11-21 10:44 2012-11-28 Show GitHub Exploit DB Packet Storm
293807 - google
opensuse 		chrome
opensuse 		Use-after-free vulnerability in Google Chrome before 23.0.1271.91 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to printing. CWE-399
 Resource Management Errors 		CVE-2012-5135 2024-11-21 10:44 2012-11-28 Show GitHub Exploit DB Packet Storm
293808 - google
xmlsoft
apple 		chrome
libxml2
iphone_os 		Heap-based buffer underflow in the xmlParseAttValueComplex function in parser.c in libxml2 2.9.0 and earlier, as used in Google Chrome before 23.0.1271.91 and other products, allows remote attackers … CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2012-5134 2024-11-21 10:44 2012-11-28 Show GitHub Exploit DB Packet Storm
293809 - opensuse
google 		opensuse
chrome 		Use-after-free vulnerability in Google Chrome before 23.0.1271.91 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to SVG filters. CWE-416
 Use After Free 		CVE-2012-5133 2024-11-21 10:44 2012-11-28 Show GitHub Exploit DB Packet Storm
293810 - opensuse
google 		opensuse
chrome 		Google Chrome before 23.0.1271.91 allows remote attackers to cause a denial of service (application crash) via a response with chunked transfer coding. NVD-CWE-noinfo
CVE-2012-5132 2024-11-21 10:44 2012-11-28 Show GitHub Exploit DB Packet Storm