Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 25, 2026, 2:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
216031 5 警告 シスコシステムズ - Cisco Unified Communications Manager IM and Presence Service におけるユーザアカウントを列挙される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2014-8000 2014-11-25 15:30 2014-11-19 Show GitHub Exploit DB Packet Storm
216032 4 警告 TIBCO Software - 複数の TIBCO Spotfire 製品の TIBCO Spotfire Web Player における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2014-7195 2014-11-25 14:50 2014-11-12 Show GitHub Exploit DB Packet Storm
216033 6.4 警告 TIBCO Software - 複数の TIBCO 製品における重要な情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2014-7194 2014-11-25 14:49 2014-10-29 Show GitHub Exploit DB Packet Storm
216034 4 警告 IBM - XGS デバイス上で稼働する IBM Security Network Protection における任意のコマンドを実行される脆弱性 CWE-399
リソース管理の問題 		CVE-2014-6183 2014-11-25 14:07 2014-11-19 Show GitHub Exploit DB Packet Storm
216035 4 警告 IBM - IBM Sterling Selling and Fulfillment Suite の Sterling Order Management におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2014-4807 2014-11-25 14:07 2014-11-20 Show GitHub Exploit DB Packet Storm
216036 4.3 警告 GoGits - Gogs の models/issue.go におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-8683 2014-11-25 12:02 2014-11-19 Show GitHub Exploit DB Packet Storm
216037 7.5 危険 GoGits - Gogs における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2014-8682 2014-11-25 12:01 2014-11-19 Show GitHub Exploit DB Packet Storm
216038 7.5 危険 GoGits - Gogs の models/issue.go の GetIssues 関数における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2014-8681 2014-11-25 12:01 2014-11-19 Show GitHub Exploit DB Packet Storm
216039 4 警告 Ubercart - Drupal 用 Ubercart モジュールにおける重要な情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2014-9026 2014-11-21 19:08 2014-09-10 Show GitHub Exploit DB Packet Storm
216040 5 警告 Commerce Guys - Drupal 用 Drupal Commerce モジュールにおける重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2014-9025 2014-11-21 19:08 2014-09-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 25, 2026, 4:01 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
294281 - mariadb
oracle 		mariadb
mysql 		MySQL 5.5.19 and possibly other versions, and MariaDB 5.5.28a and possibly other versions, when configured to assign the FILE privilege to users who should not have administrative privileges, allows … CWE-16
Configuration 		CVE-2012-5613 2024-11-21 10:44 2012-12-3 Show GitHub Exploit DB Packet Storm
294282 - mariadb
oracle
suse
canonical 		mariadb
mysql
linux_enterprise_desktop
linux_enterprise_server
linux_enterprise_software_development_kit
ubuntu_linux 		Heap-based buffer overflow in Oracle MySQL 5.5.19 and other versions through 5.5.28, and MariaDB 5.5.28a and possibly other versions, allows remote authenticated users to cause a denial of service (m… CWE-787
 Out-of-bounds Write 		CVE-2012-5612 2024-11-21 10:44 2012-12-3 Show GitHub Exploit DB Packet Storm
294283 - apache
opensuse 		tomcat
opensuse 		Apache Tomcat through 7.0.x allows remote attackers to cause a denial of service (daemon outage) via partial HTTP requests, as demonstrated by Slowloris. NVD-CWE-noinfo
CVE-2012-5568 2024-11-21 10:44 2012-12-1 Show GitHub Exploit DB Packet Storm
294284 - kyocera ah-k3001v
xw300k
xw320kr
xw320k
xw310k
ah-k3002v 		The KYOCERA AH-K3001V, AH-K3002V, WX300K, WX310K, WX320K, and WX320KR devices allow remote attackers to cause a denial of service (persistent reboot) via an e-mail message in an invalid format. NVD-CWE-noinfo
CVE-2012-5174 2024-11-21 10:44 2012-11-30 Show GitHub Exploit DB Packet Storm
294285 - sgi performance_co-pilot The (1) pcmd and (2) pmlogger init scripts in Performance Co-Pilot (PCP) before 3.6.10 allow local users to overwrite arbitrary files via a symlink attack on a /var/tmp/##### temporary file. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2012-5530 2024-11-21 10:44 2012-11-29 Show GitHub Exploit DB Packet Storm
294286 - oracle jdk
jre
openjdk 		Oracle Java SE 7 and earlier, and OpenJDK 7 and earlier, computes hash values without properly restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers… CWE-310
Cryptographic Issues 		CVE-2012-5373 2024-11-21 10:44 2012-11-28 Show GitHub Exploit DB Packet Storm
294287 - rubinius rubinius Rubinius computes hash values without properly restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) … CWE-310
Cryptographic Issues 		CVE-2012-5372 2024-11-21 10:44 2012-11-28 Show GitHub Exploit DB Packet Storm
294288 - ruby-lang ruby Ruby (aka CRuby) 1.9 before 1.9.3-p327 and 2.0 before r37575 computes hash values without properly restricting the ability to trigger hash collisions predictably, which allows context-dependent attac… CWE-310
Cryptographic Issues 		CVE-2012-5371 2024-11-21 10:44 2012-11-28 Show GitHub Exploit DB Packet Storm
294289 - jruby jruby JRuby computes hash values without properly restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via… CWE-310
Cryptographic Issues 		CVE-2012-5370 2024-11-21 10:44 2012-11-28 Show GitHub Exploit DB Packet Storm
294290 - google
opensuse 		chrome
opensuse 		Google Chrome before 23.0.1271.91 does not properly perform a cast of an unspecified variable during handling of the INPUT element, which allows remote attackers to cause a denial of service or possi… CWE-20
 Improper Input Validation  		CVE-2012-5136 2024-11-21 10:44 2012-11-28 Show GitHub Exploit DB Packet Storm