Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 25, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
216041 5 警告 Commerce Guys - Drupal 用 Drupal Commerce モジュールにおける重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2014-9025 2014-11-21 19:08 2014-09-10 Show GitHub Exploit DB Packet Storm
216042 7.5 危険 Protected Pages project - Drupal 用 Protected Pages モジュールにおけるパスワード保護を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2014-9024 2014-11-21 19:08 2014-10-9 Show GitHub Exploit DB Packet Storm
216043 5.5 警告 Twilio, Inc. - Drupal 用 Twilio モジュールにおける認証トークンを読まれる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2014-9023 2014-11-21 19:07 2014-09-12 Show GitHub Exploit DB Packet Storm
216044 6.4 警告 Web Component Roles project - Drupal 用 Webform Component Roles モジュールにおける disabled 制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2014-9022 2014-11-21 19:07 2014-11-11 Show GitHub Exploit DB Packet Storm
216045 6.8 警告 ZTE - ZTE ZXDSL 831CII におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2014-9027 2014-11-21 18:28 2014-11-6 Show GitHub Exploit DB Packet Storm
216046 4.3 警告 ZTE - ZTE ZXDSL 831 におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-9021 2014-11-21 18:27 2014-11-6 Show GitHub Exploit DB Packet Storm
216047 4.3 警告 ZTE - ZTE ZXDSL 831 および 831CII の Quick Stats ページにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-9020 2014-11-21 18:27 2014-11-6 Show GitHub Exploit DB Packet Storm
216048 6.8 警告 ZTE - ZTE ZXDSL 831CII におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2014-9019 2014-11-21 18:24 2014-11-6 Show GitHub Exploit DB Packet Storm
216049 4 警告 OpenStack
Canonical		 - OpenStack Image Registry and Delivery Service におけるサービス運用妨害 (DoS) の脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2014-5356 2014-11-21 18:17 2014-05-22 Show GitHub Exploit DB Packet Storm
216050 6.9 警告 Linux - Linux Kernel の Magic Mouse HID ドライバにおけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2014-3181 2014-11-21 18:16 2014-08-27 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 25, 2026, 4:01 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
294281 - mariadb
oracle 		mariadb
mysql 		MySQL 5.5.19 and possibly other versions, and MariaDB 5.5.28a and possibly other versions, when configured to assign the FILE privilege to users who should not have administrative privileges, allows … CWE-16
Configuration 		CVE-2012-5613 2024-11-21 10:44 2012-12-3 Show GitHub Exploit DB Packet Storm
294282 - mariadb
oracle
suse
canonical 		mariadb
mysql
linux_enterprise_desktop
linux_enterprise_server
linux_enterprise_software_development_kit
ubuntu_linux 		Heap-based buffer overflow in Oracle MySQL 5.5.19 and other versions through 5.5.28, and MariaDB 5.5.28a and possibly other versions, allows remote authenticated users to cause a denial of service (m… CWE-787
 Out-of-bounds Write 		CVE-2012-5612 2024-11-21 10:44 2012-12-3 Show GitHub Exploit DB Packet Storm
294283 - apache
opensuse 		tomcat
opensuse 		Apache Tomcat through 7.0.x allows remote attackers to cause a denial of service (daemon outage) via partial HTTP requests, as demonstrated by Slowloris. NVD-CWE-noinfo
CVE-2012-5568 2024-11-21 10:44 2012-12-1 Show GitHub Exploit DB Packet Storm
294284 - kyocera ah-k3001v
xw300k
xw320kr
xw320k
xw310k
ah-k3002v 		The KYOCERA AH-K3001V, AH-K3002V, WX300K, WX310K, WX320K, and WX320KR devices allow remote attackers to cause a denial of service (persistent reboot) via an e-mail message in an invalid format. NVD-CWE-noinfo
CVE-2012-5174 2024-11-21 10:44 2012-11-30 Show GitHub Exploit DB Packet Storm
294285 - sgi performance_co-pilot The (1) pcmd and (2) pmlogger init scripts in Performance Co-Pilot (PCP) before 3.6.10 allow local users to overwrite arbitrary files via a symlink attack on a /var/tmp/##### temporary file. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2012-5530 2024-11-21 10:44 2012-11-29 Show GitHub Exploit DB Packet Storm
294286 - oracle jdk
jre
openjdk 		Oracle Java SE 7 and earlier, and OpenJDK 7 and earlier, computes hash values without properly restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers… CWE-310
Cryptographic Issues 		CVE-2012-5373 2024-11-21 10:44 2012-11-28 Show GitHub Exploit DB Packet Storm
294287 - rubinius rubinius Rubinius computes hash values without properly restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) … CWE-310
Cryptographic Issues 		CVE-2012-5372 2024-11-21 10:44 2012-11-28 Show GitHub Exploit DB Packet Storm
294288 - ruby-lang ruby Ruby (aka CRuby) 1.9 before 1.9.3-p327 and 2.0 before r37575 computes hash values without properly restricting the ability to trigger hash collisions predictably, which allows context-dependent attac… CWE-310
Cryptographic Issues 		CVE-2012-5371 2024-11-21 10:44 2012-11-28 Show GitHub Exploit DB Packet Storm
294289 - jruby jruby JRuby computes hash values without properly restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via… CWE-310
Cryptographic Issues 		CVE-2012-5370 2024-11-21 10:44 2012-11-28 Show GitHub Exploit DB Packet Storm
294290 - google
opensuse 		chrome
opensuse 		Google Chrome before 23.0.1271.91 does not properly perform a cast of an unspecified variable during handling of the INPUT element, which allows remote attackers to cause a denial of service or possi… CWE-20
 Improper Input Validation  		CVE-2012-5136 2024-11-21 10:44 2012-11-28 Show GitHub Exploit DB Packet Storm