Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 17, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
216131 5.4 警告 Avira - Android 用 Avira Secure Backup アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-5576 2014-09-18 16:57 2014-09-3 Show GitHub Exploit DB Packet Storm
216132 5.4 警告 Banque Internationale Arabe de Tunisie - Android 用 BIATNET アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-5586 2014-09-18 16:57 2014-09-3 Show GitHub Exploit DB Packet Storm
216133 5.4 警告 Domino Labs - Android 用 Like4Like: Get Instagram Likes アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-5585 2014-09-18 16:57 2014-09-3 Show GitHub Exploit DB Packet Storm
216134 5.4 警告 Appstros Inc - Android 用 Appstros - FREE Gift Cards! アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-5573 2014-09-18 16:57 2014-09-3 Show GitHub Exploit DB Packet Storm
216135 5.4 警告 Marijn Ouwehand - Android 用 Jazzpodium De Tor アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-5572 2014-09-18 16:57 2014-09-3 Show GitHub Exploit DB Packet Storm
216136 3.5 注意 Yealink - Yealink VOIP Phone の Local Phone ブックおよびブラックリストにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-1417 2014-09-18 14:54 2012-02-29 Show GitHub Exploit DB Packet Storm
216137 4.3 警告 EPiServer
Euroling AB.		 - EPiServer 用 Euroling SiteSeeker モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-1032 2014-09-18 14:53 2012-04-4 Show GitHub Exploit DB Packet Storm
216138 7.1 危険 DELL EMC (旧 EMC Corporation) - EMC Documentum Content Server におけるスーパーユーザ権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2014-4622 2014-09-18 13:54 2014-09-15 Show GitHub Exploit DB Packet Storm
216139 8.5 危険 DELL EMC (旧 EMC Corporation) - EMC Documentum Content Server におけるシステムオブジェクト作成用のスーパーユーザ権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2014-4621 2014-09-18 13:53 2014-09-15 Show GitHub Exploit DB Packet Storm
216140 10 危険 マイクロソフト
アドビシステムズ
Google		 - Adobe Flash Player および Adobe AIR におけるアクセス制限を回避される脆弱性 CWE-noinfo
情報不足 		CVE-2014-0554 2014-09-17 17:44 2014-09-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 17, 2026, 4:15 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
293911 - bestpractical rt Cross-site request forgery (CSRF) vulnerability in Request Tracker (RT) 3.8.12 and other versions before 3.8.15, and 4.0.6 and other versions before 4.0.8, allows remote attackers to hijack the authe… CWE-352
 Origin Validation Error 		CVE-2012-4732 2024-11-21 10:43 2012-11-11 Show GitHub Exploit DB Packet Storm
293912 - bestpractical rtfm FAQ manager for Request Tracker (RTFM) before 2.4.5 does not properly check user rights, which allows remote authenticated users to create arbitrary articles in arbitrary classes via unknown vectors. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2012-4731 2024-11-21 10:43 2012-11-11 Show GitHub Exploit DB Packet Storm
293913 - bestpractical rt Request Tracker (RT) 3.8.x before 3.8.15 and 4.0.x before 4.0.8 allows remote authenticated users with ModifySelf or AdminUser privileges to inject arbitrary email headers and conduct phishing attack… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2012-4730 2024-11-21 10:43 2012-11-11 Show GitHub Exploit DB Packet Storm
293914 - openstack image_registry_and_delivery_service_\(glance\)
essex
folsom 		The v1 API in OpenStack Glance Grizzly, Folsom (2012.2), and Essex (2012.1) allows remote authenticated users to delete arbitrary non-protected images via an image deletion request, a different vulne… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2012-4573 2024-11-21 10:43 2012-11-11 Show GitHub Exploit DB Packet Storm
293915 - libtiff
debian
canonical
redhat
opensuse 		libtiff
debian_linux
ubuntu_linux
enterprise_linux_server
enterprise_linux_workstation
enterprise_linux_desktop
enterprise_linux_eus
opensuse 		ppm2tiff does not check the return value of the TIFFScanlineSize function, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted PPM ima… NVD-CWE-Other
CVE-2012-4564 2024-11-21 10:43 2012-11-11 Show GitHub Exploit DB Packet Storm
293916 - drupal drupal The OpenID module in Drupal 7.x before 7.16 allows remote OpenID servers to read arbitrary files via a crafted DOCTYPE declaration in an XRDS file. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2012-4554 2024-11-21 10:43 2012-11-11 Show GitHub Exploit DB Packet Storm
293917 - drupal drupal Drupal 7.x before 7.16 allows remote attackers to obtain sensitive information and possibly re-install Drupal and execute arbitrary PHP code via an external database server, related to "transient con… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2012-4553 2024-11-21 10:43 2012-11-11 Show GitHub Exploit DB Packet Storm
293918 - lars_hjemli cgit Argument injection vulnerability in syntax-highlighting.sh in cgit 9.0.3 and earlier allows remote authenticated users with permissions to add files to execute arbitrary commands via the --plug-in ar… NVD-CWE-Other
CVE-2012-4548 2024-11-21 10:43 2012-11-11 Show GitHub Exploit DB Packet Storm
293919 - opensuse
redhat 		opensuse
icedtea-web 		Off-by-one error in the invoke function in IcedTeaScriptablePluginObject.cc in IcedTea-Web 1.1.x before 1.1.7, 1.2.x before 1.2.2, 1.3.x before 1.3.1, and 1.4.x before 1.4.1 allows remote attackers t… CWE-189
Numeric Errors 		CVE-2012-4540 2024-11-21 10:43 2012-11-11 Show GitHub Exploit DB Packet Storm
293920 - kde kde Use-after-free vulnerability in khtml/rendering/render_replaced.cpp in Konqueror in KDE 4.7.3, when the context menu is shown, allows remote attackers to cause a denial of service (crash) and possibl… CWE-399
 Resource Management Errors 		CVE-2012-4515 2024-11-21 10:43 2012-11-11 Show GitHub Exploit DB Packet Storm