Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 27, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
216191	7.5	危険	アップル	-	Apple iOS のサンドボックスプロファイルサブシステムにおけるバイナリ実行の制限を回避される脆弱性脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2014-4457	2014-11-19 16:45	2014-11-17	Show	GitHub Exploit DB Packet Storm

216192	5	警告	アップル	-	Apple iOS および Mac OS X における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2014-4453	2014-11-19 16:44	2014-11-17	Show	GitHub Exploit DB Packet Storm

216193	7.2	危険	アップル	-	Apple iOS におけるロック画面の保護メカニズムを回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2014-4451	2014-11-19 16:43	2014-11-17	Show	GitHub Exploit DB Packet Storm

216194	7.5	危険	MantisBT Group	-	MantisBT の XmlImportExport プラグインにおける任意の PHP コードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2014-7146	2014-11-19 16:28	2014-11-1	Show	GitHub Exploit DB Packet Storm

216195	5	警告	シスコシステムズ	-	Cisco IOS の DLSw の実装におけるプロセスメモリから重要な認証情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2014-7992	2014-11-19 15:41	2014-11-18	Show	GitHub Exploit DB Packet Storm

216196	2.1	注意	IBM	-	IBM Security Identity Manager におけるセッションにアクセスされる脆弱性	CWE-Other その他	CVE-2014-6110	2014-11-19 15:32	2014-11-13	Show	GitHub Exploit DB Packet Storm

216197	4.3	警告	IBM	-	IBM Security Identity Manager における重要な Cookie 情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2014-6107	2014-11-19 15:31	2014-11-13	Show	GitHub Exploit DB Packet Storm

216198	4.3	警告	IBM	-	IBM Security Identity Manager におけるクリックジャッキング攻撃を実行される脆弱性	CWE-20 不適切な入力確認	CVE-2014-6105	2014-11-19 15:31	2014-11-13	Show	GitHub Exploit DB Packet Storm

216199	5	警告	IBM	-	IBM Security Identity Manager における平文のパスワードを取得される脆弱性	CWE-255 証明書・パスワード管理	CVE-2014-6098	2014-11-19 15:31	2014-11-13	Show	GitHub Exploit DB Packet Storm

216200	4.3	警告	IBM	-	IBM Security Identity Manager におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2014-6096	2014-11-19 15:30	2014-11-13	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 27, 2026, 4:52 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
294651	7.5	HIGH Network	freebsd netbsd	freebsd netbsd	The IPv6 implementation in FreeBSD and NetBSD (unknown versions, year 2012 and earlier) allows remote attackers to cause a denial of service via a flood of ICMPv6 Neighbor Solicitation messages, a di…	CWE-400 Uncontrolled Resource Consumption	CVE-2012-5363	2024-11-21 10:44	2020-02-21	Show	GitHub Exploit DB Packet Storm

294652	7.5	HIGH Network	microsoft	windows_7 windows_vista windows_xp windows_server_2003	The IPv6 implementation in Microsoft Windows 7 and earlier allows remote attackers to cause a denial of service via a flood of ICMPv6 Neighbor Solicitation messages, a different vulnerability than CV…	CWE-400 Uncontrolled Resource Consumption	CVE-2012-5362	2024-11-21 10:44	2020-02-21	Show	GitHub Exploit DB Packet Storm

294653	7.5	HIGH Network	squirrelmail	change_passwd	Squirrelmail 4.0 uses the outdated MD5 hash algorithm for passwords.	CWE-327 Use of a Broken or Risky Cryptographic Algorithm	CVE-2012-5623	2024-11-21 10:44	2020-02-14	Show	GitHub Exploit DB Packet Storm

294654	4.3	MEDIUM Network	basic_webmail_project	basic_webmail	The Basic webmail module 6.x-1.x before 6.x-1.2 for Drupal allows remote authenticated users with the "access basic_webmail" permission to read arbitrary users' email addresses.	CWE-200 Information Exposure	CVE-2012-5570	2024-11-21 10:44	2020-02-9	Show	GitHub Exploit DB Packet Storm

294655	9.8	CRITICAL Network	ushahidi	ushahidi	Ushahidi before 2.6.1 has insufficient entropy for forgot-password tokens.	CWE-640 Weak Password Recovery Mechanism for Forgotten Password	CVE-2012-5618	2024-11-21 10:44	2020-02-4	Show	GitHub Exploit DB Packet Storm

294656	7.5	HIGH Network	dart	powertcp_webserver_for_activex	NULL Pointer Dereference in PowerTCP WebServer for ActiveX 1.9.2 and earlier allows remote attackers to cause a denial of service (application crash) via a crafted HTTP request.	CWE-476 NULL Pointer Dereference	CVE-2012-5389	2024-11-21 10:44	2020-01-24	Show	GitHub Exploit DB Packet Storm

294657	7.8	HIGH Local	sumatrapdfreader artifex	sumatrapdf mupdf	SumatraPDF 2.1.1/MuPDF 1.0 allows remote attackers to cause an Integer Overflow in the lex_number() function via a corrupt PDF file.	CWE-190 Integer Overflow or Wraparound	CVE-2012-5340	2024-11-21 10:44	2020-01-24	Show	GitHub Exploit DB Packet Storm

294658	7.5	HIGH Network	redhat	jboss_operations_network jboss_enterprise_web_server jboss_enterprise_application_platform jboss_brms jboss_soa_platform jboss_portal	EJB method in Red Hat JBoss BRMS 5; Red Hat JBoss Enterprise Application Platform 5; Red Hat JBoss Operations Network 3.1; Red Hat JBoss Portal 4 and 5; Red Hat JBoss SOA Platform 4.2, 4.3, and 5; in…	NVD-CWE-noinfo	CVE-2012-5626	2024-11-21 10:44	2020-01-24	Show	GitHub Exploit DB Packet Storm

294659	9.8	CRITICAL Network	accusoft	prizm_content_connect	Prizm Content Connect 5.1 has an Arbitrary File Upload Vulnerability	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2012-5190	2024-11-21 10:44	2020-01-22	Show	GitHub Exploit DB Packet Storm

294660	4.8	MEDIUM Network	smileys_project smiley_project	smileys smiley	Cross-site scripting (XSS) vulnerability in the Smiley module 6.x-1.x versions prior to 6.x-1.1 and Smileys module 6.x-1.x versions prior to 6.x-1.1 for Drupal allows remote authenticated users with …	CWE-79 Cross-site Scripting	CVE-2012-5558	2024-11-21 10:44	2020-01-10	Show	GitHub Exploit DB Packet Storm