Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 18, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
216291 6.8 警告 エンバカデロ・テクノロジーズ - Embarcadero Delphi および C++ Builder の Visual Component Library におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2014-0994 2014-10-8 15:37 2014-09-16 Show GitHub Exploit DB Packet Storm
216292 7.5 危険 xmonad - xmonad-contrib の XMonad.Hooks.DynamicLog モジュールにおける任意のコマンドを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2013-1436 2014-10-8 15:28 2013-07-8 Show GitHub Exploit DB Packet Storm
216293 7.5 危険 Tildeslash Ltd. - M/Monit における他のユーザのパスワードを変更される脆弱性 CWE-255
証明書・パスワード管理 		CVE-2014-6607 2014-10-8 15:10 2014-09-19 Show GitHub Exploit DB Packet Storm
216294 6.8 警告 Tildeslash Ltd. - M/Monit におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2014-6409 2014-10-8 15:03 2014-09-19 Show GitHub Exploit DB Packet Storm
216295 6.8 警告 Jolokia - Jolokia におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2014-0168 2014-10-8 14:56 2014-04-10 Show GitHub Exploit DB Packet Storm
216296 10 危険 オラクル - Oracle Solaris の libXtsol におけるバッファエラーに関する脆弱性 CWE-119
バッファエラー 		CVE-2014-0397 2014-10-8 14:55 2014-06-17 Show GitHub Exploit DB Packet Storm
216297 7.5 危険 Apache Software Foundation - Apache Shiro における認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2014-0074 2014-10-8 14:40 2014-10-1 Show GitHub Exploit DB Packet Storm
216298 3.5 注意 Drupal - Drupal 用 Custom Search モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-7870 2014-10-8 14:30 2014-04-2 Show GitHub Exploit DB Packet Storm
216299 3.5 注意 Drupal - Drupal 用 Context Form Alteration モジュールの設定 UI におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-7869 2014-10-8 14:29 2014-04-29 Show GitHub Exploit DB Packet Storm
216300 4.3 警告 LibVNC - LibVNCServer の libvncserver/rfbserver.c の rfbProcessClientNormalMessage 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-189
数値処理の問題 		CVE-2014-6054 2014-10-8 14:28 2014-08-18 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 19, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
294771 - apple iphone_os Telephony in Apple iOS before 6 uses an SMS message's return address as the displayed sender address, which allows remote attackers to spoof text communication via a message in which the return addre… NVD-CWE-Other
CVE-2012-3744 2024-11-21 10:41 2012-09-21 Show GitHub Exploit DB Packet Storm
294772 - apple iphone_os The System Logs implementation in Apple iOS before 6 does not restrict /var/log access by sandboxed apps, which allows remote attackers to obtain sensitive information via a crafted app that reads lo… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2012-3743 2024-11-21 10:41 2012-09-21 Show GitHub Exploit DB Packet Storm
294773 - apple iphone_os Safari in Apple iOS before 6 does not properly restrict use of an unspecified Unicode character that looks similar to the https lock indicator, which allows remote attackers to spoof https connection… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2012-3742 2024-11-21 10:41 2012-09-21 Show GitHub Exploit DB Packet Storm
294774 - apple iphone_os The Restrictions (aka Parental Controls) implementation in Apple iOS before 6 does not properly handle purchase attempts after a Disable Restrictions action, which allows local users to bypass an int… CWE-287
Improper Authentication 		CVE-2012-3741 2024-11-21 10:41 2012-09-21 Show GitHub Exploit DB Packet Storm
294775 - apple iphone_os The Passcode Lock implementation in Apple iOS before 6 does not properly manage the lock state, which allows physically proximate attackers to bypass an intended passcode requirement via unspecified … CWE-264
Permissions, Privileges, and Access Controls 		CVE-2012-3740 2024-11-21 10:41 2012-09-21 Show GitHub Exploit DB Packet Storm
294776 - apple iphone_os The Passcode Lock implementation in Apple iOS before 6 allows physically proximate attackers to bypass an intended passcode requirement via vectors involving use of the camera. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2012-3739 2024-11-21 10:41 2012-09-21 Show GitHub Exploit DB Packet Storm
294777 - apple iphone_os The Emergency Dialer screen in the Passcode Lock implementation in Apple iOS before 6 does not properly limit the dialing methods, which allows physically proximate attackers to bypass intended acces… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2012-3738 2024-11-21 10:41 2012-09-21 Show GitHub Exploit DB Packet Storm
294778 - apple iphone_os The Passcode Lock implementation in Apple iOS before 6 does not properly restrict photo viewing, which allows physically proximate attackers to view arbitrary stored photos by spoofing a time value. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2012-3737 2024-11-21 10:41 2012-09-21 Show GitHub Exploit DB Packet Storm
294779 - apple iphone_os The Passcode Lock implementation in Apple iOS before 6 allows physically proximate attackers to bypass an intended passcode requirement via vectors related to ending a FaceTime call. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2012-3736 2024-11-21 10:41 2012-09-21 Show GitHub Exploit DB Packet Storm
294780 - apple iphone_os The Passcode Lock implementation in Apple iOS before 6 does not properly interact with the "Slide to Power Off" feature, which allows physically proximate attackers to see the most recently used thir… CWE-200
Information Exposure 		CVE-2012-3735 2024-11-21 10:41 2012-09-21 Show GitHub Exploit DB Packet Storm