Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 17, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
216361	4.3	警告	HL7	-	HL7 C-CDA の CDA.xsl におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2014-5452	2014-09-3 18:25	2013-04-14	Show	GitHub Exploit DB Packet Storm

216362	4.3	警告	HL7	-	HL7 C-CDA の CDA.xsl における重要な URL を取得される脆弱性	CWE-200 情報漏えい	CVE-2014-3862	2014-09-3 18:25	2014-04-14	Show	GitHub Exploit DB Packet Storm

216363	4.3	警告	HL7	-	HL7 C-CDA の CDA.xsl におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2014-3861	2014-09-3 18:24	2014-04-14	Show	GitHub Exploit DB Packet Storm

216364	4	警告	Amazon.com, Inc.	-	Android 版アプリ Kindle における SSL サーバ証明書の検証不備の脆弱性	CWE-Other その他	CVE-2014-3908	2014-09-3 18:07	2014-08-29	Show	GitHub Exploit DB Packet Storm

216365	3.3	注意	Android for MSM	-	Code Aurora Forum リリースの Android 用の Qualcomm Innovation Center (QuIC) init スクリプトにおけるファイルのメタデータを変更される脆弱性	CWE-59 リンク解釈の問題	CVE-2013-6124	2014-09-3 17:17	2013-10-15	Show	GitHub Exploit DB Packet Storm

216366	5	警告	Android for MSM	-	Code Aurora Forum リリースの Android 用の特定の Qualcomm Innovation Center パッチにおけるディスク暗号化のパスワードを取得される脆弱性	CWE-Other その他	CVE-2013-2599	2014-09-3 17:16	2013-07-3	Show	GitHub Exploit DB Packet Storm

216367	7.2	危険	Android for MSM	-	MSM デバイス用 Qualcomm Innovation Center Android コントリビューションなどで使用される Linux Kernel 用 acdb オーディオドライバにおけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2013-2597	2014-09-3 15:45	2013-06-21	Show	GitHub Exploit DB Packet Storm

216368	7.2	危険	Android for MSM	-	MSM デバイス用 Qualcomm Innovation Center Android コントリビューションなどで使用される Linux Kernel 用 MSM カメラドライバにおける権限を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2013-2595	2014-09-3 15:44	2013-05-1	Show	GitHub Exploit DB Packet Storm

216369	4.3	警告	Linux	-	Linux Kernel の virt/kvm/iommu.c 内の kvm_iommu_map_pages 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-189 数値処理の問題	CVE-2014-3601	2014-09-3 15:12	2014-08-19	Show	GitHub Exploit DB Packet Storm

216370	2.1	注意	Ganeti project	-	Ganeti の lib/client/gnt_cluster.py の _UpgradeBeforeConfigurationChange 関数における SSL キーを取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2014-5247	2014-09-3 14:27	2014-08-5	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 18, 2026, 4:12 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
295951	-	linux	linux_kernel	The rds_ib_xmit function in net/rds/ib_send.c in the Reliable Datagram Sockets (RDS) protocol implementation in the Linux kernel 3.7.4 and earlier allows local users to cause a denial of service (BUG…	NVD-CWE-noinfo	CVE-2012-2372	2024-11-21 10:38	2013-01-23	Show	GitHub Exploit DB Packet Storm

295952	-	linux canonical	linux_kernel ubuntu_linux	Buffer overflow in virt/kvm/irq_comm.c in the KVM subsystem in the Linux kernel before 3.2.24 allows local users to cause a denial of service (crash) and possibly execute arbitrary code via vectors r…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2012-2137	2024-11-21 10:38	2013-01-23	Show	GitHub Exploit DB Packet Storm

295953	-	linux	linux_kernel	Buffer overflow in the macvtap device driver in the Linux kernel before 3.4.5, when running in certain configurations, allows privileged KVM guest users to cause a denial of service (crash) via a lon…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2012-2119	2024-11-21 10:38	2013-01-23	Show	GitHub Exploit DB Packet Storm

295954	-	emc	avamar avamar_plugin	EMC Avamar Client 4.x, 5.x, and 6.x on HP-UX and Mac OS X, and the EMC Avamar plugin 4.x, 5.x, and 6.x for Oracle, uses world-writable permissions for cache directories, which allows local users to g…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2012-2291	2024-11-21 10:38	2013-01-22	Show	GitHub Exploit DB Packet Storm

295955	-	redhat squirrelmail	enterprise_linux squirrelmail	functions/imap_general.php in SquirrelMail, as used in Red Hat Enterprise Linux (RHEL) 4 and 5, does not properly handle 8-bit characters in passwords, which allows remote attackers to cause a denial…	CWE-399 Resource Management Errors	CVE-2012-2124	2024-11-21 10:38	2013-01-18	Show	GitHub Exploit DB Packet Storm

295956	-	pizzashack	rssh	Incomplete blacklist vulnerability in rssh before 2.3.4, when the rsync protocol is enabled, allows local users to bypass intended restricted shell access via the --rsh command line option.	NVD-CWE-Other	CVE-2012-2252	2024-11-21 10:38	2013-01-11	Show	GitHub Exploit DB Packet Storm

295957	-	pizzashack	rssh	rssh 2.3.2, as used by Debian, Fedora, and others, when the rsync protocol is enabled, allows local users to bypass intended restricted shell access via a (1) "-e" or (2) "--" command line option.	CWE-20 Improper Input Validation	CVE-2012-2251	2024-11-21 10:38	2013-01-11	Show	GitHub Exploit DB Packet Storm

295958	-	apache	cxf	Apache CXF 2.4.5 through 2.4.7, 2.5.1 through 2.5.3, and 2.6.x before 2.6.1, does not properly enforce child policies of a WS-SecurityPolicy 1.1 SupportingToken policy on the client side, which allow…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2012-2378	2024-11-21 10:38	2013-01-5	Show	GitHub Exploit DB Packet Storm

295959	-	apache	cxf	Apache CXF 2.4.x before 2.4.8, 2.5.x before 2.5.4, and 2.6.x before 2.6.1, when a Supporting Token specifies a child WS-SecurityPolicy 1.1 or 1.2 policy, does not properly ensure that an XML element …	NVD-CWE-noinfo	CVE-2012-2379	2024-11-21 10:38	2013-01-3	Show	GitHub Exploit DB Packet Storm

295960	-	mahara	mahara	Cross-site scripting (XSS) vulnerability in group/members.php in Mahara 1.5.x before 1.5.7 and 1.6.x before 1.6.2 allows remote attackers to inject arbitrary web script or HTML via the query paramete…	CWE-79 Cross-site Scripting	CVE-2012-2253	2024-11-21 10:38	2012-11-25	Show	GitHub Exploit DB Packet Storm