Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 16, 2026, noon

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
216451	5	警告	Debian Python Software Foundation	-	Python Image Library および Pillow の PIL/IcnsImagePlugin.py におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2014-3589	2014-08-27 12:25	2014-08-13	Show	GitHub Exploit DB Packet Storm

216452	4.3	警告	Apache Software Foundation	-	Apache ActiveMQ の scheduled.jsp におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-1879	2014-08-26 17:47	2013-03-21	Show	GitHub Exploit DB Packet Storm

216453	7.1	危険	IBM	-	IBM GCM16 および GCM32 Global Console Manager スイッチのファームウェアの systest.php における任意のコマンドを実行される脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2014-3085	2014-08-26 17:42	2014-07-14	Show	GitHub Exploit DB Packet Storm

216454	6.3	警告	IBM	-	IBM GCM16 および GCM32 Global Console Manager スイッチのファームウェアの prodtest.php における任意のファイルを読まれる脆弱性	CWE-200 情報漏えい	CVE-2014-3081	2014-08-26 17:42	2014-07-14	Show	GitHub Exploit DB Packet Storm

216455	6.8	警告	マイクロソフトアドビシステムズ Google	-	Adobe Flash Player および Adobe AIR におけるクロスサイトリクエストフォージェリ攻撃を実行される脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2014-5333	2014-08-26 17:40	2014-08-12	Show	GitHub Exploit DB Packet Storm

216456	6.8	警告	GNU Project IBM	-	GnuTLS の lib/gnutls_handshake.c の read_server_hello 関数におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2014-3466	2014-08-26 17:40	2014-05-29	Show	GitHub Exploit DB Packet Storm

216457	7.5	危険	Schrack	-	Schrack Technik microControl のファームウェアの Web インターフェースにおけるアクセス権を取得される脆弱性	CWE-255 証明書・パスワード管理	CVE-2014-5396	2014-08-26 17:32	2014-07-10	Show	GitHub Exploit DB Packet Storm

216458	5	警告	WP Content Source Control project	-	WordPress 用 WP Content Source Control プラグインの downloadfiles/download.php の file_get_contents 関数におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2014-5368	2014-08-26 16:13	2014-08-19	Show	GitHub Exploit DB Packet Storm

216459	7.2	危険	Little Kernel project	-	MSM デバイス用 Qualcomm Innovation Center Android コントリビューションなどで配布される Little Kernel ブートローダにおけるデバイスロックおよびカーネルの署名の制限を回避される脆弱性	CWE-287 不適切な認証	CVE-2014-4325	2014-08-26 15:45	2014-08-5	Show	GitHub Exploit DB Packet Storm

216460	1.9	注意	Little Kernel project	-	MSM デバイス用 Qualcomm Innovation Center Android コントリビューションなどで配布される Little Kernel ブートローダにおける制御可能なメモリ領域にデータを書き込まれる脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2014-0974	2014-08-26 15:39	2014-07-23	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 16, 2026, 4 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
294711	-	oracle	financial_services_software	Unspecified vulnerability in the Oracle FLEXCUBE Direct Banking component in Oracle Financial Services Software 5.0.5, 5.1.0, 5.2.0, and 5.3.0 through 5.3.4 allows remote authenticated users to affec…	NVD-CWE-noinfo	CVE-2012-3142	2024-11-21 10:40	2012-10-17	Show	GitHub Exploit DB Packet Storm

294712	-	oracle	financial_services_software	Unspecified vulnerability in the Oracle FLEXCUBE Universal Banking component in Oracle Financial Services Software 10.0.0, 10.0.2, 10.1.0, 10.2.0, 10.2.2, 10.3.0, 10.5.0, and 11.0.0 through 11.2.0 al…	NVD-CWE-noinfo	CVE-2012-3141	2024-11-21 10:40	2012-10-17	Show	GitHub Exploit DB Packet Storm

294713	-	oracle	supply_chain_products_suite	Unspecified vulnerability in the Oracle Agile PLM For Process component in Oracle Supply Chain Products Suite 6.0.0.6.3 and 6.1.0.1.14 allows remote authenticated users to affect confidentiality and …	NVD-CWE-noinfo	CVE-2012-3140	2024-11-21 10:40	2012-10-17	Show	GitHub Exploit DB Packet Storm

294714	-	oracle	e-business_suite	Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 11.5.10.2 allows remote attackers to affect integrity, related to Signon (local and SSO).	NVD-CWE-noinfo	CVE-2012-3139	2024-11-21 10:40	2012-10-17	Show	GitHub Exploit DB Packet Storm

294715	-	oracle	e-business_suite	Unspecified vulnerability in the Oracle iStore component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.1, 12.1.2, and 12.1.3 allows remote attackers to affect integrity via unknown vectors relat…	NVD-CWE-noinfo	CVE-2012-3138	2024-11-21 10:40	2012-10-17	Show	GitHub Exploit DB Packet Storm

294716	-	oracle sun	jdk jre	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, 6 Update 35 and earlier, 5.0 Update 36 and earlier, and 1.4.2_38 and earlier allows…	NVD-CWE-noinfo	CVE-2012-3216	2024-11-21 10:40	2012-10-17	Show	GitHub Exploit DB Packet Storm

294717	-	oracle sun	jdk jre	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, and 6 Update 35 and earlier, allows remote attackers to affect confidentiality, int…	NVD-CWE-noinfo	CVE-2012-3159	2024-11-21 10:40	2012-10-17	Show	GitHub Exploit DB Packet Storm

294718	-	oracle sun	jdk jre	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, 6 Update 35 and earlier, and 5.0 Update 36 and earlier allows remote attackers to a…	NVD-CWE-noinfo	CVE-2012-3143	2024-11-21 10:40	2012-10-17	Show	GitHub Exploit DB Packet Storm

294719	-	siemens	simatic_s7-1200_firmware simatic_s7-1200_cpu_1211c_firmware simatic_s7-1200_cpu_1212c_firmware simatic_s7-1200_cpu_1212fc_firmware simatic_s7-1200_cpu_1214_fc_firmware simatic_s7-1200_…	Cross-site scripting (XSS) vulnerability in the web server on Siemens SIMATIC S7-1200 PLCs 2.x through 3.0.1 allows remote attackers to inject arbitrary web script or HTML via a crafted URI.	CWE-79 Cross-site Scripting	CVE-2012-3040	2024-11-21 10:40	2012-10-11	Show	GitHub Exploit DB Packet Storm

294720	-	openttd	openttd	OpenTTD 0.6.0 through 1.2.1 does not properly validate requests to clear a water tile, which allows remote attackers to cause a denial of service (NULL pointer dereference and server crash) via a cer…	CWE-20 Improper Input Validation	CVE-2012-3436	2024-11-21 10:40	2012-10-10	Show	GitHub Exploit DB Packet Storm