Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 16, 2026, noon

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
216541 6.8 警告 シマンテック - Symantec Endpoint Protection にバッファオーバーフローの脆弱性 CWE-119
CWE-Other
CVE-2014-3434 2014-08-19 18:04 2014-08-4 Show GitHub Exploit DB Packet Storm
216542 2.6 注意 tenfourzero - Shutter におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-3905 2014-08-19 16:58 2014-08-15 Show GitHub Exploit DB Packet Storm
216543 2.6 注意 Piwigo - Piwigo におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-3900 2014-08-19 16:46 2014-08-8 Show GitHub Exploit DB Packet Storm
216544 5 警告 Drupal
WordPress.org		 - WordPress および Drupal で使用される Incutio XML-RPC ライブラリにおけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2014-5266 2014-08-19 16:42 2014-08-6 Show GitHub Exploit DB Packet Storm
216545 5 警告 Drupal
WordPress.org		 - WordPress および Drupal で使用される Incutio XML-RPC ライブラリにおけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2014-5265 2014-08-19 16:40 2014-08-6 Show GitHub Exploit DB Packet Storm
216546 2.1 注意 WordPress.org - WordPress の wp-includes/pluggable.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-5240 2014-08-19 16:40 2014-08-6 Show GitHub Exploit DB Packet Storm
216547 6.8 警告 WordPress.org - WordPress の wp-includes/pluggable.php における CSRF 保護メカニズムを回避される脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2014-5205 2014-08-19 16:39 2014-08-6 Show GitHub Exploit DB Packet Storm
216548 6.8 警告 WordPress.org - WordPress の wp-includes/pluggable.php における CSRF 保護メカニズムを回避される脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2014-5204 2014-08-19 16:38 2014-08-6 Show GitHub Exploit DB Packet Storm
216549 7.5 危険 WordPress.org - WordPress のウイジェットの実装の wp-includes/class-wp-customize-widgets.php における任意のコードを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2014-5203 2014-08-19 16:38 2014-08-6 Show GitHub Exploit DB Packet Storm
216550 6.1 警告 BlackBerry - Blackberry の Storage および Access サービスにおける任意のファイルを読まれる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2014-2388 2014-08-19 16:04 2014-08-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 16, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
294621 - xen xen (1) TMEMC_SAVE_GET_CLIENT_WEIGHT, (2) TMEMC_SAVE_GET_CLIENT_CAP, (3) TMEMC_SAVE_GET_CLIENT_FLAGS and (4) TMEMC_SAVE_END in the Transcendent Memory (TMEM) in Xen 4.0, 4.1, and 4.2 allow local guest OS… CWE-20
 Improper Input Validation  		CVE-2012-3497 2024-11-21 10:40 2012-11-24 Show GitHub Exploit DB Packet Storm
294622 - citrix
xen 		xenserver
xen 		XENMEM_populate_physmap in Xen 4.0, 4.1, and 4.2, and Citrix XenServer 6.0.2 and earlier, when translating paging mode is not used, allows local PV OS guest kernels to cause a denial of service (BUG … CWE-16
Configuration 		CVE-2012-3496 2024-11-21 10:40 2012-11-24 Show GitHub Exploit DB Packet Storm
294623 - xen
citrix 		xen
xenserver 		The physdev_get_free_pirq hypercall in arch/x86/physdev.c in Xen 4.1.x and Citrix XenServer 6.0.2 and earlier uses the return value of the get_free_pirq function as an array index without checking th… CWE-20
 Improper Input Validation  		CVE-2012-3495 2024-11-21 10:40 2012-11-24 Show GitHub Exploit DB Packet Storm
294624 - xen
citrix 		xen
xenserver 		The set_debugreg hypercall in include/asm-x86/debugreg.h in Xen 4.0, 4.1, and 4.2, and Citrix XenServer 6.0.2 and earlier, when running on x86-64 systems, allows local OS guest users to cause a denia… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2012-3494 2024-11-21 10:40 2012-11-24 Show GitHub Exploit DB Packet Storm
294625 - redhat jboss_enterprise_data_services_platform The Teiid Java Database Connectivity (JDBC) socket, as used in JBoss Enterprise Data Services Platform before 5.3.0, does not encrypt login messages by default contrary to documentation and specifica… CWE-310
Cryptographic Issues 		CVE-2012-3431 2024-11-21 10:40 2012-11-24 Show GitHub Exploit DB Packet Storm
294626 - fedoraproject
dokuwiki 		fedora
dokuwiki 		doku.php in DokuWiki, as used in Fedora 16, 17, and 18, when certain PHP error levels are set, allows remote attackers to obtain sensitive information via the prefix parameter, which reveals the inst… CWE-200
Information Exposure 		CVE-2012-3354 2024-11-21 10:40 2012-11-20 Show GitHub Exploit DB Packet Storm
294627 - ibm websphere_application_server The proxy server in IBM WebSphere Application Server 7.0 before 7.0.0.27, 8.0 before 8.0.0.5, and 8.5 before 8.5.0.1, and WebSphere Virtual Enterprise, allows remote attackers to cause a denial of se… NVD-CWE-noinfo
CVE-2012-3330 2024-11-21 10:40 2012-11-14 Show GitHub Exploit DB Packet Storm
294628 - ibm tivoli_federated_identity_manager
tivoli_federated_identity_manager_business_gateway 		The Java servlets in the management console in IBM Tivoli Federated Identity Manager (TFIM) through 6.2.2 and Tivoli Federated Identity Manager Business Gateway (TFIMBG) before 6.2.2 do not require a… CWE-287
Improper Authentication 		CVE-2012-3315 2024-11-21 10:40 2012-11-8 Show GitHub Exploit DB Packet Storm
294629 - hp performance_insight Unspecified vulnerability in HP Performance Insight 5.31, 5.40, and 5.41, when Sybase is used, allows remote attackers to obtain sensitive information, modify data, or cause a denial of service via u… NVD-CWE-noinfo
CVE-2012-3270 2024-11-21 10:40 2012-11-8 Show GitHub Exploit DB Packet Storm
294630 - hp performance_insight Unspecified vulnerability in HP Performance Insight 5.31, 5.40, and 5.41, when Sybase is used, allows remote attackers to obtain sensitive information, modify data, or cause a denial of service via u… NVD-CWE-noinfo
CVE-2012-3269 2024-11-21 10:40 2012-11-8 Show GitHub Exploit DB Packet Storm