Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 11, 2026, 4:01 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
216571 5 警告 IBM - 複数の IBM 製品のファームウェアにおける任意の IPMI コマンドを実行される脆弱性 CWE-310
暗号の問題
CVE-2014-0860 2014-07-8 16:37 2014-05-12 Show GitHub Exploit DB Packet Storm
216572 5 警告 IBM - IBM Flex System Manager におけるユーザアカウントを列挙される脆弱性 CWE-200
情報漏えい
CVE-2013-5423 2014-07-8 16:37 2013-08-22 Show GitHub Exploit DB Packet Storm
216573 6.8 警告 Thomson - Thomson TWG87OUIR におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2014-4716 2014-07-8 14:42 2014-06-25 Show GitHub Exploit DB Packet Storm
216574 7.5 危険 NetIQ - NetIQ Security Manager の NQMcsVarSet ActiveX コントロールの DumpToFile メソッドにおけるディレクトリトラバーサルの脆弱性 CWE-94
コード・インジェクション
CVE-2014-0602 2014-07-8 14:40 2014-07-1 Show GitHub Exploit DB Packet Storm
216575 4.3 警告 Another Awesome Stuff - ZeroCMS の zero_view_article.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-4195 2014-07-8 14:18 2014-06-20 Show GitHub Exploit DB Packet Storm
216576 4.3 警告 The Cacti Group - Cacti におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-4002 2014-07-8 14:10 2014-06-15 Show GitHub Exploit DB Packet Storm
216577 6.8 警告 Frederic Guillot - Kanboard におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2014-3920 2014-07-8 14:06 2014-06-30 Show GitHub Exploit DB Packet Storm
216578 6.5 警告 Kerio Technologies - Kerio Control の Kerio Control Statistics における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2014-3857 2014-07-8 14:01 2014-06-30 Show GitHub Exploit DB Packet Storm
216579 4.3 警告 Invision Power Services, Inc - Invision Power IP.Board または IP.Nexus におけるクロスサイトスクリプティングの脆弱性 "Reflected Cross-Site Scripting (XSS)" (CWE-79) vulnerability in "Invision Power IP.Board" product
CWE-79
CVE-2014-3149 2014-07-8 13:40 2014-04-24 Show GitHub Exploit DB Packet Storm
216580 9.3 危険 マイクロソフト - Microsoft Internet Explorer 9 における任意のコードを実行される脆弱性 CWE-Other
その他
CVE-2014-0325 2014-07-8 12:32 2014-04-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 11, 2026, 4:09 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
295311 - ibm infosphere_information_server
infosphere_information_server_information_services_framework
Information Services Framework (ISF) in IBM InfoSphere Information Server 8.1, 8.5 before FP3, and 8.7 does not properly determine authorization, which allows remote authenticated users to gain privi… CWE-287
Improper Authentication
CVE-2012-0702 2024-11-21 10:35 2013-01-31 Show GitHub Exploit DB Packet Storm
295312 - ibm infosphere_information_server
infosphere_datastage
The client applications in the DataStage Administrator client in InfoSphere DataStage in IBM InfoSphere Information Server 8.1, 8.5 before FP3, and 8.7 rely on client-side access control, which allow… CWE-264
Permissions, Privileges, and Access Controls
CVE-2012-0701 2024-11-21 10:35 2013-01-31 Show GitHub Exploit DB Packet Storm
295313 - ibm infosphere_fasttrack
infosphere_information_server
The client in InfoSphere FastTrack 8.1 through 8.7 in IBM InfoSphere Information Server 8.1, 8.5 before FP3, and 8.7 does not properly store credentials, which allows local users to bypass intended a… CWE-255
Credentials Management
CVE-2012-0700 2024-11-21 10:35 2013-01-31 Show GitHub Exploit DB Packet Storm
295314 - oracle
mariadb
canonical
mysql
mariadb
ubuntu_linux
Unspecified vulnerability in the Server component in Oracle MySQL 5.5.28 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server Optimizer. NVD-CWE-noinfo
CVE-2012-0578 2024-11-21 10:35 2013-01-17 Show GitHub Exploit DB Packet Storm
295315 - oracle
mariadb
canonical
redhat
mysql
mariadb
ubuntu_linux
enterprise_linux_desktop
enterprise_linux_server
enterprise_linux_workstation
enterprise_linux_eus
Unspecified vulnerability in the Server component in Oracle MySQL 5.1.66 and earlier, and 5.5.28 and earlier, allows remote authenticated users to affect availability via unknown vectors. NVD-CWE-noinfo
CVE-2012-0574 2024-11-21 10:35 2013-01-17 Show GitHub Exploit DB Packet Storm
295316 - oracle
mariadb
canonical
redhat
mysql
mariadb
ubuntu_linux
enterprise_linux_desktop
enterprise_linux_server
enterprise_linux_workstation
enterprise_linux_eus
Unspecified vulnerability in the Server component in Oracle MySQL 5.1.66 and earlier and 5.5.28 and earlier allows remote authenticated users to affect availability via unknown vectors related to Inn… NVD-CWE-noinfo
CVE-2012-0572 2024-11-21 10:35 2013-01-17 Show GitHub Exploit DB Packet Storm
295317 - xerox
sun
freeflow_print_server
sunos
Unspecified vulnerability Oracle Sun Solaris 10 allows local users to affect confidentiality and integrity via unknown vectors related to Install/smpatch. NVD-CWE-noinfo
CVE-2012-0569 2024-11-21 10:35 2013-01-17 Show GitHub Exploit DB Packet Storm
295318 - redhat enterprise_virtualization_manager The vds_installer in Red Hat Enterprise Virtualization Manager (RHEV-M) before 3.1, when adding a host, uses the -k curl parameter when downloading deployUtil.py and vds_bootstrap.py, which prevents … CWE-310
Cryptographic Issues
CVE-2012-0861 2024-11-21 10:35 2013-01-5 Show GitHub Exploit DB Packet Storm
295319 - redhat enterprise_virtualization_manager Multiple untrusted search path vulnerabilities in Red Hat Enterprise Virtualization Manager (RHEV-M) before 3.1, when adding a host, allow local users to gain privileges via a Trojan horse (1) deploy… NVD-CWE-Other
CVE-2012-0860 2024-11-21 10:35 2013-01-5 Show GitHub Exploit DB Packet Storm
295320 - ibm security_appscan
rational_policy_tester
IBM Security AppScan Enterprise before 8.6.0.2 and Rational Policy Tester before 8.5.0.3 do not validate X.509 certificates during use of the Manual Explore Proxy feature, which allows man-in-the-mid… CWE-20
 Improper Input Validation 
CVE-2012-0741 2024-11-21 10:35 2012-12-28 Show GitHub Exploit DB Packet Storm