Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 15, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
216591 7.5 危険 Google - Google Chrome で使用される Blink の Web Sockets の実装におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2014-3165 2014-08-15 10:46 2014-08-12 Show GitHub Exploit DB Packet Storm
216592 6.8 警告 マイクロソフト - Microsoft Windows Media Center の MCPlayer.dll における任意のコードを実行される脆弱性 CWE-399
リソース管理の問題
CVE-2014-4060 2014-08-15 10:33 2014-08-12 Show GitHub Exploit DB Packet Storm
216593 7.5 危険 マイクロソフト - 複数の Microsoft Windows 製品の Local RPC サーバの実装におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2014-0316 2014-08-15 09:52 2014-08-12 Show GitHub Exploit DB Packet Storm
216594 7.2 危険 マイクロソフト - 複数の Microsoft Windows 製品の Windows Installer における権限昇格の脆弱性 CWE-399
リソース管理の問題
CVE-2014-1814 2014-08-15 09:44 2014-08-12 Show GitHub Exploit DB Packet Storm
216595 4.3 警告 マイクロソフト - Microsoft .NET Framework における重要なアドレス情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-4062 2014-08-14 18:00 2014-08-12 Show GitHub Exploit DB Packet Storm
216596 9.3 危険 マイクロソフト - Microsoft OneNote 2007 における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認
CVE-2014-2815 2014-08-14 17:53 2014-08-12 Show GitHub Exploit DB Packet Storm
216597 9.3 危険 マイクロソフト - Microsoft SharePoint Server 2013 および SharePoint Foundation 2013 における権限昇格の脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-2816 2014-08-14 17:49 2014-08-12 Show GitHub Exploit DB Packet Storm
216598 4.3 警告 Splunk - Splunk Enterprise の Splunk Web におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-5198 2014-08-14 17:15 2014-08-4 Show GitHub Exploit DB Packet Storm
216599 4 警告 Splunk - Splunk Enterprise におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2014-5197 2014-08-14 17:15 2014-08-4 Show GitHub Exploit DB Packet Storm
216600 7.5 危険 WordPress Gallery Objects - WordPress 用 Gallery Objects プラグインにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2014-5201 2014-08-14 17:14 2014-07-18 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 16, 2026, 4 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
294551 7.5 HIGH
Network
freebsd name_server_daemon FreeBSD NSD before 3.2.13 allows remote attackers to crash a NSD child server process (SIGSEGV) and cause a denial of service in the NSD server. CWE-669
 Incorrect Resource Transfer Between Spheres
CVE-2012-2979 2024-11-21 10:40 2019-11-2 Show GitHub Exploit DB Packet Storm
294552 7.5 HIGH
Network
apache hadoop Hadoop 1.0.3 contains a symlink vulnerability. CWE-59
Link Following
CVE-2012-2945 2024-11-21 10:40 2019-10-30 Show GitHub Exploit DB Packet Storm
294553 5.3 MEDIUM
Network
ibm sametime IBM Sametime allows remote attackers to obtain sensitive information from the Sametime Log database via a direct request to STLOG.NSF. IBM X-Force ID: 78048. CWE-200
Information Exposure
CVE-2012-3331 2024-11-21 10:40 2018-02-9 Show GitHub Exploit DB Packet Storm
294554 7.5 HIGH
Network
apache sling_jcr_contentloader The Apache Sling JCR ContentLoader 2.1.4 XmlReader used in the Sling JCR content loader module makes it possible to import arbitrary files in the content repository, including local files, causing po… CWE-200
Information Exposure
CVE-2012-3353 2024-11-21 10:40 2018-01-9 Show GitHub Exploit DB Packet Storm
294555 - seogento seogento Cross-site scripting (XSS) vulnerability in the SEOgento plugin for Magento allows remote attackers to inject arbitrary web script or HTML via the id parameter. NOTE: the provenance of this informat… CWE-79
Cross-site Scripting
CVE-2012-3243 2024-11-21 10:40 2015-05-21 Show GitHub Exploit DB Packet Storm
294556 - spiceworks spiceworks SQL injection vulnerability in SpiceWorks 5.3.75941 allows remote authenticated users to execute arbitrary SQL commands via the id parameter to api_v2.json. NOTE: this entry was SPLIT per ADT2 due t… CWE-89
SQL Injection
CVE-2012-2956 2024-11-21 10:40 2014-09-18 Show GitHub Exploit DB Packet Storm
294557 - ibm smartcloud_control_desk
maximo_asset_management
CRLF injection vulnerability in IBM Maximo Asset Management 7.x before 7.5.0.6 and SmartCloud Control Desk 7.x before 7.5.0.3 and 7.5.1.x before 7.5.1.2 allows remote attackers to inject arbitrary HT… NVD-CWE-Other
CVE-2012-3333 2024-11-21 10:40 2014-05-26 Show GitHub Exploit DB Packet Storm
294558 - cisco ios Cisco IOS before 15.1(1)SY, when Multicast Listener Discovery (MLD) snooping is enabled, allows remote attackers to cause a denial of service (CPU consumption or device crash) via MLD packets on a ne… CWE-20
 Improper Input Validation 
CVE-2012-3062 2024-11-21 10:40 2014-04-23 Show GitHub Exploit DB Packet Storm
294559 - redhat conga
enterprise_linux
Luci in Red Hat Conga stores the user's username and password in a Base64 encoded string in the __ac session cookie, which allows attackers to gain privileges by accessing this cookie. NOTE: this is… CWE-255
Credentials Management
CVE-2012-3359 2024-11-21 10:40 2014-03-31 Show GitHub Exploit DB Packet Storm
294560 - canonical
redhat
gnu
ubuntu_linux
enterprise_linux
enterprise_virtualization
glibc
The vfprintf function in stdio-common/vfprintf.c in GNU C Library (aka glibc) 2.5, 2.12, and probably other versions does not "properly restrict the use of" the alloca function when allocating the SP… CWE-264
Permissions, Privileges, and Access Controls
CVE-2012-3406 2024-11-21 10:40 2014-02-11 Show GitHub Exploit DB Packet Storm