Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 10, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
216661 7.5 危険 FrontAccounting - FrontAccounting における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2014-3973 2014-06-9 13:42 2014-05-21 Show GitHub Exploit DB Packet Storm
216662 9.3 危険 サムスン - Samsung iPOLiS Device Manager におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2014-3912 2014-06-9 13:38 2014-06-4 Show GitHub Exploit DB Packet Storm
216663 2.6 注意 日本情報化農業研究所 - SOY CMS におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-1998 2014-06-6 18:36 2014-06-4 Show GitHub Exploit DB Packet Storm
216664 7.8 危険 aten - CN8000 におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2014-1997 2014-06-6 18:35 2014-06-4 Show GitHub Exploit DB Packet Storm
216665 4.3 警告 Bottomline Technologies - Bottomline Technologies Transform Foundation Server の Transform Content Center におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-2577 2014-06-6 18:19 2014-06-3 Show GitHub Exploit DB Packet Storm
216666 4 警告 Ing. Punzenberger COPA-DATA GmbH - COPA-DATA zenon DNP3 NG ドライバおよび zenon DNP3 Process Gateway におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2014-2346 2014-06-6 17:56 2014-06-3 Show GitHub Exploit DB Packet Storm
216667 7.1 危険 Ing. Punzenberger COPA-DATA GmbH - COPA-DATA zenon DNP3 NG ドライバ および zenon DNP3 Process Gateway におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2014-2345 2014-06-6 17:56 2014-06-3 Show GitHub Exploit DB Packet Storm
216668 4.3 警告 Ipswitch, Inc. - Ipswitch IMail Server の Web クライアントインターフェースにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-3878 2014-06-6 16:30 2014-06-4 Show GitHub Exploit DB Packet Storm
216669 7.5 危険 Stephen Adkins - Perl 用の App::Context モジュールにおける任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2012-6141 2014-06-6 16:19 2012-12-6 Show GitHub Exploit DB Packet Storm
216670 3.5 注意 Jo Hasenau - TYPO3 用 Grid Elements エクステンションのレイアウトウィザードにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-3949 2014-06-6 15:14 2014-05-27 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 10, 2026, 4:58 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
295601 - oracle
mysql 		mysql Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.0.x, 5.1.x, and 5.5.x allows remote authenticated users to affect confidentiality via unknown vectors. NVD-CWE-noinfo
CVE-2012-0484 2024-11-21 10:35 2012-01-19 Show GitHub Exploit DB Packet Storm
295602 - php php The tidy_diagnose function in PHP 5.3.8 might allow remote attackers to cause a denial of service (NULL pointer dereference and application crash) via crafted input to an application that attempts to… CWE-399
 Resource Management Errors 		CVE-2012-0781 2024-11-21 10:35 2012-01-19 Show GitHub Exploit DB Packet Storm
295603 - whmcs whmcompletesolution submitticket.php in WHMCompleteSolution (WHMCS) 5.03 allows remote attackers to inject arbitrary code into a subject field via crafted ticket data, a different vulnerability than CVE-2011-5061. NOTE:… CWE-94
Code Injection 		CVE-2012-0693 2024-11-21 10:35 2012-01-14 Show GitHub Exploit DB Packet Storm
295604 - hp storageworks_p2000_g3_msa HP StorageWorks P2000 G3 MSA array systems have a default account, which makes it easier for remote attackers to perform administrative tasks via unspecified vectors, a different vulnerability than C… CWE-22
Path Traversal 		CVE-2012-0697 2024-11-21 10:35 2012-01-13 Show GitHub Exploit DB Packet Storm
295605 - ibm cognos_executive_viewer
cognos_tm1 		Multiple cross-site scripting (XSS) vulnerabilities in the Executive Viewer (EV) in IBM Cognos TM1 before 9.5 FP1 allow remote attackers to inject arbitrary web script or HTML via unspecified request… CWE-79
Cross-site Scripting 		CVE-2012-0696 2024-11-21 10:35 2012-01-13 Show GitHub Exploit DB Packet Storm
295606 - google
acer
samsung 		chrome_os
ac700_chromebook
cr-48_chromebook
series_5_chromebook 		Multiple unspecified vulnerabilities in Google Chrome before 17.0.963.27 on the Acer AC700, Samsung Series 5, and Cr-48 Chromebook platforms have unknown impact and attack vectors. NVD-CWE-noinfo
CVE-2012-0695 2024-11-21 10:35 2012-01-13 Show GitHub Exploit DB Packet Storm
295607 8.1 HIGH
Network 		tucaneando tucan Insecure plugin update mechanism in tucan through 0.3.10 could allow remote attackers to perform man-in-the-middle attacks and execute arbitrary code ith the permissions of the user running tucan. NVD-CWE-noinfo
CVE-2012-0063 2024-11-21 10:34 2020-02-22 Show GitHub Exploit DB Packet Storm
295608 7.8 HIGH
Local 		linux
canonical 		linux_kernel
ubuntu_linux 		OverlayFS in the Linux kernel before 3.0.0-16.28, as used in Ubuntu 10.0.4 LTS and 11.10, is missing inode security checks which could allow attackers to bypass security restrictions and perform unau… CWE-862
 Missing Authorization 		CVE-2012-0055 2024-11-21 10:34 2020-02-20 Show GitHub Exploit DB Packet Storm
295609 5.3 MEDIUM
Network 		mirc mirc mIRC prior to 7.22 has a message leak because chopping of outbound messages is mishandled. CWE-200
Information Exposure 		CVE-2011-5282 2024-11-21 10:34 2020-01-22 Show GitHub Exploit DB Packet Storm
295610 7.5 HIGH
Network 		spamdyke spamdyke spamdyke prior to 4.2.1: STARTTLS reveals plaintext CWE-74
Injection 		CVE-2012-0070 2024-11-21 10:34 2020-01-15 Show GitHub Exploit DB Packet Storm