Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 15, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
216691 4.3 警告 Wireshark - Wireshark の RTP 解析機能の epan/dissectors/packet-rtp.c 内の srtp_add_address 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足
CVE-2014-2907 2014-08-11 17:12 2014-04-22 Show GitHub Exploit DB Packet Storm
216692 4.3 警告 ModSecurity
オラクル
- ModSecurity におけるフィルタリングルールを回避される脆弱性 CWE-20
不適切な入力確認
CVE-2012-2751 2014-08-11 17:09 2012-07-22 Show GitHub Exploit DB Packet Storm
216693 7.5 危険 ModSecurity - ModSecurity における任意のファイルを読まれる脆弱性 CWE-20
不適切な入力確認
CVE-2013-1915 2014-08-11 16:42 2013-03-28 Show GitHub Exploit DB Packet Storm
216694 10 危険 Django Software Foundation
Canonical
- Django の FilePathField などのモデルフィールドクラスにおける脆弱性 CWE-399
リソース管理の問題
CVE-2014-0474 2014-08-11 16:32 2014-04-21 Show GitHub Exploit DB Packet Storm
216695 5 警告 Django Software Foundation
Canonical
- Django のキャッシュフレームワークにおける CSRF 保護を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-0473 2014-08-11 16:30 2014-04-21 Show GitHub Exploit DB Packet Storm
216696 7.2 危険 Linux - Google Chrome OS などの製品で使用される Linux Kernel における整数オーバーフローの脆弱性 CWE-189
数値処理の問題
CVE-2013-0913 2014-08-11 16:15 2013-03-18 Show GitHub Exploit DB Packet Storm
216697 4.3 警告 Ruby-lang.org
RubyGems
レッドハット
- Ruby で使用される RubyGems の lib/rubygems/version.rb におけるサービス運用妨害 (DoS) の脆弱性 CWE-310
暗号の問題
CVE-2013-4287 2014-08-11 16:03 2013-09-9 Show GitHub Exploit DB Packet Storm
216698 5.1 警告 Django Software Foundation
Canonical
- Django の django.core.urlresolvers.reverse 関数における任意の Python モジュールをインポートされる脆弱性 CWE-94
コード・インジェクション
CVE-2014-0472 2014-08-11 15:51 2014-04-21 Show GitHub Exploit DB Packet Storm
216699 2.1 注意 Puppet - Puppet および Puppet Enterprise で使用される Puppet Module Tool におけるモジュールを読まれる脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2013-4956 2014-08-11 15:50 2013-08-15 Show GitHub Exploit DB Packet Storm
216700 5.1 警告 Puppet - Puppet および Puppet Enterprise における任意の Ruby プログラムを実行される脆弱性 CWE-noinfo
情報不足
CVE-2013-4761 2014-08-11 15:49 2013-08-15 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 15, 2026, 4:28 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
294161 - qbnz geshi Cross-site scripting (XSS) vulnerability in contrib/langwiz.php in GeSHi before 1.0.8.11 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. CWE-79
Cross-site Scripting
CVE-2012-3522 2024-11-21 10:41 2014-06-13 Show GitHub Exploit DB Packet Storm
294162 - qbnz geshi Multiple directory traversal vulnerabilities in the cssgen contrib module in GeSHi before 1.0.8.11 allow remote attackers to read arbitrary files via a .. (dot dot) in the (1) geshi-path or (2) geshi… CWE-22
Path Traversal
CVE-2012-3521 2024-11-21 10:41 2014-06-13 Show GitHub Exploit DB Packet Storm
294163 - cisco ios Cisco IOS before 15.3(2)S allows remote attackers to bypass interface ACL restrictions in opportunistic circumstances by sending IPv6 packets in an unspecified scenario in which expected packet drops… CWE-264
Permissions, Privileges, and Access Controls
CVE-2012-3946 2024-11-21 10:41 2014-04-24 Show GitHub Exploit DB Packet Storm
294164 - cisco ios
catalyst_2900
catalyst_2900_vlan
catalyst_2900xl
Cisco IOS before 15.3(1)T on Cisco 2900 devices, when a VWIC2-2MFT-T1/E1 card is configured for TDM/HDLC mode, allows remote attackers to cause a denial of service (serial-interface outage) via certa… NVD-CWE-noinfo
CVE-2012-3918 2024-11-21 10:41 2014-04-23 Show GitHub Exploit DB Packet Storm
294165 - cisco vc240_network_bullet_camera
video_surveillance_vc220_network_dome_camera
The Cisco VC220 and VC240 cameras allow remote attackers to cause a denial of service (WebUI outage) via crafted packets, aka Bug IDs CSCtf73188, CSCtf88059, CSCtf87951, CSCtf87908, and CSCtf88019. NVD-CWE-noinfo
CVE-2012-3913 2024-11-21 10:41 2013-08-1 Show GitHub Exploit DB Packet Storm
294166 - apache tomcat Apache Tomcat 6.x before 6.0.37 and 7.x before 7.0.30 does not properly handle chunk extensions in chunked transfer coding, which allows remote attackers to cause a denial of service by streaming dat… CWE-20
 Improper Input Validation 
CVE-2012-3544 2024-11-21 10:41 2013-06-1 Show GitHub Exploit DB Packet Storm
294167 - redhat jboss_enterprise_portal_platform Cross-site request forgery (CSRF) vulnerability in the GateIn Portal component in JBoss Enterprise Portal Platform 5.2.2 and earlier allows remote attackers to hijack the authentication of unspecifie… CWE-352
 Origin Validation Error
CVE-2012-3532 2024-11-21 10:41 2013-04-13 Show GitHub Exploit DB Packet Storm
294168 - apache http_server Multiple cross-site scripting (XSS) vulnerabilities in the Apache HTTP Server 2.2.x before 2.2.24-dev and 2.4.x before 2.4.4 allow remote attackers to inject arbitrary web script or HTML via vectors … CWE-79
Cross-site Scripting
CVE-2012-3499 2024-11-21 10:41 2013-02-27 Show GitHub Exploit DB Packet Storm
294169 - redhat cloudforms Pulp in Red Hat CloudForms before 1.1 logs administrative passwords in a world-readable file, which allows local users to read pulp administrative passwords by reading production.log. CWE-255
Credentials Management
CVE-2012-3538 2024-11-21 10:41 2013-01-5 Show GitHub Exploit DB Packet Storm
294170 - openconstructor_project openconstructor Multiple SQL injection vulnerabilities in Open Constructor 3.12.0 allow remote authenticated users to execute arbitrary SQL commands via the id parameter to (1) data/gallery/edit.php, (2) data/guestb… CWE-89
SQL Injection
CVE-2012-3873 2024-11-21 10:41 2012-12-28 Show GitHub Exploit DB Packet Storm