Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 9, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
216721	4.3	警告	レッドハット	-	Red Hat Enterprise Linux OpenStack Platform で使用される OpenStack Heat Templates における任意のパッケージをインストールされる脆弱性	CWE-310 暗号の問題	CVE-2014-0042	2014-06-4 15:52	2014-05-29	Show	GitHub Exploit DB Packet Storm

216722	4.3	警告	レッドハット	-	Red Hat Enterprise Linux OpenStack Platform で使用される OpenStack Heat Templates におけるアップデートを制限される脆弱性	CWE-310 暗号の問題	CVE-2014-0041	2014-06-4 15:51	2014-05-29	Show	GitHub Exploit DB Packet Storm

216723	4.3	警告	レッドハット	-	Red Hat Enterprise Linux OpenStack Platform で使用される OpenStack Heat Templates におけるアップデートを制限される脆弱性	CWE-noinfo 情報不足	CVE-2014-0040	2014-06-4 15:50	2014-05-29	Show	GitHub Exploit DB Packet Storm

216724	5	警告	レッドハット	-	Red Hat Enterprise Linux OpenStack Platform で使用される openstack-foreman-installer におけるアクセス権を取得される脆弱性	CWE-287 不適切な認証	CVE-2013-6470	2014-06-4 15:50	2013-11-4	Show	GitHub Exploit DB Packet Storm

216725	7.6	危険	OpenStack レッドハット	-	Red Hat openstack-neutron パッケージのデフォルト設定における権限を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2013-6433	2014-06-4 15:49	2013-12-9	Show	GitHub Exploit DB Packet Storm

216726	4	警告	シスコシステムズ	-	Cisco Unified Communications Domain Manager の VOSS の Web フレームワークにおける重要なユーザ情報を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2014-3280	2014-06-4 15:41	2014-05-28	Show	GitHub Exploit DB Packet Storm

216727	6.8	警告	DLEVIET	-	DataLife Engine における Web セッションをハイジャックされる脆弱性	CWE-Other その他	CVE-2013-7387	2014-06-4 15:24	2013-01-19	Show	GitHub Exploit DB Packet Storm

216728	7.5	危険	DLEVIET	-	DataLife Engine における任意の PHP コードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2013-1412	2014-06-4 15:23	2013-01-21	Show	GitHub Exploit DB Packet Storm

216729	10	危険	D-Link Systems, Inc.	-	複数の D-Link ネットワーク製品のファームウェアにおけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2014-3936	2014-06-4 15:05	2014-05-15	Show	GitHub Exploit DB Packet Storm

216730	7.5	危険	Sensio Labs	-	Symfony における任意の PHP コードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2013-1397	2014-06-4 14:58	2013-01-17	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 10, 2026, 4:58 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
295381	-	pythonpaste	paste	Paste Script 1.7.5 and earlier does not properly set group memberships during execution with root privileges, which might allow remote attackers to bypass intended file-access restrictions by leverag…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2012-0878	2024-11-21 10:35	2012-05-2	Show	GitHub Exploit DB Packet Storm

295382	-	mumble	mumble	Mumble 1.2.3 and earlier uses world-readable permissions for .local/share/data/Mumble/.mumble.sqlite files in home directories, which might allow local users to obtain a cleartext password and config…	CWE-310 Cryptographic Issues	CVE-2012-0863	2024-11-21 10:35	2012-04-30	Show	GitHub Exploit DB Packet Storm

295383	-	mozilla	bugzilla	template/en/default/list/list.js.tmpl in Bugzilla 2.x and 3.x before 3.6.9, 3.7.x and 4.0.x before 4.0.6, and 4.1.x and 4.2.x before 4.2.1 does not properly handle multiple logins, which allows remot…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2012-0466	2024-11-21 10:35	2012-04-28	Show	GitHub Exploit DB Packet Storm

295384	-	mozilla	bugzilla	Bugzilla 3.5.x and 3.6.x before 3.6.9, 3.7.x and 4.0.x before 4.0.6, and 4.1.x and 4.2.x before 4.2.1, when the inbound_proxies option is enabled, does not properly validate the X-Forwarded-For HTTP …	CWE-264 Permissions, Privileges, and Access Controls	CVE-2012-0465	2024-11-21 10:35	2012-04-28	Show	GitHub Exploit DB Packet Storm

295385	-	mozilla	firefox thunderbird thunderbird_esr seamonkey	Mozilla Firefox 4.x through 11.0, Firefox ESR 10.x before 10.0.4, Thunderbird 5.0 through 11.0, Thunderbird ESR 10.x before 10.0.4, and SeaMonkey before 2.9 allow remote attackers to spoof the addres…	NVD-CWE-Other	CVE-2012-0479	2024-11-21 10:35	2012-04-25	Show	GitHub Exploit DB Packet Storm

295386	-	mozilla	firefox thunderbird thunderbird_esr seamonkey	The texImage2D implementation in the WebGL subsystem in Mozilla Firefox 4.x through 11.0, Firefox ESR 10.x before 10.0.4, Thunderbird 5.0 through 11.0, Thunderbird ESR 10.x before 10.0.4, and SeaMonk…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2012-0478	2024-11-21 10:35	2012-04-25	Show	GitHub Exploit DB Packet Storm

295387	-	mozilla	firefox thunderbird thunderbird_esr seamonkey	Multiple cross-site scripting (XSS) vulnerabilities in Mozilla Firefox 4.x through 11.0, Firefox ESR 10.x before 10.0.4, Thunderbird 5.0 through 11.0, Thunderbird ESR 10.x before 10.0.4, and SeaMonke…	CWE-79 Cross-site Scripting	CVE-2012-0477	2024-11-21 10:35	2012-04-25	Show	GitHub Exploit DB Packet Storm

295388	-	mozilla	firefox thunderbird seamonkey	Mozilla Firefox 4.x through 11.0, Thunderbird 5.0 through 11.0, and SeaMonkey before 2.9 do not properly construct the Origin and Sec-WebSocket-Origin HTTP headers, which might allow remote attackers…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2012-0475	2024-11-21 10:35	2012-04-25	Show	GitHub Exploit DB Packet Storm

295389	-	mozilla	firefox thunderbird thunderbird_esr seamonkey	Cross-site scripting (XSS) vulnerability in the docshell implementation in Mozilla Firefox 4.x through 11.0, Firefox ESR 10.x before 10.0.4, Thunderbird 5.0 through 11.0, Thunderbird ESR 10.x before …	CWE-79 Cross-site Scripting	CVE-2012-0474	2024-11-21 10:35	2012-04-25	Show	GitHub Exploit DB Packet Storm

295390	-	mozilla	firefox thunderbird thunderbird_esr seamonkey	The WebGLBuffer::FindMaxUshortElement function in Mozilla Firefox 4.x through 11.0, Firefox ESR 10.x before 10.0.4, Thunderbird 5.0 through 11.0, Thunderbird ESR 10.x before 10.0.4, and SeaMonkey bef…	CWE-189 Numeric Errors	CVE-2012-0473	2024-11-21 10:35	2012-04-25	Show	GitHub Exploit DB Packet Storm