Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 28, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
216731 4.3 警告 IBM - WebSphere MQ の Telemetry Component における認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2014-6116 2014-10-27 11:49 2014-10-8 Show GitHub Exploit DB Packet Storm
216732 1.9 注意 IBM - IBM WebSphere MQ classes for Java ライブラリおよび Websphere MQ Explorer における事前に設定された平文のパスワードを取得される脆弱性 CWE-255
証明書・パスワード管理 		CVE-2014-4822 2014-10-27 11:48 2014-10-13 Show GitHub Exploit DB Packet Storm
216733 4.3 警告 Aptana - Aflax におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-5331 2014-10-24 18:32 2014-10-16 Show GitHub Exploit DB Packet Storm
216734 6.5 警告 Tips and Tricks HQ - WordPress 用 All In One WP Security & Firewall プラグインにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2014-6242 2014-10-24 18:24 2014-09-12 Show GitHub Exploit DB Packet Storm
216735 5 警告 シスコシステムズ - Cisco WebEx Meetings Server における任意のファイルのダウンロードを誘発される脆弱性 CWE-20
不適切な入力確認 		CVE-2014-3395 2014-10-24 18:23 2014-09-30 Show GitHub Exploit DB Packet Storm
216736 6.8 警告 シスコシステムズ - Cisco Prime Optical の Web フレームワークにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-3408 2014-10-24 18:22 2014-10-15 Show GitHub Exploit DB Packet Storm
216737 7.1 危険 シスコシステムズ - Cisco Intrusion Prevention System ソフトウェアの IP ロギング機能ににおけるサービス運用妨害 (DoS) の脆弱性 CWE-362
競合状態 		CVE-2014-3406 2014-10-24 18:22 2014-10-14 Show GitHub Exploit DB Packet Storm
216738 7.8 危険 シスコシステムズ - Cisco TelePresence MCU ソフトウェアのネットワークスタック におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2014-3397 2014-10-24 18:21 2014-10-15 Show GitHub Exploit DB Packet Storm
216739 5 警告 シスコシステムズ - Cisco Email Security Appliance 上で稼働する Cisco AsyncOS の ZIP インスペクションエンジンにおけるマルウェアフィルタリングを回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2014-3381 2014-10-24 18:20 2014-10-14 Show GitHub Exploit DB Packet Storm
216740 7.1 危険 シスコシステムズ - Cisco TelePresence Video Communication Server および Expressway ソフトウェアにおけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2014-3370 2014-10-24 18:20 2014-10-15 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
296351 - cisco unified_computing_system The Manager component in Cisco Unified Computing System (UCS) allows local users to cause a denial of service via an invalid Smart Call Home contact address, aka Bug ID CSCtl00186. CWE-20
 Improper Input Validation  		CVE-2012-4093 2024-11-21 10:42 2013-09-21 Show GitHub Exploit DB Packet Storm
296352 - cisco unified_computing_system Multiple buffer overflows in the administrative web interface in Cisco Unified Computing System (UCS) allow remote authenticated users to cause a denial of service (memory corruption and session term… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2012-4083 2024-11-21 10:42 2013-09-21 Show GitHub Exploit DB Packet Storm
296353 - cisco unified_computing_system The Board Management Controller (BMC) in the Serial over LAN (SoL) subsystem in Cisco Unified Computing System (UCS) relies on a hardcoded private key, which allows man-in-the-middle attackers to obt… CWE-255
Credentials Management 		CVE-2012-4074 2024-11-21 10:42 2013-09-21 Show GitHub Exploit DB Packet Storm
296354 - cisco unified_computing_system The KVM subsystem in the client in Cisco Unified Computing System (UCS) does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers, and read or mod… CWE-310
Cryptographic Issues 		CVE-2012-4073 2024-11-21 10:42 2013-09-21 Show GitHub Exploit DB Packet Storm
296355 - cisco unified_computing_system The KVM subsystem in Cisco Unified Computing System (UCS) relies on a hardcoded X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers, and read keyboard and mouse events, b… CWE-20
 Improper Input Validation  		CVE-2012-4072 2024-11-21 10:42 2013-09-21 Show GitHub Exploit DB Packet Storm
296356 - eucalyptus eucalyptus Walrus in Eucalyptus before 3.2.2 allows remote attackers to cause a denial of service (memory, thread, and CPU consumption) via a crafted XML message containing a DTD, as demonstrated by a bucket-lo… CWE-399
 Resource Management Errors 		CVE-2012-4067 2024-11-21 10:42 2013-09-17 Show GitHub Exploit DB Packet Storm
296357 - ruby-lang ruby The safe-level feature in Ruby 1.8.7 allows context-dependent attackers to modify strings via the NameError#to_s method when operating on Ruby objects. NOTE: this issue is due to an incomplete fix f… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2012-4481 2024-11-21 10:42 2013-05-2 Show GitHub Exploit DB Packet Storm
296358 - ruby-lang ruby Ruby 1.8.7 before patchlevel 371, 1.9.3 before patchlevel 286, and 2.0 before revision r37068 allows context-dependent attackers to bypass safe-level restrictions and modify untainted strings via the… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2012-4466 2024-11-21 10:42 2013-04-26 Show GitHub Exploit DB Packet Storm
296359 - ruby-lang ruby Ruby 1.9.3 before patchlevel 286 and 2.0 before revision r37068 allows context-dependent attackers to bypass safe-level restrictions and modify untainted strings via the (1) exc_to_s or (2) name_err_… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2012-4464 2024-11-21 10:42 2013-04-26 Show GitHub Exploit DB Packet Storm
296360 - oracle fusion_middleware Unspecified vulnerability in the Oracle WebCenter Content component in Oracle Fusion Middleware 11.1.1.6.0 allows remote authenticated users to affect confidentiality via unknown vectors related to C… NVD-CWE-noinfo
CVE-2012-4303 2024-11-21 10:42 2013-04-17 Show GitHub Exploit DB Packet Storm