Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 8, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
216851	4.1	警告	IBM	-	IBM Tivoli Storage FlashCopy Manager の FlashCopy Manager for VMware コンポーネントにおける重要な VM データを取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2013-6714	2014-05-28 14:53	2013-11-8	Show	GitHub Exploit DB Packet Storm

216852	4.1	警告	IBM	-	IBM Tivoli Storage Manager for Virtual Environments の Data Protection for VMware コンポーネントにおける重要な VM データを取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2013-6713	2014-05-28 14:52	2013-11-8	Show	GitHub Exploit DB Packet Storm

216853	4.3	警告	IBM	-	IBM Maximo Asset Management および SmartCloud Control Desk の customreport.jsp におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2014-0893	2014-05-28 14:51	2014-04-18	Show	GitHub Exploit DB Packet Storm

216854	6	警告	IBM	-	IBM Maximo Asset Management および SmartCloud Control Desk における権限を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2014-0849	2014-05-28 14:50	2014-04-18	Show	GitHub Exploit DB Packet Storm

216855	3.5	注意	IBM	-	複数の IBM 製品の openreport.jsp におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2014-0825	2014-05-28 14:50	2014-04-18	Show	GitHub Exploit DB Packet Storm

216856	3.5	注意	IBM	-	複数の IBM 製品におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2014-0824	2014-05-28 14:49	2014-04-18	Show	GitHub Exploit DB Packet Storm

216857	3.5	注意	IBM	-	複数の IBM 製品における重要なスタックトレース情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2013-6741	2014-05-28 14:48	2013-11-8	Show	GitHub Exploit DB Packet Storm

216858	6.5	警告	IBM	-	複数の IBM 製品における脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2013-5465	2014-05-28 14:47	2013-08-22	Show	GitHub Exploit DB Packet Storm

216859	6	警告	IBM	-	IBM Maximo Asset Management および SmartCloud Control Desk におけるアクセス制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2013-5464	2014-05-28 14:47	2013-08-22	Show	GitHub Exploit DB Packet Storm

216860	3.5	注意	IBM	-	IBM Maximo Asset Management および SmartCloud Control Desk におけるアクセス制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2013-5460	2014-05-28 14:46	2013-08-22	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 8, 2026, 4:54 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
295451	-	php	php	PHP before 5.3.9 has improper libxslt security settings, which allows remote attackers to create arbitrary files via a crafted XSLT stylesheet that uses the libxslt output extension.	CWE-264 Permissions, Privileges, and Access Controls	CVE-2012-0057	2024-11-21 10:34	2012-02-2	Show	GitHub Exploit DB Packet Storm

295452	-	mozilla	firefox seamonkey	Mozilla Firefox 4.x through 9.0 and SeaMonkey before 2.7 on Linux and Mac OS X set weak permissions for Firefox Recovery Key.html, which might allow local users to read a Firefox Sync key via standar…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2012-0450	2024-11-21 10:34	2012-02-2	Show	GitHub Exploit DB Packet Storm

295453	-	mozilla debian suse opensuse	thunderbird seamonkey firefox debian_linux linux_enterprise_server linux_enterprise_desktop opensuse linux_enterprise_software_development_kit	Mozilla Firefox before 3.6.26 and 4.x through 9.0, Thunderbird before 3.1.18 and 5.0 through 9.0, and SeaMonkey before 2.7 allow remote attackers to cause a denial of service (memory corruption and a…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2012-0449	2024-11-21 10:34	2012-02-2	Show	GitHub Exploit DB Packet Storm

295454	-	mozilla	firefox thunderbird seamonkey	Mozilla Firefox 4.x through 9.0, Thunderbird 5.0 through 9.0, and SeaMonkey before 2.7 do not properly initialize data for image/vnd.microsoft.icon images, which allows remote attackers to obtain pot…	CWE-200 Information Exposure	CVE-2012-0447	2024-11-21 10:34	2012-02-2	Show	GitHub Exploit DB Packet Storm

295455	-	mozilla	firefox thunderbird seamonkey	Multiple cross-site scripting (XSS) vulnerabilities in Mozilla Firefox 4.x through 9.0, Thunderbird 5.0 through 9.0, and SeaMonkey before 2.7 allow remote attackers to inject arbitrary web script or …	CWE-79 Cross-site Scripting	CVE-2012-0446	2024-11-21 10:34	2012-02-2	Show	GitHub Exploit DB Packet Storm

295456	-	mozilla	firefox thunderbird seamonkey	Mozilla Firefox 4.x through 9.0, Thunderbird 5.0 through 9.0, and SeaMonkey before 2.7 allow remote attackers to bypass the HTML5 frame-navigation policy and replace arbitrary sub-frames by creating …	CWE-264 Permissions, Privileges, and Access Controls	CVE-2012-0445	2024-11-21 10:34	2012-02-2	Show	GitHub Exploit DB Packet Storm

295457	-	mozilla debian suse opensuse canonical	thunderbird seamonkey firefox debian_linux linux_enterprise_server linux_enterprise_desktop opensuse linux_enterprise_software_development_kit ubuntu_linux	Mozilla Firefox before 3.6.26 and 4.x through 9.0, Thunderbird before 3.1.18 and 5.0 through 9.0, and SeaMonkey before 2.7 do not properly initialize nsChildView data structures, which allows remote …	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2012-0444	2024-11-21 10:34	2012-02-2	Show	GitHub Exploit DB Packet Storm

295458	-	mozilla	firefox thunderbird seamonkey	Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 4.x through 9.0, Thunderbird 5.0 through 9.0, and SeaMonkey before 2.7 allow remote attackers to cause a denial of servic…	NVD-CWE-noinfo	CVE-2012-0443	2024-11-21 10:34	2012-02-2	Show	GitHub Exploit DB Packet Storm

295459	-	mozilla debian suse opensuse	thunderbird seamonkey firefox debian_linux linux_enterprise_server linux_enterprise_desktop opensuse linux_enterprise_software_development_kit	Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.6.26 and 4.x through 9.0, Thunderbird before 3.1.18 and 5.0 through 9.0, and SeaMonkey before 2.7 allow remote a…	NVD-CWE-noinfo	CVE-2012-0442	2024-11-21 10:34	2012-02-2	Show	GitHub Exploit DB Packet Storm

295460	-	apache debian opensuse suse redhat	http_server debian_linux opensuse linux_enterprise_software_development_kit linux_enterprise_server enterprise_linux_desktop enterprise_linux_server enterprise_linux_workstation<…	protocol.c in the Apache HTTP Server 2.2.x through 2.2.21 does not properly restrict header information during construction of Bad Request (aka 400) error documents, which allows remote attackers to …	NVD-CWE-noinfo	CVE-2012-0053	2024-11-21 10:34	2012-01-28	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed