Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 10, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
216861 6.5 警告 IBM - 複数の IBM 製品における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2013-4016 2014-05-28 14:45 2013-06-7 Show GitHub Exploit DB Packet Storm
216862 3.5 注意 IBM - IBM Maximo Asset Management および SmartCloud Control Desk の frontcontroller.jsp における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2013-2998 2014-05-28 14:45 2013-04-12 Show GitHub Exploit DB Packet Storm
216863 4.3 警告 IBM - IBM Maximo Asset Management および SmartCloud Control Desk における CRLF インジェクションの脆弱性 CWE-Other
その他 		CVE-2012-3333 2014-05-28 14:44 2012-06-7 Show GitHub Exploit DB Packet Storm
216864 6.8 警告 IBM - IBM Sametime Proxy Server and Web Client の WebPlayer におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2014-3015 2014-05-28 14:30 2014-05-21 Show GitHub Exploit DB Packet Storm
216865 5 警告 IBM - IBM Sametime の Meeting Server における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2014-3867 2014-05-28 14:29 2014-05-21 Show GitHub Exploit DB Packet Storm
216866 4.3 警告 IBM - IBM Sametime の Meeting Server におけるユーザの検索アクションを行われる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2014-0906 2014-05-28 14:28 2014-05-21 Show GitHub Exploit DB Packet Storm
216867 5 警告 IBM - IBM Sametime の Meeting Server における Cookie をキャプチャされる脆弱性 CWE-200
情報漏えい 		CVE-2013-3984 2014-05-28 14:28 2013-06-7 Show GitHub Exploit DB Packet Storm
216868 5 警告 IBM - IBM Sametime の Meeting Server における不特定のインストール情報および技術データを取得される脆弱性 CWE-200
情報漏えい 		CVE-2013-3982 2014-05-28 14:27 2013-06-7 Show GitHub Exploit DB Packet Storm
216869 5 警告 IBM - IBM Sametime の Meeting Server における任意のユーザのアバターの写真をダウンロードされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-3981 2014-05-28 14:27 2013-06-7 Show GitHub Exploit DB Packet Storm
216870 5 警告 IBM - IBM Sametime の Meeting Server におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2013-3980 2014-05-28 14:26 2013-06-7 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 11, 2026, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
292461 - mozilla
suse
opensuse
canonical
redhat 		firefox
seamonkey
thunderbird
thunderbird_esr
linux_enterprise_server
linux_enterprise_desktop
opensuse
linux_enterprise_software_development_kit
ubuntu_linux
enterprise_li… 		Mozilla Firefox before 16.0.2, Firefox ESR 10.x before 10.0.10, Thunderbird before 16.0.2, Thunderbird ESR 10.x before 10.0.10, and SeaMonkey before 2.13.2 allow remote attackers to bypass the Same O… CWE-74
Injection 		CVE-2012-4196 2024-11-21 10:42 2012-10-30 Show GitHub Exploit DB Packet Storm
292462 - mozilla
suse
opensuse
canonical
redhat 		firefox
seamonkey
thunderbird
thunderbird_esr
linux_enterprise_server
linux_enterprise_desktop
opensuse
linux_enterprise_software_development_kit
ubuntu_linux
enterprise_li… 		The nsLocation::CheckURL function in Mozilla Firefox before 16.0.2, Firefox ESR 10.x before 10.0.10, Thunderbird before 16.0.2, Thunderbird ESR 10.x before 10.0.10, and SeaMonkey before 2.13.2 does n… CWE-79
Cross-site Scripting 		CVE-2012-4195 2024-11-21 10:42 2012-10-30 Show GitHub Exploit DB Packet Storm
292463 - mozilla
suse
opensuse
canonical
redhat 		firefox
seamonkey
thunderbird
thunderbird_esr
linux_enterprise_server
linux_enterprise_desktop
opensuse
linux_enterprise_software_development_kit
ubuntu_linux
enterprise_li… 		Mozilla Firefox before 16.0.2, Firefox ESR 10.x before 10.0.10, Thunderbird before 16.0.2, Thunderbird ESR 10.x before 10.0.10, and SeaMonkey before 2.13.2 do not prevent use of the valueOf method to… CWE-79
Cross-site Scripting 		CVE-2012-4194 2024-11-21 10:42 2012-10-30 Show GitHub Exploit DB Packet Storm
292464 - adobe shockwave_player Array index error in Adobe Shockwave Player before 11.6.8.638 allows attackers to execute arbitrary code via unspecified vectors. CWE-20
 Improper Input Validation  		CVE-2012-4176 2024-11-21 10:42 2012-10-24 Show GitHub Exploit DB Packet Storm
292465 - adobe shockwave_player Buffer overflow in Adobe Shockwave Player before 11.6.8.638 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2012-4172, CVE-2012-4173, CVE-2012-4… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2012-4175 2024-11-21 10:42 2012-10-24 Show GitHub Exploit DB Packet Storm
292466 - adobe shockwave_player Buffer overflow in Adobe Shockwave Player before 11.6.8.638 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2012-4172, CVE-2012-4173, CVE-2012-4… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2012-4174 2024-11-21 10:42 2012-10-24 Show GitHub Exploit DB Packet Storm
292467 - adobe shockwave_player Buffer overflow in Adobe Shockwave Player before 11.6.8.638 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2012-4172, CVE-2012-4174, CVE-2012-4… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2012-4173 2024-11-21 10:42 2012-10-24 Show GitHub Exploit DB Packet Storm
292468 - adobe shockwave_player Buffer overflow in Adobe Shockwave Player before 11.6.8.638 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2012-4173, CVE-2012-4174, CVE-2012-4… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2012-4172 2024-11-21 10:42 2012-10-24 Show GitHub Exploit DB Packet Storm
292469 - cipherdyne fwknop Buffer overflow in the run_last_args function in client/fwknop.c in fwknop before 2.0.3, when processing --last, might allow local users to cause a denial of service (client crash) and possibly execu… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2012-4436 2024-11-21 10:42 2012-10-23 Show GitHub Exploit DB Packet Storm
292470 - cipherdyne fwknop fwknop before 2.0.3 does not properly validate IP addresses, which allows remote authenticated users to cause a denial of service (server crash) via a long IP address. CWE-20
 Improper Input Validation  		CVE-2012-4435 2024-11-21 10:42 2012-10-23 Show GitHub Exploit DB Packet Storm