Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 9, 2026, 2 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
216921	5	警告	ヒューレット・パッカード	-	HP IceWall SSO および IceWall MCRP におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2014-2604	2014-05-26 11:53	2014-05-19	Show	GitHub Exploit DB Packet Storm

216922	4.3	警告	Flying Cart	-	Flying Cart におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2014-3846	2014-05-26 10:23	2014-05-21	Show	GitHub Exploit DB Packet Storm

216923	5.1	警告	ISC, Inc. トレンドマイクロ日本電気アップルサイバートラスト株式会社富士通 SSH コミュニケーションズ・セキュリティアライドテレシス古河電気工業サン・マイクロシステムズターボリナックスヒューレット・パッカード OpenSSL Project BEAシステムズセンドメール社日立 OpenOffice.org Project オラクルレッドハット	-	複数の RSA 実装において署名が正しく検証されない脆弱性	CWE-255 証明書・パスワード管理	CVE-2006-4339	2014-05-23 18:35	2006-09-5	Show	GitHub Exploit DB Packet Storm

216924	5	警告	アドビシステムズ日立	-	Adobe Reader における署名を正しく検証しない脆弱性	CWE-255 証明書・パスワード管理	CVE-2006-4339	2014-05-23 18:33	2012-08-30	Show	GitHub Exploit DB Packet Storm

216925	5	警告	日立	-	Hitachi Web ServerのSSLクライアント認証における脆弱性	CWE-20 不適切な入力確認	CVE-2006-4339 CVE-2007-5810	2014-05-23 18:32	2007-10-5	Show	GitHub Exploit DB Packet Storm

216926	4.7	警告	Linux	-	PowerPC プラットフォーム上で稼動する Linux Kernel におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2014-2673	2014-05-23 18:28	2014-03-23	Show	GitHub Exploit DB Packet Storm

216927	1.9	注意	GNU Project Debian Canonical Novell オラクル	-	マルチコア CPU の共有 L3 キャッシュに対するサイドチャネル攻撃	CWE-200 情報漏えい	CVE-2013-4242	2014-05-23 14:52	2013-07-29	Show	GitHub Exploit DB Packet Storm

216928	4.6	警告	レッドハット GNU Project サイバートラスト株式会社オラクル	-	GNU Texinfo の texindex コマンドにおけるヒープオーバーフローの脆弱性	-	CVE-2006-4810	2014-05-23 14:52	2006-09-15	Show	GitHub Exploit DB Packet Storm

216929	10	危険	Canonical	-	LTSP Display Manager の wwm 用デフォルトのキーバインドにおける任意のコマンドを実行される脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2012-1166	2014-05-23 14:08	2012-03-12	Show	GitHub Exploit DB Packet Storm

216930	5	警告	VMTurbo	-	VMTurbo Operations Manager の cgi-bin/help/doIt.cgi におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2014-3806	2014-05-23 13:50	2014-05-7	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 9, 2026, 5:07 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
292601	-	apple	safari	Apple Safari before 6.0.1 makes http requests for https URIs in certain circumstances involving a paste into the address bar, which allows user-assisted remote attackers to obtain sensitive informati…	CWE-310 Cryptographic Issues	CVE-2012-3715	2024-11-21 10:41	2012-09-21	Show	GitHub Exploit DB Packet Storm

292602	-	apple	safari	The Form Autofill feature in Apple Safari before 6.0.1 does not restrict the filled fields to the set of fields contained in an Autofill popover, which allows remote attackers to obtain the Me card f…	CWE-264 CWE-200 Permissions, Privileges, and Access Controls Information Exposure	CVE-2012-3714	2024-11-21 10:41	2012-09-21	Show	GitHub Exploit DB Packet Storm

292603	-	apple	safari	Apple Safari before 6.0.1 does not properly handle the Quarantine attribute of HTML documents, which allows user-assisted remote attackers to read arbitrary files by leveraging the presence of a down…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2012-3713	2024-11-21 10:41	2012-09-21	Show	GitHub Exploit DB Packet Storm

292604	-	freeradius	freeradius	Stack-based buffer overflow in the cbtls_verify function in FreeRADIUS 2.1.10 through 2.1.12, when using TLS-based EAP methods, allows remote attackers to cause a denial of service (server crash) and…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2012-3547	2024-11-21 10:41	2012-09-19	Show	GitHub Exploit DB Packet Storm

292605	-	freedesktop	libdbus	libdbus 1.5.x and earlier, when used in setuid or other privileged programs in X.org and possibly other products, allows local users to gain privileges and execute arbitrary code via the DBUS_SYSTEM_…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2012-3524	2024-11-21 10:41	2012-09-19	Show	GitHub Exploit DB Packet Storm

292606	-	cisco	ios	The SSLVPN implementation in Cisco IOS 15.1 and 15.2, when DTLS is enabled, does not properly handle certain outbound ACL configurations, which allows remote authenticated users to cause a denial of …	NVD-CWE-Other	CVE-2012-3924	2024-11-21 10:41	2012-09-16	Show	GitHub Exploit DB Packet Storm

292607	-	cisco	ios	The SSLVPN implementation in Cisco IOS 12.4, 15.0, 15.1, and 15.2, when DTLS is not enabled, does not properly handle certain outbound ACL configurations, which allows remote authenticated users to c…	NVD-CWE-noinfo	CVE-2012-3923	2024-11-21 10:41	2012-09-16	Show	GitHub Exploit DB Packet Storm

292608	-	cisco	application_control_engine_module	The Cisco Application Control Engine (ACE) module 3.0 for Cisco Catalyst switches and Cisco routers does not properly monitor Load Balancer (LB) queues, which allows remote attackers to cause a denia…	CWE-399 Resource Management Errors	CVE-2012-3919	2024-11-21 10:41	2012-09-16	Show	GitHub Exploit DB Packet Storm

292609	-	cisco	ios	The DMVPN tunnel implementation in Cisco IOS 15.2 allows remote attackers to cause a denial of service (persistent IKE state) via a large volume of hub-to-spoke traffic, aka Bug ID CSCtq39602.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2012-3915	2024-11-21 10:41	2012-09-16	Show	GitHub Exploit DB Packet Storm

292610	-	cisco	identity_services_engine_software identity_services_engine	Multiple cross-site request forgery (CSRF) vulnerabilities in the ISE Administrator user interface (aka the Apache Tomcat interface) on Cisco Identity Services Engine (ISE) 3300 series appliances bef…	CWE-352 Origin Validation Error	CVE-2012-3908	2024-11-21 10:41	2012-09-16	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed