Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 11, 2026, 6:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
217031 5 警告 シスコシステムズ - Cisco WebEx Meeting Server の Web フレームワークにおける重要な情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2014-3286 2014-06-10 16:50 2014-06-6 Show GitHub Exploit DB Packet Storm
217032 5 警告 シスコシステムズ - Cisco Unified Communications Domain Manager の VOSS の Web フレームワークにおける重要なユーザ情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2014-3281 2014-06-10 16:49 2014-06-6 Show GitHub Exploit DB Packet Storm
217033 5 警告 シスコシステムズ - Cisco Unified Communications Domain Manager の VOSS の Web フレームワークにおけるアカウントを列挙される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2014-3278 2014-06-10 16:49 2014-06-6 Show GitHub Exploit DB Packet Storm
217034 10 危険 Libav - Libav における脆弱性 CWE-noinfo
情報不足 		CVE-2014-3984 2014-06-10 16:19 2014-06-1 Show GitHub Exploit DB Packet Storm
217035 2.6 注意 MediaWiki - MediaWiki の Special:PasswordReset におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-3966 2014-06-10 16:15 2014-05-29 Show GitHub Exploit DB Packet Storm
217036 6.5 警告 Developer Express - DevExpress ASPxFileManager Control for ASP.NET WebForms and MVC におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2014-2575 2014-06-10 16:10 2014-04-17 Show GitHub Exploit DB Packet Storm
217037 7.5 危険 DELL EMC (旧 EMC Corporation) - EMC Documentum Content Server における DQL インジェクション攻撃を実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2014-2508 2014-06-10 15:35 2014-06-5 Show GitHub Exploit DB Packet Storm
217038 8.5 危険 DELL EMC (旧 EMC Corporation) - EMC Documentum Content Server における任意のコマンドを実行される脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2014-2507 2014-06-10 15:35 2014-06-5 Show GitHub Exploit DB Packet Storm
217039 8.5 危険 DELL EMC (旧 EMC Corporation) - EMC Documentum Content Server におけるシステムオブジェクト作成用のスーパーユーザ権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2014-2506 2014-06-10 15:34 2014-06-5 Show GitHub Exploit DB Packet Storm
217040 5 警告 DDSN Interactive - DDSN Interactive cm3 Acora CMS における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2013-4728 2014-06-10 13:29 2013-08-26 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 11, 2026, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
296131 - ibm websphere_application_server IBM WebSphere Application Server (WAS) 6.0 through 6.0.2.43, 6.1 before 6.1.0.43, 7.0 before 7.0.0.23, and 8.0 before 8.0.0.3 computes hash values for form parameters without restricting the ability … CWE-20
 Improper Input Validation  		CVE-2012-0193 2024-11-21 10:34 2012-01-20 Show GitHub Exploit DB Packet Storm
296132 - openssl openssl OpenSSL 0.9.8s and 1.0.0f does not properly support DTLS applications, which allows remote attackers to cause a denial of service (crash) via unspecified vectors related to an out-of-bounds read. NO… CWE-399
 Resource Management Errors 		CVE-2012-0050 2024-11-21 10:34 2012-01-20 Show GitHub Exploit DB Packet Storm
296133 - cisco digital_media_manager Cisco Digital Media Manager 5.2.2 and earlier, and 5.2.3, allows remote authenticated users to execute arbitrary code via vectors involving a URL and an administrative resource, aka Bug ID CSCts63878. CWE-94
Code Injection 		CVE-2012-0329 2024-11-21 10:34 2012-01-20 Show GitHub Exploit DB Packet Storm
296134 - yahoo messenger Integer overflow in the CYImage::LoadJPG method in YImage.dll in Yahoo! Messenger before 11.5.0.155, when photo sharing is enabled, might allow remote attackers to execute arbitrary code via a crafte… CWE-189
Numeric Errors 		CVE-2012-0268 2024-11-21 10:34 2012-01-20 Show GitHub Exploit DB Packet Storm
296135 - gnu
eric_m_ludlam 		emacs
cedet 		Untrusted search path vulnerability in EDE in CEDET before 1.0.1, as used in GNU Emacs before 23.4 and other products, allows local users to gain privileges via a crafted Lisp expression in a Project… NVD-CWE-Other
CVE-2012-0035 2024-11-21 10:34 2012-01-20 Show GitHub Exploit DB Packet Storm
296136 - apache tomcat Apache Tomcat 5.5.x before 5.5.35, 6.x before 6.0.34, and 7.x before 7.0.23 uses an inefficient approach for handling parameters, which allows remote attackers to cause a denial of service (CPU consu… CWE-189
Numeric Errors 		CVE-2012-0022 2024-11-21 10:34 2012-01-19 Show GitHub Exploit DB Packet Storm
296137 - oracle
mysql 		mysql Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.x and 5.5.x allows remote authenticated users to affect availability via unknown vectors, a different vulnerability than CV… NVD-CWE-noinfo
CVE-2012-0120 2024-11-21 10:34 2012-01-19 Show GitHub Exploit DB Packet Storm
296138 - oracle
mysql 		mysql Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.x and 5.5.x allows remote authenticated users to affect availability via unknown vectors, a different vulnerability than CV… NVD-CWE-noinfo
CVE-2012-0119 2024-11-21 10:34 2012-01-19 Show GitHub Exploit DB Packet Storm
296139 - oracle
mysql 		mysql Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.x and 5.5.x allows remote authenticated users to affect confidentiality and availability via unknown vectors, a different v… NVD-CWE-noinfo
CVE-2012-0118 2024-11-21 10:34 2012-01-19 Show GitHub Exploit DB Packet Storm
296140 - oracle mysql Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.x allows remote authenticated users to affect availability via unknown vectors, a different vulnerability than CVE-2012-048… NVD-CWE-noinfo
CVE-2012-0117 2024-11-21 10:34 2012-01-19 Show GitHub Exploit DB Packet Storm