Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 10, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
217071 4.3 警告 Canonical - Software Properties の ppa.py におけるパッケージリポジトリのGPG 鍵を偽装される脆弱性 CWE-20
不適切な入力確認
CVE-2011-4407 2014-05-16 15:40 2011-11-7 Show GitHub Exploit DB Packet Storm
217072 7.6 危険 Marc Lehmann - rxvt-unicode における任意の X Window のプロパティを操作される脆弱性 CWE-78
OSコマンド・インジェクション
CVE-2014-3121 2014-05-16 15:29 2014-04-26 Show GitHub Exploit DB Packet Storm
217073 10 危険 オラクル - Debian GNU/Linux および Ubuntu 上で稼動する OpenJDK における脆弱性 CWE-noinfo
情報不足
CVE-2014-2405 2014-05-16 15:09 2014-04-24 Show GitHub Exploit DB Packet Storm
217074 10 危険 オラクル - Debian GNU/Linux および Ubuntu 上で稼動する OpenJDK における脆弱性 CWE-noinfo
情報不足
CVE-2014-0462 2014-05-16 15:09 2014-04-24 Show GitHub Exploit DB Packet Storm
217075 6.8 警告 レッドハット - IcedTea6 および IcedTea-Web の Java Network Launching Protocol の実装におけるローカルファイルへのアクセスを許可される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2011-2514 2014-05-16 14:47 2011-07-27 Show GitHub Exploit DB Packet Storm
217076 5 警告 レッドハット - IcedTea6 および IcedTea-Web の Java Network Launching Protocol の実装におけるユーザ名などを取得される脆弱性 CWE-200
情報漏えい
CVE-2011-2513 2014-05-16 14:47 2011-07-27 Show GitHub Exploit DB Packet Storm
217077 6.9 警告 BMC Software - BMC PATROL for AIX における権限を取得される脆弱性 CWE-Other
その他
CVE-2014-2591 2014-05-16 14:12 2014-04-9 Show GitHub Exploit DB Packet Storm
217078 6.8 警告 Open Assessment Technologies S.A. - Open Assessment Technologies TAO におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2014-2989 2014-05-16 12:24 2014-05-7 Show GitHub Exploit DB Packet Storm
217079 10 危険 ShenZhen Foscam Intelligent Technology - Foscam IP camera における任意のカメラを偽装またはハイジャックされる脆弱性 CWE-255
証明書・パスワード管理
CVE-2014-1849 2014-05-16 12:19 2014-05-8 Show GitHub Exploit DB Packet Storm
217080 6.8 警告 OpenVPN Technologies - OpenVPN Access Server の管理 Web インターフェースにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2013-2692 2014-05-16 12:18 2013-05-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 11, 2026, 4:09 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
294341 - mozilla firefox
thunderbird_esr
jsinfer.cpp in Mozilla Firefox ESR 10.x before 10.0.5 and Thunderbird ESR 10.x before 10.0.5 does not properly determine data types, which allows remote attackers to cause a denial of service (memory… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2012-1939 2024-11-21 10:38 2012-06-6 Show GitHub Exploit DB Packet Storm
294342 - mozilla
suse
opensuse
redhat
firefox
seamonkey
thunderbird
linux_enterprise_server
linux_enterprise_desktop
opensuse
linux_enterprise_software_development_kit
enterprise_linux_server
enterprise_linux_serv…
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 13.0, Thunderbird before 13.0, and SeaMonkey before 2.10 allow remote attackers to cause a denial of service (memo… NVD-CWE-noinfo
CVE-2012-1938 2024-11-21 10:38 2012-06-6 Show GitHub Exploit DB Packet Storm
294343 - mozilla seamonkey
firefox
thunderbird
thunderbird_esr
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 4.x through 12.0, Firefox ESR 10.x before 10.0.5, Thunderbird 5.0 through 12.0, Thunderbird ESR 10.x before 10.0.5, and S… NVD-CWE-noinfo
CVE-2012-1937 2024-11-21 10:38 2012-06-6 Show GitHub Exploit DB Packet Storm
294344 - openstack horizon Session fixation vulnerability in OpenStack Dashboard (Horizon) folsom-1 and 2012.1 allows remote attackers to hijack web sessions via the sessionid cookie. NVD-CWE-Other
CVE-2012-2144 2024-11-21 10:38 2012-06-6 Show GitHub Exploit DB Packet Storm
294345 - openstack horizon Cross-site scripting (XSS) vulnerability in the refresh mechanism in the log viewer in horizon/static/horizon/js/horizon.js in OpenStack Dashboard (Horizon) folsom-1 and 2012.1 and earlier allows rem… CWE-79
Cross-site Scripting
CVE-2012-2094 2024-11-21 10:38 2012-06-6 Show GitHub Exploit DB Packet Storm
294346 - sympa sympa The archive management (arc_manage) page in wwsympa/wwsympa.fcgi.in in Sympa before 6.1.11 does not check permissions, which allows remote attackers to list, read, and delete arbitrary list archives … CWE-264
Permissions, Privileges, and Access Controls
CVE-2012-2352 2024-11-21 10:38 2012-06-1 Show GitHub Exploit DB Packet Storm
294347 - puppet
fedoraproject
debian
canonical
puppet
puppet_enterprise
fedora
debian_linux
ubuntu_linux
Puppet 2.6.x before 2.6.15 and 2.7.x before 2.7.13, and Puppet Enterprise (PE) Users 1.0, 1.1, 1.2.x, 2.0.x, and 2.5.x before 2.5.1 allows remote authenticated users with agent SSL keys and file-crea… CWE-78
OS Command 
CVE-2012-1988 2024-11-21 10:38 2012-05-30 Show GitHub Exploit DB Packet Storm
294348 - puppet
puppetlabs
puppet
puppet_enterprise
puppet_enterprise_users
Puppet 2.6.x before 2.6.15 and 2.7.x before 2.7.13, and Puppet Enterprise (PE) Users 1.0, 1.1, 1.2.x, 2.0.x, and 2.5.x before 2.5.1 allows remote authenticated users with an authorized SSL key and ce… CWE-264
Permissions, Privileges, and Access Controls
CVE-2012-1986 2024-11-21 10:38 2012-05-30 Show GitHub Exploit DB Packet Storm
294349 - puppet
puppetlabs
puppet
puppet_enterprise
puppet_enterprise_users
Puppet 2.6.x before 2.6.15 and 2.7.x before 2.7.13, and Puppet Enterprise (PE) Users 1.0, 1.1, 1.2.x, 2.0.x, and 2.5.x before 2.5.1 uses predictable file names when installing Mac OS X packages from … CWE-264
Permissions, Privileges, and Access Controls
CVE-2012-1906 2024-11-21 10:38 2012-05-30 Show GitHub Exploit DB Packet Storm
294350 - puppet
puppetlabs
puppet
puppet_enterprise
puppet_enterprise_users
Unspecified vulnerability in Puppet 2.6.x before 2.6.15 and 2.7.x before 2.7.13, and Puppet Enterprise (PE) Users 1.0, 1.1, 1.2.x, 2.0.x, and 2.5.x before 2.5.1 allows remote authenticated users with… NVD-CWE-noinfo
CVE-2012-1987 2024-11-21 10:38 2012-05-30 Show GitHub Exploit DB Packet Storm