Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 10, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
217071 4.3 警告 Canonical - Software Properties の ppa.py におけるパッケージリポジトリのGPG 鍵を偽装される脆弱性 CWE-20
不適切な入力確認 		CVE-2011-4407 2014-05-16 15:40 2011-11-7 Show GitHub Exploit DB Packet Storm
217072 7.6 危険 Marc Lehmann - rxvt-unicode における任意の X Window のプロパティを操作される脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2014-3121 2014-05-16 15:29 2014-04-26 Show GitHub Exploit DB Packet Storm
217073 10 危険 オラクル - Debian GNU/Linux および Ubuntu 上で稼動する OpenJDK における脆弱性 CWE-noinfo
情報不足 		CVE-2014-2405 2014-05-16 15:09 2014-04-24 Show GitHub Exploit DB Packet Storm
217074 10 危険 オラクル - Debian GNU/Linux および Ubuntu 上で稼動する OpenJDK における脆弱性 CWE-noinfo
情報不足 		CVE-2014-0462 2014-05-16 15:09 2014-04-24 Show GitHub Exploit DB Packet Storm
217075 6.8 警告 レッドハット - IcedTea6 および IcedTea-Web の Java Network Launching Protocol の実装におけるローカルファイルへのアクセスを許可される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-2514 2014-05-16 14:47 2011-07-27 Show GitHub Exploit DB Packet Storm
217076 5 警告 レッドハット - IcedTea6 および IcedTea-Web の Java Network Launching Protocol の実装におけるユーザ名などを取得される脆弱性 CWE-200
情報漏えい 		CVE-2011-2513 2014-05-16 14:47 2011-07-27 Show GitHub Exploit DB Packet Storm
217077 6.9 警告 BMC Software - BMC PATROL for AIX における権限を取得される脆弱性 CWE-Other
その他 		CVE-2014-2591 2014-05-16 14:12 2014-04-9 Show GitHub Exploit DB Packet Storm
217078 6.8 警告 Open Assessment Technologies S.A. - Open Assessment Technologies TAO におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2014-2989 2014-05-16 12:24 2014-05-7 Show GitHub Exploit DB Packet Storm
217079 10 危険 ShenZhen Foscam Intelligent Technology - Foscam IP camera における任意のカメラを偽装またはハイジャックされる脆弱性 CWE-255
証明書・パスワード管理 		CVE-2014-1849 2014-05-16 12:19 2014-05-8 Show GitHub Exploit DB Packet Storm
217080 6.8 警告 OpenVPN Technologies - OpenVPN Access Server の管理 Web インターフェースにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2013-2692 2014-05-16 12:18 2013-05-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 10, 2026, 4:58 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
296061 - ntrglobal ntr_activex_control The StopModule method in the NTR ActiveX control before 2.0.4.8 allows remote attackers to execute arbitrary code via a crafted lModule parameter that triggers use of an arbitrary memory address as a… CWE-20
 Improper Input Validation  		CVE-2012-0267 2024-11-21 10:34 2012-01-15 Show GitHub Exploit DB Packet Storm
296062 - ntrglobal ntr_activex_control Multiple stack-based buffer overflows in the NTR ActiveX control before 2.0.4.8 allow remote attackers to execute arbitrary code via (1) a long bstrUrl parameter to the StartModule method, (2) a long… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2012-0266 2024-11-21 10:34 2012-01-15 Show GitHub Exploit DB Packet Storm
296063 - gnome glib GLib 2.31.8 and earlier, when the g_str_hash function is used, computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to… CWE-310
Cryptographic Issues 		CVE-2012-0039 2024-11-21 10:34 2012-01-15 Show GitHub Exploit DB Packet Storm
296064 - openstack essex
nova 		Nova 2011.3 and Essex, when using the OpenStack API, allows remote authenticated users to bypass access restrictions for tenants of other users via an OSAPI request with a modified project_id URI par… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2012-0030 2024-11-21 10:34 2012-01-14 Show GitHub Exploit DB Packet Storm
296065 - cogentdatahub cogent_datahub
opc_datahub
cascade_datahub 		CRLF injection vulnerability in Cogent DataHub 7.1.2 and earlier, Cascade DataHub 6.4.20 and earlier, and OPC DataHub 6.4.20 and earlier allows remote attackers to inject arbitrary HTTP headers and c… CWE-94
Code Injection 		CVE-2012-0310 2024-11-21 10:34 2012-01-13 Show GitHub Exploit DB Packet Storm
296066 - cogentdatahub cogent_datahub
opc_datahub
cascade_datahub 		Cross-site scripting (XSS) vulnerability in Cogent DataHub 7.1.2 and earlier, Cascade DataHub 6.4.20 and earlier, and OPC DataHub 6.4.20 and earlier allows remote attackers to inject arbitrary web sc… CWE-79
Cross-site Scripting 		CVE-2012-0309 2024-11-21 10:34 2012-01-13 Show GitHub Exploit DB Packet Storm
296067 - microsoft windows_server_2008
windows_7
windows_xp
windows_server_2003
windows_vista 		Incomplete blacklist vulnerability in the Windows Packager configuration in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and … NVD-CWE-Other
CVE-2012-0013 2024-11-21 10:34 2012-01-11 Show GitHub Exploit DB Packet Storm
296068 - microsoft windows_xp
windows_server_2003 		Untrusted search path vulnerability in the Windows Object Packager configuration in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allows local users to gain privileges via a Trojan horse execu… NVD-CWE-Other
CVE-2012-0009 2024-11-21 10:34 2012-01-11 Show GitHub Exploit DB Packet Storm
296069 - microsoft anti-cross_site_scripting_library The Microsoft Anti-Cross Site Scripting (AntiXSS) Library 3.x and 4.0 does not properly evaluate characters after the detection of a Cascading Style Sheets (CSS) escaped character, which allows remot… CWE-79
Cross-site Scripting 		CVE-2012-0007 2024-11-21 10:34 2012-01-11 Show GitHub Exploit DB Packet Storm
296070 - microsoft windows_server_2008
windows_xp
windows_server_2003
windows_vista 		The Client/Server Run-time Subsystem (aka CSRSS) in the Win32 subsystem in Microsoft Windows XP SP2 and SP3, Server 2003 SP2, Vista SP2, and Server 2008 SP2, when a Chinese, Japanese, or Korean syste… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2012-0005 2024-11-21 10:34 2012-01-11 Show GitHub Exploit DB Packet Storm