Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 11, 2026, 6:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
217181	2.1	注意	レッドハット	-	Red Hat Enterprise Virtualization Manager reports パッケージで使用される ovirt-engine-reports における重要な情報を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2014-0201	2014-06-2 16:42	2014-05-27	Show	GitHub Exploit DB Packet Storm

217182	2.1	注意	レッドハット	-	Red Hat Enterprise Virtualization Manager reports パッケージにおける重要な情報を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2014-0200	2014-06-2 16:41	2014-05-27	Show	GitHub Exploit DB Packet Storm

217183	2.1	注意	レッドハット	-	Red Hat Enterprise Virtualization Manager reports パッケージで使用される ovirt-engine-reports の setup スクリプトにおける重要な情報を取得される脆弱性	CWE-310 暗号の問題	CVE-2014-0199	2014-06-2 16:40	2014-05-27	Show	GitHub Exploit DB Packet Storm

217184	6.5	警告	Jasig	-	uPortal における任意のポートレットを設定される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2014-3417	2014-06-2 15:18	2014-05-23	Show	GitHub Exploit DB Packet Storm

217185	6.5	警告	Jasig	-	uPortal における任意のポートレットを管理される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2014-3416	2014-06-2 15:17	2014-05-22	Show	GitHub Exploit DB Packet Storm

217186	5	警告	Attiks	-	Drupal 用 Google Authenticator login モジュールにおけるアクセス権を取得される脆弱性	CWE-287 不適切な認証	CVE-2013-4178	2014-06-2 15:05	2013-05-15	Show	GitHub Exploit DB Packet Storm

217187	5	警告	Attiks	-	Drupal 用 Google Authenticator login モジュールにおける二要素認証の要件を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2013-4177	2014-06-2 15:05	2013-05-15	Show	GitHub Exploit DB Packet Storm

217188	5	警告	シスコシステムズ	-	Cisco Wide Area Application Services におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2014-3285	2014-06-2 14:26	2014-05-28	Show	GitHub Exploit DB Packet Storm

217189	5.8	警告	シスコシステムズ	-	Cisco Unified Communications Domain Manager の VOSS の Web フレームワークにおけるオープンリダイレクトの脆弱性	CWE-Other その他	CVE-2014-3283	2014-06-2 14:25	2014-05-28	Show	GitHub Exploit DB Packet Storm

217190	4	警告	シスコシステムズ	-	Cisco Unified Communications Domain Manager の VOSS の Web フレームワークにおける重要な番号変換情報を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2014-3282	2014-06-2 14:24	2014-05-28	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 12, 2026, 5:06 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
293941	-	solarwinds	orion_network_performance_monitor	Multiple cross-site scripting (XSS) vulnerabilities in SolarWinds Orion Network Performance Monitor (NPM) before 10.3.1 allow remote attackers to inject arbitrary web script or HTML via the (1) syslo…	CWE-79 Cross-site Scripting	CVE-2012-2577	2024-11-21 10:39	2012-08-13	Show	GitHub Exploit DB Packet Storm

293942	-	google	chrome	The PDF functionality in Google Chrome before 21.0.1180.75 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger out-of-bounds write …	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2012-2863	2024-11-21 10:39	2012-08-9	Show	GitHub Exploit DB Packet Storm

293943	-	google	chrome	Use-after-free vulnerability in the PDF functionality in Google Chrome before 21.0.1180.75 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted…	CWE-399 Resource Management Errors	CVE-2012-2862	2024-11-21 10:39	2012-08-9	Show	GitHub Exploit DB Packet Storm

293944	-	linux	linux_kernel	The copy_creds function in kernel/cred.c in the Linux kernel before 3.3.2 provides an invalid replacement session keyring to a child process, which allows local users to cause a denial of service (pa…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2012-2745	2024-11-21 10:39	2012-08-9	Show	GitHub Exploit DB Packet Storm

293945	-	linux	linux_kernel	net/ipv6/netfilter/nf_conntrack_reasm.c in the Linux kernel before 2.6.34, when the nf_conntrack_ipv6 module is enabled, allows remote attackers to cause a denial of service (NULL pointer dereference…	NVD-CWE-Other	CVE-2012-2744	2024-11-21 10:39	2012-08-9	Show	GitHub Exploit DB Packet Storm

293946	-	fenrir-inc	sleipnir_mobile	The Sleipnir Mobile application 2.2.0 and earlier and Sleipnir Mobile Black Edition application 2.2.0 and earlier for Android allow remote attackers to execute arbitrary Java methods, and obtain sens…	CWE-94 Code Injection	CVE-2012-2649	2024-11-21 10:39	2012-08-9	Show	GitHub Exploit DB Packet Storm

293947	-	qemu	qemu	The bdrv_open function in Qemu 1.0 does not properly handle the failure of the mkstemp function, when in snapshot node, which allows local users to overwrite or read arbitrary files via a symlink att…	NVD-CWE-Other	CVE-2012-2652	2024-11-21 10:39	2012-08-8	Show	GitHub Exploit DB Packet Storm

293948	-	goodiware	goodreader	Cross-site scripting (XSS) vulnerability in the GoodReader app 3.16 and earlier for iOS on the iPad, and 3.15.1 and earlier for iOS on the iPhone and iPod touch, allows remote attackers to inject arb…	CWE-79 Cross-site Scripting	CVE-2012-2648	2024-11-21 10:39	2012-08-8	Show	GitHub Exploit DB Packet Storm

293949	-	apache libreoffice redhat canonical debian	openoffice libreoffice enterprise_linux ubuntu_linux enterprise_linux_server_from_rhui_6 enterprise_linux_for_ibm_z_systems debian_linux enterprise_linux_desktop enterprise_li…	Multiple heap-based buffer overflows in the XML manifest encryption tag parsing functionality in OpenOffice.org and LibreOffice before 3.5.5 allow remote attackers to cause a denial of service and po…	CWE-787 Out-of-bounds Write	CVE-2012-2665	2024-11-21 10:39	2012-08-7	Show	GitHub Exploit DB Packet Storm

293950	-	cisco	anyconnect_secure_mobility_client	Cisco AnyConnect Secure Mobility Client 3.0 before 3.0.08057 does not verify the certificate name in an X.509 certificate during WebLaunch of IPsec, which allows man-in-the-middle attackers to spoof …	CWE-310 Cryptographic Issues	CVE-2012-2500	2024-11-21 10:39	2012-08-7	Show	GitHub Exploit DB Packet Storm