Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 12, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
217181 7.5 危険 DLEVIET - DataLife Engine における任意の PHP コードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2013-1412 2014-06-4 15:23 2013-01-21 Show GitHub Exploit DB Packet Storm
217182 10 危険 D-Link Systems, Inc. - 複数の D-Link ネットワーク製品のファームウェアにおけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2014-3936 2014-06-4 15:05 2014-05-15 Show GitHub Exploit DB Packet Storm
217183 7.5 危険 Sensio Labs - Symfony における任意の PHP コードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2013-1397 2014-06-4 14:58 2013-01-17 Show GitHub Exploit DB Packet Storm
217184 7.5 危険 Sensio Labs - Symfony の Yaml::parse 関数における任意の PHP コードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2013-1348 2014-06-4 14:57 2013-01-17 Show GitHub Exploit DB Packet Storm
217185 5 警告 University of California - BOINC の client/cs_account.cpp の PROJECT::write_account_file 関数におけるフォーマットストリングの脆弱性 CWE-134
書式文字列の問題 		CVE-2013-7386 2014-06-4 14:46 2013-04-25 Show GitHub Exploit DB Packet Storm
217186 9.3 危険 University of California - BOINC の XML パーサにおけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2013-2298 2014-06-4 14:45 2013-03-7 Show GitHub Exploit DB Packet Storm
217187 9.3 危険 University of California - BOINC におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2013-2019 2014-06-4 14:45 2013-04-28 Show GitHub Exploit DB Packet Storm
217188 5 警告 University of California - BOINC におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2011-5280 2014-06-4 14:45 2011-11-6 Show GitHub Exploit DB Packet Storm
217189 7.5 危険 XOOPS - XOOPS 用 Glossaire モジュールの glossaire-aff.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2014-3935 2014-06-4 14:35 2014-05-19 Show GitHub Exploit DB Packet Storm
217190 7.5 危険 PHPNUKE - PHP-Nuke 用 Submit News モジュールにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2014-3934 2014-06-4 13:59 2014-05-24 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 12, 2026, 5:06 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
296301 - symantec pcanywhere
altiris_client_management_suite_pcanywhere_solution
altiris_deployment_solution_remote_pcanywhere_solution 		Symantec pcAnywhere through 12.5.3, Altiris IT Management Suite pcAnywhere Solution 7.0 (aka 12.5.x) and 7.1 (aka 12.6.x), Altiris Client Management Suite pcAnywhere Solution 7.0 (aka 12.5.x) and 7.1… NVD-CWE-noinfo
CVE-2012-0290 2024-11-21 10:34 2012-02-7 Show GitHub Exploit DB Packet Storm
296302 - emobile pocket_wifi_firmware
pocket_wifi 		Multiple cross-site request forgery (CSRF) vulnerabilities on the eAccess Pocket WiFi (aka GP02) router before 2.00 with firmware 11.203.11.05.168 and earlier allow remote attackers to hijack the aut… CWE-352
 Origin Validation Error 		CVE-2012-0314 2024-11-21 10:34 2012-02-3 Show GitHub Exploit DB Packet Storm
296303 - mozilla bugzilla Bugzilla 2.x and 3.x before 3.4.14, 3.5.x and 3.6.x before 3.6.8, 3.7.x and 4.0.x before 4.0.4, and 4.1.x and 4.2.x before 4.2rc2 does not reject non-ASCII characters in e-mail addresses of new user … CWE-20
 Improper Input Validation  		CVE-2012-0448 2024-11-21 10:34 2012-02-3 Show GitHub Exploit DB Packet Storm
296304 - mozilla bugzilla Cross-site request forgery (CSRF) vulnerability in jsonrpc.cgi in Bugzilla 3.5.x and 3.6.x before 3.6.8, 3.7.x and 4.0.x before 4.0.4, and 4.1.x and 4.2.x before 4.2rc2 allows remote attackers to hij… CWE-352
 Origin Validation Error 		CVE-2012-0440 2024-11-21 10:34 2012-02-3 Show GitHub Exploit DB Packet Storm
296305 - php php PHP before 5.3.9 has improper libxslt security settings, which allows remote attackers to create arbitrary files via a crafted XSLT stylesheet that uses the libxslt output extension. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2012-0057 2024-11-21 10:34 2012-02-2 Show GitHub Exploit DB Packet Storm
296306 - mozilla firefox
seamonkey 		Mozilla Firefox 4.x through 9.0 and SeaMonkey before 2.7 on Linux and Mac OS X set weak permissions for Firefox Recovery Key.html, which might allow local users to read a Firefox Sync key via standar… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2012-0450 2024-11-21 10:34 2012-02-2 Show GitHub Exploit DB Packet Storm
296307 - mozilla
debian
suse
opensuse 		thunderbird
seamonkey
firefox
debian_linux
linux_enterprise_server
linux_enterprise_desktop
opensuse
linux_enterprise_software_development_kit 		Mozilla Firefox before 3.6.26 and 4.x through 9.0, Thunderbird before 3.1.18 and 5.0 through 9.0, and SeaMonkey before 2.7 allow remote attackers to cause a denial of service (memory corruption and a… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2012-0449 2024-11-21 10:34 2012-02-2 Show GitHub Exploit DB Packet Storm
296308 - mozilla firefox
thunderbird
seamonkey 		Mozilla Firefox 4.x through 9.0, Thunderbird 5.0 through 9.0, and SeaMonkey before 2.7 do not properly initialize data for image/vnd.microsoft.icon images, which allows remote attackers to obtain pot… CWE-200
Information Exposure 		CVE-2012-0447 2024-11-21 10:34 2012-02-2 Show GitHub Exploit DB Packet Storm
296309 - mozilla firefox
thunderbird
seamonkey 		Multiple cross-site scripting (XSS) vulnerabilities in Mozilla Firefox 4.x through 9.0, Thunderbird 5.0 through 9.0, and SeaMonkey before 2.7 allow remote attackers to inject arbitrary web script or … CWE-79
Cross-site Scripting 		CVE-2012-0446 2024-11-21 10:34 2012-02-2 Show GitHub Exploit DB Packet Storm
296310 - mozilla firefox
thunderbird
seamonkey 		Mozilla Firefox 4.x through 9.0, Thunderbird 5.0 through 9.0, and SeaMonkey before 2.7 allow remote attackers to bypass the HTML5 frame-navigation policy and replace arbitrary sub-frames by creating … CWE-264
Permissions, Privileges, and Access Controls 		CVE-2012-0445 2024-11-21 10:34 2012-02-2 Show GitHub Exploit DB Packet Storm