Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 21, 2026, 6:01 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
217331 6 警告 IBM - 複数の IBM Emptoris 製品におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2014-3040 2014-08-27 16:24 2014-08-12 Show GitHub Exploit DB Packet Storm
217332 3.5 注意 IBM - IBM Emptoris Sourcing Portfolio におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-3033 2014-08-27 16:24 2014-08-12 Show GitHub Exploit DB Packet Storm
217333 2.6 注意 サン・マイクロシステムズ
Linux
IBM
ヒューレット・パッカード
- 複数の OS 上で稼動する IBM Tivoli Storage Manager for Space Management のバックアップ/アーカイブ・クライアントにおけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2013-6335 2014-08-27 16:23 2013-10-31 Show GitHub Exploit DB Packet Storm
217334 6.9 警告 OpenVPN Technologies - OpenVPN に同梱された PrivateTunnel の ptservice サービスにおける権限を取得される脆弱性 CWE-Other
その他
CVE-2014-5455 2014-08-27 15:57 2014-07-11 Show GitHub Exploit DB Packet Storm
217335 6 警告 SAS - SAS Visual Analytics のイメージアップロードモジュールにおける任意のコードを実行される脆弱性 CWE-Other
その他
CVE-2014-5454 2014-08-27 15:26 2014-08-13 Show GitHub Exploit DB Packet Storm
217336 2.1 注意 Social Stats project - Drupal 用 Social Stats モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-5456 2014-08-27 14:59 2014-08-19 Show GitHub Exploit DB Packet Storm
217337 7.2 危険 Ubisoft - Ubisoft Uplay PC における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-5453 2014-08-27 14:22 2014-07-3 Show GitHub Exploit DB Packet Storm
217338 6.8 警告 innovaphone AG - innovaphone PBX におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2014-5335 2014-08-27 13:58 2014-08-21 Show GitHub Exploit DB Packet Storm
217339 5 警告 Debian
Python Software Foundation
- Python Image Library および Pillow の PIL/IcnsImagePlugin.py におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2014-3589 2014-08-27 12:25 2014-08-13 Show GitHub Exploit DB Packet Storm
217340 4.3 警告 Apache Software Foundation - Apache ActiveMQ の scheduled.jsp におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-1879 2014-08-26 17:47 2013-03-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 21, 2026, 4:10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
296851 - microsoft internet_explorer Use-after-free vulnerability in Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code via a crafted web site, aka "CFormElement Use After Free Vulnerability." CWE-399
 Resource Management Errors
CVE-2012-1538 2024-11-21 10:37 2012-11-14 Show GitHub Exploit DB Packet Storm
296852 - microsoft windows_server_2008
windows_xp
windows_8
windows_7
windows_server_2003
windows_vista
windows_server_2012
Integer overflow in Windows Shell in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, and Wind… CWE-189
Numeric Errors
CVE-2012-1528 2024-11-21 10:37 2012-11-14 Show GitHub Exploit DB Packet Storm
296853 - microsoft windows_server_2008
windows_xp
windows_8
windows_7
windows_server_2003
windows_vista
windows_server_2012
Integer underflow in Windows Shell in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, and Win… CWE-189
Numeric Errors
CVE-2012-1527 2024-11-21 10:37 2012-11-14 Show GitHub Exploit DB Packet Storm
296854 - c3-ilex eoscada eosfailoverservice.exe in C3-ilex EOScada before 11.0.19.2 allows remote attackers to cause a denial of service by sending a large amount of data to TCP port 12000. CWE-399
 Resource Management Errors
CVE-2012-1813 2024-11-21 10:37 2012-11-13 Show GitHub Exploit DB Packet Storm
296855 - c3-ilex eoscada eosfailoverservice.exe in C3-ilex EOScada before 11.0.19.2 allows remote attackers to obtain sensitive cleartext information via a session on TCP port 12000. CWE-200
Information Exposure
CVE-2012-1812 2024-11-21 10:37 2012-11-13 Show GitHub Exploit DB Packet Storm
296856 - c3-ilex eoscada EOSDataServer.exe in C3-ilex EOScada before 11.0.19.2 allows remote attackers to cause a denial of service by sending a large amount of data to TCP port 24006. CWE-399
 Resource Management Errors
CVE-2012-1811 2024-11-21 10:37 2012-11-13 Show GitHub Exploit DB Packet Storm
296857 - c3-ilex eoscada EOSCoreScada.exe in C3-ilex EOScada before 11.0.19.2 allows remote attackers to cause a denial of service (daemon restart) by sending data to TCP port (1) 5050 or (2) 24004. CWE-264
Permissions, Privileges, and Access Controls
CVE-2012-1810 2024-11-21 10:37 2012-11-13 Show GitHub Exploit DB Packet Storm
296858 - oracle industry_applications Unspecified vulnerability in the Oracle Clinical/Remote Data Capture component in Oracle Industry Applications 4.6.0 and 4.6.2 allows remote authenticated users to affect confidentiality, related to … NVD-CWE-noinfo
CVE-2012-1763 2024-11-21 10:37 2012-10-17 Show GitHub Exploit DB Packet Storm
296859 - oracle database_server Unspecified vulnerability in the Core RDBMS component in Oracle Database Server 11.1.0.7, 11.2.0.2, and 11.2.0.3 allows remote authenticated users to affect confidentiality, integrity, and availabili… NVD-CWE-noinfo
CVE-2012-1751 2024-11-21 10:37 2012-10-17 Show GitHub Exploit DB Packet Storm
296860 - oracle fusion_middleware Unspecified vulnerability in the Oracle Business Intelligence Enterprise Edition component in Oracle Fusion Middleware 11.1.1.6 and other versions allows remote attackers to affect integrity via unkn… NVD-CWE-noinfo
CVE-2012-1686 2024-11-21 10:37 2012-10-17 Show GitHub Exploit DB Packet Storm