Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 20, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
217391 5.8 警告 IBM - IBM WebSphere Portal 用 Unified Task List Portlet におけるオープンリダイレクトの脆弱性 CWE-noinfo
情報不足 		CVE-2014-3054 2014-08-11 18:03 2014-06-30 Show GitHub Exploit DB Packet Storm
217392 10 危険 CVS - CVS の src/client.c 内の proxy_connect 関数におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2012-0804 2014-08-11 18:00 2012-05-29 Show GitHub Exploit DB Packet Storm
217393 1.8 注意 Memcached - Memcached の memcached.c の process_bin_delete 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2013-0179 2014-08-11 17:46 2013-12-20 Show GitHub Exploit DB Packet Storm
217394 4.3 警告 Ruby-lang.org
RubyGems		 - Ruby で使用される RubyGems の lib/rubygems/version.rb におけるサービス運用妨害 (DoS) の脆弱性 CWE-310
暗号の問題 		CVE-2013-4363 2014-08-11 17:34 2013-09-24 Show GitHub Exploit DB Packet Storm
217395 5.8 警告 GNU Project - GnuPG における暗号保護メカニズムを回避される脆弱性 CWE-310
暗号の問題 		CVE-2013-4351 2014-08-11 17:28 2013-10-6 Show GitHub Exploit DB Packet Storm
217396 6.8 警告 GNU Project - GNU Emacs の lisp/files.el における任意の Emacs Lisp コードを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2012-3479 2014-08-11 17:24 2012-08-7 Show GitHub Exploit DB Packet Storm
217397 5 警告 GNU Project
Canonical		 - GnuPG におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2013-4402 2014-08-11 17:19 2013-10-5 Show GitHub Exploit DB Packet Storm
217398 4 警告 ProcessOne - ejabberd の mod_pubsub モジュール (mod_pubsub.erl) におけるサービス運用妨害 (無限ループ) の脆弱性 CWE-20
不適切な入力確認 		CVE-2011-4320 2014-08-11 17:16 2012-02-18 Show GitHub Exploit DB Packet Storm
217399 4.3 警告 Wireshark - Wireshark の RTP 解析機能の epan/dissectors/packet-rtp.c 内の srtp_add_address 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2014-2907 2014-08-11 17:12 2014-04-22 Show GitHub Exploit DB Packet Storm
217400 4.3 警告 ModSecurity
オラクル		 - ModSecurity におけるフィルタリングルールを回避される脆弱性 CWE-20
不適切な入力確認 		CVE-2012-2751 2014-08-11 17:09 2012-07-22 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 20, 2026, 4:14 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
296881 - drupal drupal Open redirect vulnerability in the Form API in Drupal 7.x before 7.13 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via crafted parameters in a destina… CWE-20
 Improper Input Validation  		CVE-2012-1589 2024-11-21 10:37 2012-05-19 Show GitHub Exploit DB Packet Storm
296882 - linux linux_kernel The KVM implementation in the Linux kernel before 3.3.6 allows host OS users to cause a denial of service (NULL pointer dereference and host OS crash) by making a KVM_CREATE_IRQCHIP ioctl call after … CWE-399
 Resource Management Errors 		CVE-2012-1601 2024-11-21 10:37 2012-05-17 Show GitHub Exploit DB Packet Storm
296883 - progea movicon The OPC server in Progea Movicon before 11.3 allows remote attackers to cause a denial of service (out-of-bounds read and memory corruption) via a crafted HTTP request. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2012-1804 2024-11-21 10:37 2012-05-15 Show GitHub Exploit DB Packet Storm
296884 - microsoft windows_server_2008
windows_xp
windows_7
windows_server_2003
windows_vista 		win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, and Windows 8 C… CWE-20
 Improper Input Validation  		CVE-2012-1848 2024-11-21 10:37 2012-05-9 Show GitHub Exploit DB Packet Storm
296885 - microsoft office
excel
excel_viewer
office_compatibility_pack 		Microsoft Excel 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1; Office 2008 and 2011 for Mac; Excel Viewer; and Office Compatibility Pack SP2 and SP3 do not properly handle memory during the openi… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2012-1847 2024-11-21 10:37 2012-05-9 Show GitHub Exploit DB Packet Storm
296886 - oracle database_server The TNS Listener, as used in Oracle Database 11g 11.1.0.7, 11.2.0.2, and 11.2.0.3, and 10g 10.2.0.3, 10.2.0.4, and 10.2.0.5, as used in Oracle Fusion Middleware, Enterprise Manager, E-Business Suite,… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2012-1675 2024-11-21 10:37 2012-05-9 Show GitHub Exploit DB Packet Storm
296887 - vmware esxi
esx 		The VMX process in VMware ESXi 4.1 and ESX 4.1 does not properly handle RPC commands, which allows guest OS users to cause a denial of service (memory overwrite and process crash) or possibly execute… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2012-1517 2024-11-21 10:37 2012-05-5 Show GitHub Exploit DB Packet Storm
296888 9.9 CRITICAL
Network 		vmware esx
esxi 		The VMX process in VMware ESXi 3.5 through 4.1 and ESX 3.5 through 4.1 does not properly handle RPC commands, which allows guest OS users to cause a denial of service (memory overwrite and process cr… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2012-1516 2024-11-21 10:37 2012-05-5 Show GitHub Exploit DB Packet Storm
296889 - oracle fusion_middleware Unspecified vulnerability in the Oracle WebCenter Forms Recognition component in Oracle Fusion Middleware 10.1.3.5 allows remote attackers to affect confidentiality, integrity, and availability via u… NVD-CWE-noinfo
CVE-2012-1709 2024-11-21 10:37 2012-05-4 Show GitHub Exploit DB Packet Storm
296890 - oracle database_server Unspecified vulnerability in the Application Express component in Oracle Database Server 4.0 and 4.1 allows remote attackers to affect integrity via unknown vectors. NVD-CWE-noinfo
CVE-2012-1708 2024-11-21 10:37 2012-05-4 Show GitHub Exploit DB Packet Storm