Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 9, 2026, noon

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
217441 5.8 警告 yaSSL - wolfSSL CyaSSL におけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-2900 2014-04-25 12:19 2014-04-9 Show GitHub Exploit DB Packet Storm
217442 5 警告 yaSSL - wolfSSL CyaSSL におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2014-2899 2014-04-25 12:12 2014-04-9 Show GitHub Exploit DB Packet Storm
217443 4 警告 シスコシステムズ - Cisco IOS の Cisco IOS Unified Border Element におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2012-5427 2014-04-24 18:45 2012-11-29 Show GitHub Exploit DB Packet Storm
217444 6.8 警告 シスコシステムズ - AS5400 デバイス上で稼働する Cisco IOS におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2012-5422 2014-04-24 18:44 2012-11-29 Show GitHub Exploit DB Packet Storm
217445 5.4 警告 シスコシステムズ - Cisco IOS におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2012-5044 2014-04-24 18:43 2012-11-29 Show GitHub Exploit DB Packet Storm
217446 4.3 警告 シスコシステムズ - Cisco IOS の BGP ルータプロセスにおけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2012-5039 2014-04-24 18:43 2012-09-21 Show GitHub Exploit DB Packet Storm
217447 4.6 警告 シスコシステムズ - Catalyst 6500 および 7600 デバイス上で稼働する Cisco IOS におけるサービス運用妨害 (DoS) の脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-5037 2014-04-24 18:42 2012-10-15 Show GitHub Exploit DB Packet Storm
217448 6.8 警告 シスコシステムズ - Cisco IOS におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2012-5036 2014-04-24 18:41 2012-09-21 Show GitHub Exploit DB Packet Storm
217449 6.4 警告 シスコシステムズ - Cisco IOS の ipsec-ikev2 実装の FlexVPN ロードバランシング機能における VPN トラフィックの転送を誘発される脆弱性 CWE-287
不適切な認証 		CVE-2012-5032 2014-04-24 18:40 2012-09-21 Show GitHub Exploit DB Packet Storm
217450 6.8 警告 シスコシステムズ - Cisco IOS におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2012-5017 2014-04-24 18:39 2012-09-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 9, 2026, 5:07 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
292271 - mozilla
redhat
canonical 		firefox
thunderbird_esr
thunderbird
seamonkey
enterprise_linux_server
enterprise_linux_workstation
ubuntu_linux
enterprise_linux_desktop
enterprise_linux_eus 		Use-after-free vulnerability in the nsSMILAnimationController::DoSample function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 1… CWE-416
 Use After Free 		CVE-2012-4181 2024-11-21 10:42 2012-10-11 Show GitHub Exploit DB Packet Storm
292272 - mozilla
redhat
canonical
suse
debian 		firefox
thunderbird_esr
thunderbird
seamonkey
enterprise_linux_server
enterprise_linux_workstation
ubuntu_linux
enterprise_linux_desktop
enterprise_linux_eus
linux_enterpri… 		Use-after-free vulnerability in the nsTextEditRules::WillInsert function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, a… CWE-416
 Use After Free 		CVE-2012-4182 2024-11-21 10:42 2012-10-11 Show GitHub Exploit DB Packet Storm
292273 - mozilla
redhat
canonical
suse
debian 		firefox
thunderbird_esr
thunderbird
seamonkey
enterprise_linux_server
enterprise_linux_workstation
ubuntu_linux
enterprise_linux_desktop
enterprise_linux_eus
linux_enterpri… 		Heap-based buffer overflow in the nsHTMLEditor::IsPrevCharInNodeWhitespace function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x befor… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2012-4180 2024-11-21 10:42 2012-10-11 Show GitHub Exploit DB Packet Storm
292274 - mozilla
redhat
canonical
suse
debian 		firefox
thunderbird_esr
thunderbird
seamonkey
enterprise_linux_server
enterprise_linux_workstation
ubuntu_linux
enterprise_linux_desktop
enterprise_linux_eus
linux_enterpri… 		Use-after-free vulnerability in the nsHTMLCSSUtils::CreateCSSPropertyTxn function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before … CWE-416
 Use After Free 		CVE-2012-4179 2024-11-21 10:42 2012-10-11 Show GitHub Exploit DB Packet Storm
292275 - dracut_project
fedoraproject
redhat 		dracut
fedora
enterprise_linux_desktop
enterprise_linux_server
enterprise_linux_workstation 		dracut.sh in dracut, as used in Red Hat Enterprise Linux 6, Fedora 16 and 17, and possibly other products, creates initramfs images with world-readable permissions, which might allow local users to o… CWE-276
Incorrect Default Permissions  		CVE-2012-4453 2024-11-21 10:42 2012-10-10 Show GitHub Exploit DB Packet Storm
292276 - apache axis2 Apache Axis2 allows remote attackers to forge messages and bypass authentication via an "XML Signature wrapping attack." CWE-287
Improper Authentication 		CVE-2012-4418 2024-11-21 10:42 2012-10-10 Show GitHub Exploit DB Packet Storm
292277 7.5 HIGH
Network 		cakefoundation cakephp The Xml class in CakePHP 2.1.x before 2.1.5 and 2.2.x before 2.2.1 allows remote attackers to read arbitrary files via XML data containing external entity references, aka an XML external entity (XXE)… CWE-611
XXE 		CVE-2012-4399 2024-11-21 10:42 2012-10-10 Show GitHub Exploit DB Packet Storm
292278 - glpi-project glpi Multiple cross-site scripting (XSS) vulnerabilities in GLPI-PROJECT GLPI before 0.83.3 allow remote attackers to inject arbitrary web script or HTML via unknown vectors. CWE-79
Cross-site Scripting 		CVE-2012-4003 2024-11-21 10:42 2012-10-10 Show GitHub Exploit DB Packet Storm
292279 - glpi-project glpi Cross-site request forgery (CSRF) vulnerability in GLPI-PROJECT GLPI before 0.83.3 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors. CWE-352
 Origin Validation Error 		CVE-2012-4002 2024-11-21 10:42 2012-10-10 Show GitHub Exploit DB Packet Storm
292280 - oracle mysql MySQL 5.0.88, and possibly other versions and platforms, allows local users to bypass certain privilege checks by calling CREATE TABLE on a MyISAM table with modified (1) DATA DIRECTORY or (2) INDEX … CWE-264
Permissions, Privileges, and Access Controls 		CVE-2012-4452 2024-11-21 10:42 2012-10-10 Show GitHub Exploit DB Packet Storm