Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 15, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
217731 7.1 危険 Ing. Punzenberger COPA-DATA GmbH - COPA-DATA zenon DNP3 NG ドライバ および zenon DNP3 Process Gateway におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2014-2345 2014-06-6 17:56 2014-06-3 Show GitHub Exploit DB Packet Storm
217732 4.3 警告 Ipswitch, Inc. - Ipswitch IMail Server の Web クライアントインターフェースにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-3878 2014-06-6 16:30 2014-06-4 Show GitHub Exploit DB Packet Storm
217733 7.5 危険 Stephen Adkins - Perl 用の App::Context モジュールにおける任意のコードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2012-6141 2014-06-6 16:19 2012-12-6 Show GitHub Exploit DB Packet Storm
217734 3.5 注意 Jo Hasenau - TYPO3 用 Grid Elements エクステンションのレイアウトウィザードにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-3949 2014-06-6 15:14 2014-05-27 Show GitHub Exploit DB Packet Storm
217735 4.3 警告 Alex Kellner - TYPO3 用 powermail エクステンションの backend モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-3948 2014-06-6 15:13 2014-05-22 Show GitHub Exploit DB Packet Storm
217736 7.5 危険 Ingy dot Net - Perl 用 Spoon モジュールの Session::Cookie における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2012-6143 2014-06-6 14:51 2012-12-6 Show GitHub Exploit DB Packet Storm
217737 7.5 危険 Jochen Wiedmann - Perl 用 HTML::EP モジュールの Session::Cookie における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2012-6142 2014-06-6 14:50 2012-12-6 Show GitHub Exploit DB Packet Storm
217738 4 警告 ownCloud - ownCloud Server における任意のプレビュー画像にアクセスされる脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-3963 2014-06-6 14:11 2014-01-22 Show GitHub Exploit DB Packet Storm
217739 4 警告 ownCloud - ownCloud Server における他のユーザのファイル名を読まれる脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-3838 2014-06-6 14:11 2014-04-29 Show GitHub Exploit DB Packet Storm
217740 4 警告 ownCloud - ownCloud Server の document アプリケーションにおける共有ファイルを列挙される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-3837 2014-06-6 14:10 2014-04-29 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 16, 2026, 4 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
296721 5.5 MEDIUM
Local
suckless
debian
surf
debian_linux
surf: cookie jar has read access from other local user CWE-200
Information Exposure
CVE-2012-0842 2024-11-21 10:35 2019-11-20 Show GitHub Exploit DB Packet Storm
296722 9.8 CRITICAL
Network
sugarcrm sugarcrm SugarCRM CE <= 6.3.1 contains scripts that use "unserialize()" with user controlled input which allows remote attackers to execute arbitrary PHP code. CWE-20
 Improper Input Validation 
CVE-2012-0694 2024-11-21 10:35 2019-10-30 Show GitHub Exploit DB Packet Storm
296723 8.8 HIGH
Network
adobe shockwave_player Adobe Shockwave Player before 11.6.4.634 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-0… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2012-0771 2024-11-21 10:35 2018-02-20 Show GitHub Exploit DB Packet Storm
296724 8.8 HIGH
Network
haudenschilt family_connections_cms Multiple cross-site request forgery (CSRF) vulnerabilities in Family Connections CMS (aka FCMS) 2.9 and earlier allow remote attackers to hijack the authentication of arbitrary users for requests tha… CWE-352
 Origin Validation Error
CVE-2012-0699 2024-11-21 10:35 2018-01-12 Show GitHub Exploit DB Packet Storm
296725 7.5 HIGH
Network
apache xerces2_java Apache Xerces2 Java Parser before 2.12.0 allows remote attackers to cause a denial of service (CPU consumption) via a crafted message to an XML service, which triggers hash table collisions. CWE-399
 Resource Management Errors
CVE-2012-0881 2024-11-21 10:35 2017-10-31 Show GitHub Exploit DB Packet Storm
296726 7.5 HIGH
Network
apache xerces-c\+\+ Apache Xerces-C++ allows remote attackers to cause a denial of service (CPU consumption) via a crafted message sent to an XML service that causes hash table collisions. CWE-399
 Resource Management Errors
CVE-2012-0880 2024-11-21 10:35 2017-08-9 Show GitHub Exploit DB Packet Storm
296727 9.8 CRITICAL
Network
apache cxf The WS-SP UsernameToken policy in Apache CXF 2.4.5 and 2.5.1 allows remote attackers to bypass authentication by sending an empty UsernameToken as part of a SOAP request. CWE-287
Improper Authentication
CVE-2012-0803 2024-11-21 10:35 2017-08-9 Show GitHub Exploit DB Packet Storm
296728 - postfix postfix Multiple SQL injection vulnerabilities in Postfix Admin (aka postfixadmin) before 2.3.5 allow remote authenticated users to execute arbitrary SQL commands via (1) the pw parameter to the pacrypt func… CWE-89
SQL Injection
CVE-2012-0811 2024-11-21 10:35 2014-10-1 Show GitHub Exploit DB Packet Storm
296729 - opensuse
systemd_project
opensuse
systemd
The session_link_x11_socket function in login/logind-session.c in systemd-logind in systemd, possibly 37 and earlier, allows local users to create or overwrite arbitrary files via a symlink attack on… CWE-59
Link Following
CVE-2012-0871 2024-11-21 10:35 2014-04-18 Show GitHub Exploit DB Packet Storm
296730 - puppet puppet_enterprise
puppet_dashboard
Multiple cross-site scripting (XSS) vulnerabilities in Puppet Dashboard 1.0 before 1.2.5 and Enterprise 1.0 before 1.2.5 and 2.x before 2.0.1 allow remote attackers to inject arbitrary web script or … CWE-79
Cross-site Scripting
CVE-2012-0891 2024-11-21 10:35 2014-03-15 Show GitHub Exploit DB Packet Storm