Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 28, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
218071 9.3 危険 マイクロソフト - Microsoft OneNote 2007 における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認
CVE-2014-2815 2014-08-14 17:53 2014-08-12 Show GitHub Exploit DB Packet Storm
218072 9.3 危険 マイクロソフト - Microsoft SharePoint Server 2013 および SharePoint Foundation 2013 における権限昇格の脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-2816 2014-08-14 17:49 2014-08-12 Show GitHub Exploit DB Packet Storm
218073 4.3 警告 Splunk - Splunk Enterprise の Splunk Web におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-5198 2014-08-14 17:15 2014-08-4 Show GitHub Exploit DB Packet Storm
218074 4 警告 Splunk - Splunk Enterprise におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2014-5197 2014-08-14 17:15 2014-08-4 Show GitHub Exploit DB Packet Storm
218075 7.5 危険 WordPress Gallery Objects - WordPress 用 Gallery Objects プラグインにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2014-5201 2014-08-14 17:14 2014-07-18 Show GitHub Exploit DB Packet Storm
218076 7.5 危険 Chris & Andrew Fox - WordPress 用 FB Gorilla プラグインの game_play.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2014-5200 2014-08-14 17:14 2014-07-28 Show GitHub Exploit DB Packet Storm
218077 6.8 警告 Iptanus - WordPress 用 File Upload プラグインにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2014-5199 2014-08-14 17:14 2014-08-8 Show GitHub Exploit DB Packet Storm
218078 4.3 警告 Blackbam - WordPress 用 Improved user search in backend プラグインにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-5196 2014-08-14 17:13 2014-08-8 Show GitHub Exploit DB Packet Storm
218079 4.9 警告 ゾール・メディカル - ZOLL 除細動器 X シリーズにおけるデバイスの設定を変更される脆弱性 CWE-255
証明書・パスワード管理
CVE-2013-7395 2014-08-14 17:08 2013-08-1 Show GitHub Exploit DB Packet Storm
218080 4.9 警告 ゾール・メディカル - ZOLL 除細動器の複数のシリーズにおけるデバイスの設定を変更される脆弱性 CWE-255
証明書・パスワード管理
CVE-2007-6756 2014-08-14 17:07 2007-05-1 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
297341 - oracle jdk
jre
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 6 and earlier allows remote attackers to affect confidentiality, integrity, and availability via u… NVD-CWE-noinfo
CVE-2012-3136 2024-11-21 10:40 2012-08-31 Show GitHub Exploit DB Packet Storm
297342 - ibm websphere_application_server IBM WebSphere Application Server (WAS) 6.1.x before 6.1.0.45, 7.0.x before 7.0.0.25, 8.0.x before 8.0.0.5, and 8.5.x Full Profile before 8.5.0.1, when the PM44303 fix is installed, does not properly … CWE-20
 Improper Input Validation 
CVE-2012-3325 2024-11-21 10:40 2012-08-31 Show GitHub Exploit DB Packet Storm
297343 - hp inode_management_center_pc Multiple unspecified vulnerabilities in HP iNode Management Center before iNode PC 5.1 E0304 allow remote attackers to execute arbitrary code via crafted input, as demonstrated by a stack-based buffe… NVD-CWE-noinfo
CVE-2012-3254 2024-11-21 10:40 2012-08-31 Show GitHub Exploit DB Packet Storm
297344 - hp intelligent_management_center Multiple unspecified vulnerabilities in HP Intelligent Management Center (IMC) before 5.0 E0101P05 allow remote attackers to execute arbitrary code via crafted input, as demonstrated by an integer ov… NVD-CWE-noinfo
CVE-2012-3253 2024-11-21 10:40 2012-08-31 Show GitHub Exploit DB Packet Storm
297345 - ibm infosphere_guardium The datasource definition editor in IBM InfoSphere Guardium 8.2 and earlier, when the save-password setting is enabled, transmits cleartext database credentials, which allows remote attackers to obta… CWE-310
Cryptographic Issues
CVE-2012-3312 2024-11-21 10:40 2012-08-30 Show GitHub Exploit DB Packet Storm
297346 - ibm infosphere_guardium Cross-site request forgery (CSRF) vulnerability in the account-creation panel in IBM InfoSphere Guardium 8.2 and earlier, when the CSRF filtering (aka csrf_status) feature is disabled, allows remote … CWE-352
 Origin Validation Error
CVE-2012-3309 2024-11-21 10:40 2012-08-30 Show GitHub Exploit DB Packet Storm
297347 - ibm websphere_mq IBM WebSphere MQ 7.1, when an SVRCONN channel is used, allows remote attackers to bypass the security-configuration setup step and obtain queue-manager access via unspecified vectors. CWE-264
Permissions, Privileges, and Access Controls
CVE-2012-3295 2024-11-21 10:40 2012-08-30 Show GitHub Exploit DB Packet Storm
297348 - apache qpid Apache QPID 0.14, 0.16, and earlier uses a NullAuthenticator mechanism to authenticate catch-up shadow connections to AMQP brokers, which allows remote attackers to bypass authentication. CWE-287
Improper Authentication
CVE-2012-3467 2024-11-21 10:40 2012-08-28 Show GitHub Exploit DB Packet Storm
297349 - sgi performance_co-pilot The pduread function in pdu.c in libpcp in Performance Co-Pilot (PCP) before 3.6.5 does not properly time out connections, which allows remote attackers to cause a denial of service (pmcd hang) by se… NVD-CWE-Other
CVE-2012-3421 2024-11-21 10:40 2012-08-28 Show GitHub Exploit DB Packet Storm
297350 - sgi performance_co-pilot Multiple memory leaks in Performance Co-Pilot (PCP) before 3.6.5 allow remote attackers to cause a denial of service (memory consumption or daemon crash) via a large number of PDUs with (1) a crafted… CWE-399
 Resource Management Errors
CVE-2012-3420 2024-11-21 10:40 2012-08-28 Show GitHub Exploit DB Packet Storm