Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 6, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
218091 6.8 警告 アドバンテック株式会社 - Advantech WebAccess におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2014-0988 2014-09-24 16:12 2014-09-18 Show GitHub Exploit DB Packet Storm
218092 6.8 警告 アドバンテック株式会社 - Advantech WebAccess におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2014-0985 2014-09-24 16:12 2014-09-18 Show GitHub Exploit DB Packet Storm
218093 6.8 警告 アドバンテック株式会社 - Advantech WebAccess におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2014-0987 2014-09-24 16:09 2014-09-18 Show GitHub Exploit DB Packet Storm
218094 6.8 警告 アドバンテック株式会社 - Advantech WebAccess におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2014-0986 2014-09-24 16:09 2014-09-18 Show GitHub Exploit DB Packet Storm
218095 4.3 警告 Phorum - Phorum の管理インターフェースにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-6659 2014-09-24 16:08 2012-08-24 Show GitHub Exploit DB Packet Storm
218096 4.3 警告 MailEnable - MailEnable Enterprise におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-2588 2014-09-24 16:07 2012-08-8 Show GitHub Exploit DB Packet Storm
218097 7.2 危険 The PHP Group
アップル
- PHP の FastCGI Process Manager の sapi/fpm/fpm/fpm_unix.c における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-0185 2014-09-24 13:26 2014-05-1 Show GitHub Exploit DB Packet Storm
218098 6.4 警告 アップル - Apple Safari における同一生成元ポリシーを回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2013-5227 2014-09-22 18:30 2013-12-16 Show GitHub Exploit DB Packet Storm
218099 2.1 注意 アップル - Apple iOS の Lockdown におけるアクティベーションロック保護メカニズムを回避される脆弱性 CWE-20
不適切な入力確認
CVE-2014-1360 2014-09-22 18:18 2014-06-30 Show GitHub Exploit DB Packet Storm
218100 5 警告 アップル - Apple iOS の TelephonyUI フレームワークにおける電話番号または電子メールアドレス情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2013-6835 2014-09-22 18:10 2014-03-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 6, 2026, 4:18 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
297661 - ibm http_server
websphere_application_server
Unspecified vulnerability in the IBM HTTP Server component 5.3 in IBM WebSphere Application Server (WAS) for z/OS allows remote attackers to execute arbitrary commands via unknown vectors. NVD-CWE-noinfo
CVE-2012-5955 2024-11-21 10:45 2012-12-20 Show GitHub Exploit DB Packet Storm
297662 - ibm rational_clearquest The Web Client (aka CQ Web) in IBM Rational ClearQuest 7.1.2.x before 7.1.2.9 and 8.0.0.x before 8.0.0.5 allows remote attackers to obtain sensitive information via unspecified vectors that trigger a… CWE-200
Information Exposure
CVE-2012-5765 2024-11-21 10:45 2012-12-20 Show GitHub Exploit DB Packet Storm
297663 - squid-cache squid Multiple memory leaks in tools/cachemgr.cc in cachemgr.cgi in Squid 2.x and 3.x before 3.1.22, 3.2.x before 3.2.4, and 3.3.x before 3.3.0.2 allow remote attackers to cause a denial of service (memory… CWE-20
 Improper Input Validation 
CVE-2012-5643 2024-11-21 10:45 2012-12-20 Show GitHub Exploit DB Packet Storm
297664 - ovirt sanlock The setup_logging function in log.h in SANLock uses world-writable permissions for /var/log/sanlock.log, which allows local users to overwrite the file content or bypass intended disk-quota restricti… CWE-264
Permissions, Privileges, and Access Controls
CVE-2012-5638 2024-11-21 10:45 2012-12-20 Show GitHub Exploit DB Packet Storm
297665 - cisco wireless_lan_controller_software
2000_wireless_lan_controller
2100_wireless_lan_controller
2500_wireless_lan_controller
4100_wireless_lan_controller
4400_wireless_lan_controller
550…
Cross-site scripting (XSS) vulnerability in screens/base/web_auth_custom.html on Cisco Wireless LAN Controller (WLC) devices with software 7.2.110.0 allows remote authenticated users to inject arbitr… CWE-79
Cross-site Scripting
CVE-2012-6007 2024-11-21 10:45 2012-12-19 Show GitHub Exploit DB Packet Storm
297666 - cisco wireless_lan_controller_software
2000_wireless_lan_controller
2100_wireless_lan_controller
2500_wireless_lan_controller
4100_wireless_lan_controller
4400_wireless_lan_controller
550…
screens/base/web_auth_custom.html on Cisco Wireless LAN Controller (WLC) devices with software 7.2.110.0 allows remote authenticated users to cause a denial of service (device reload) via a certain b… NVD-CWE-noinfo
CVE-2012-5991 2024-11-21 10:45 2012-12-19 Show GitHub Exploit DB Packet Storm
297667 - vmware view Multiple directory traversal vulnerabilities in the (1) View Connection Server and (2) View Security Server in VMware View 4.x before 4.6.2 and 5.x before 5.1.2 allow remote attackers to read arbitra… CWE-22
Path Traversal
CVE-2012-5978 2024-11-21 10:45 2012-12-19 Show GitHub Exploit DB Packet Storm
297668 - huawei e585
e585u-82
The Huawei E585 device allows remote attackers to cause a denial of service (NULL pointer dereference and device outage) via crafted HTTP requests, as demonstrated by unspecified vulnerability-scanni… NVD-CWE-Other
CVE-2012-5970 2024-11-21 10:45 2012-12-19 Show GitHub Exploit DB Packet Storm
297669 - huawei e585
e585u-82
Multiple directory traversal vulnerabilities on the Huawei E585 device allow remote attackers to (1) read arbitrary files via a .. (dot dot) in the PATH_INFO of an sdcard/ request or (2) modify arbit… CWE-22
Path Traversal
CVE-2012-5969 2024-11-21 10:45 2012-12-19 Show GitHub Exploit DB Packet Storm
297670 - huawei e585
e585u-82
The Huawei E585 device does not validate the status of admin sessions, which allows remote attackers to obtain sensitive user information and the session ID, and modify data, by leveraging access to … CWE-20
 Improper Input Validation 
CVE-2012-5968 2024-11-21 10:45 2012-12-19 Show GitHub Exploit DB Packet Storm