Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 4, 2026, 4 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
218251	7.2	危険	Android for MSM	-	MSM デバイス用 Qualcomm Innovation Center Android コントリビューションなどで使用される Linux Kernel 用 MSM カメラドライバにおける権限を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2013-2595	2014-09-3 15:44	2013-05-1	Show	GitHub Exploit DB Packet Storm

218252	4.3	警告	Linux	-	Linux Kernel の virt/kvm/iommu.c 内の kvm_iommu_map_pages 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-189 数値処理の問題	CVE-2014-3601	2014-09-3 15:12	2014-08-19	Show	GitHub Exploit DB Packet Storm

218253	2.1	注意	Ganeti project	-	Ganeti の lib/client/gnt_cluster.py の _UpgradeBeforeConfigurationChange 関数における SSL キーを取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2014-5247	2014-09-3 14:27	2014-08-5	Show	GitHub Exploit DB Packet Storm

218254	7.5	危険	VMTurbo	-	VMTurbo Operations Manager の vmtadmin.cgi における任意のコマンドを実行される脆弱性	CWE-Other その他	CVE-2014-5073	2014-09-3 14:13	2014-07-25	Show	GitHub Exploit DB Packet Storm

218255	6.6	警告	Android for MSM	-	MSM デバイス用 Qualcomm Innovation Center Android コントリビューションなどで同梱される Linux Kernel ブートローダにおける署名検証コードを上書きされる脆弱性	CWE-20 不適切な入力確認	CVE-2013-2598	2014-09-3 14:02	2013-09-6	Show	GitHub Exploit DB Packet Storm

218256	4.3	警告	Xen プロジェクト	-	Xen におけるサービス運用妨害 (DoS) の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2014-5147	2014-09-3 13:41	2014-08-12	Show	GitHub Exploit DB Packet Storm

218257	4.3	警告	シスコシステムズ	-	Cisco Intelligent Automation for Cloud における重要な情報を取得される脆弱性	CWE-20 不適切な入力確認	CVE-2014-3352	2014-09-3 12:24	2014-08-29	Show	GitHub Exploit DB Packet Storm

218258	6.8	警告	マカフィー	-	McAfee Network Security Manager の User Management モジュールにおけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2014-2390	2014-09-3 12:18	2014-07-24	Show	GitHub Exploit DB Packet Storm

218259	5	警告	Innovative Interfaces Inc.	-	Innovative Interfaces Encore Discovery Solution における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2014-5128	2014-09-3 12:03	2014-08-26	Show	GitHub Exploit DB Packet Storm

218260	5.8	警告	Innovative Interfaces Inc.	-	Innovative Interfaces Encore Discovery Solution におけるオープンリダイレクトの脆弱性	CWE-Other その他	CVE-2014-5127	2014-09-3 11:59	2014-08-26	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 4, 2026, 4:17 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
297401	-		activestate	activepython	Untrusted search path vulnerability in the installation functionality in ActivePython 3.2.2.3, when installed in the top-level C:\ directory, might allow local users to gain privileges via a Trojan h…	NVD-CWE-Other	CVE-2012-5379	2024-11-21 10:44	2012-10-11	Show	GitHub Exploit DB Packet Storm

297402	-		activestate	activetcl	Untrusted search path vulnerability in the installation functionality in ActiveTcl 8.5.12, when installed in the top-level C:\ directory, allows local users to gain privileges via a Trojan horse DLL …	NVD-CWE-Other	CVE-2012-5378	2024-11-21 10:44	2012-10-11	Show	GitHub Exploit DB Packet Storm

297403	-		activestate	activeperl	Untrusted search path vulnerability in the installation functionality in ActivePerl 5.16.1.1601, when installed in the top-level C:\ directory, allows local users to gain privileges via a Trojan hors…	NVD-CWE-Other	CVE-2012-5377	2024-11-21 10:44	2012-10-11	Show	GitHub Exploit DB Packet Storm

297404	9.6	CRITICAL Network	google	chrome	The Inter-process Communication (IPC) implementation in Google Chrome before 22.0.1229.94 allows remote attackers to bypass intended sandbox restrictions and write to arbitrary files by leveraging ac…	CWE-269 Improper Privilege Management	CVE-2012-5376	2024-11-21 10:44	2012-10-11	Show	GitHub Exploit DB Packet Storm

297405	-		google apple	chrome iphone_os	Use-after-free vulnerability in the SVG implementation in WebKit, as used in Google Chrome before 22.0.1229.94, allows remote attackers to execute arbitrary code via unspecified vectors.	CWE-399 Resource Management Errors	CVE-2012-5112	2024-11-21 10:44	2012-10-11	Show	GitHub Exploit DB Packet Storm

297406	-		isc	bind	ISC BIND 9.x before 9.7.6-P4, 9.8.x before 9.8.3-P4, 9.9.x before 9.9.1-P4, and 9.4-ESV and 9.6-ESV before 9.6-ESV-R7-P4 allows remote attackers to cause a denial of service (named daemon hang) via u…	CWE-189 Numeric Errors	CVE-2012-5166	2024-11-21 10:44	2012-10-11	Show	GitHub Exploit DB Packet Storm

297407	-		canonical	ubuntu_software_properties	The apt-add-repository tool in Ubuntu Software Properties 0.75.x before 0.75.10.3, 0.80.x before 0.80.9.2, 0.81.x before 0.81.13.5, 0.82.x before 0.82.7.3, and 0.92.x before 0.92.8 does not properly …	CWE-20 Improper Input Validation	CVE-2012-5356	2024-11-21 10:44	2012-10-11	Show	GitHub Exploit DB Packet Storm

297408	-		bryce_harrington	xdiagnose	welcome.py in xdiagnose before 2.5.2ubuntu0.1 allows local users to overwrite arbitrary files via a symlink attack on a temporary file with a predictable name in /tmp.	CWE-59 Link Following	CVE-2012-5355	2024-11-21 10:44	2012-10-11	Show	GitHub Exploit DB Packet Storm

297409	-		mozilla	firefox thunderbird seamonkey	Mozilla Firefox before 16.0, Thunderbird before 16.0, and SeaMonkey before 2.13 do not properly handle navigation away from a web page that has multiple menus of SELECT elements active, which allows …	NVD-CWE-Other	CVE-2012-5354	2024-11-21 10:44	2012-10-11	Show	GitHub Exploit DB Packet Storm

297410	-		eduserv	openathens_service_provider	Eduserv OpenAthens SP 2.0 for Java allows remote attackers to forge messages and bypass authentication via a SAML assertion that lacks a Signature element, aka a "Signature exclusion attack."	CWE-287 Improper Authentication	CVE-2012-5353	2024-11-21 10:44	2012-10-10	Show	GitHub Exploit DB Packet Storm