Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 12, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
218291 6.8 警告 The PHP Group
アップル
- PHP の ext/xml/xml.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2013-4113 2014-04-7 17:36 2013-07-11 Show GitHub Exploit DB Packet Storm
218292 6.5 警告 X.Org Foundation - X.Org X11 の xorg-server モジュールの dix/dixfonts.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2013-4396 2014-04-7 17:35 2013-10-8 Show GitHub Exploit DB Packet Storm
218293 2.6 注意 Quagga - Quagga の OSPFD API の new_msg_lsa_change_notify 関数におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2013-2236 2014-04-7 17:34 2013-07-28 Show GitHub Exploit DB Packet Storm
218294 5 警告 Apache Software Foundation - Apache HTTP Server 用 mod_fcgid モジュールにおけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2013-4365 2014-04-7 17:33 2013-09-29 Show GitHub Exploit DB Packet Storm
218295 2.6 注意 Apache Software Foundation - Apache Subversion 用 mod_dontdothat の is_this_legal 関数におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2013-4505 2014-04-7 17:32 2013-11-25 Show GitHub Exploit DB Packet Storm
218296 1.8 注意 Memcached - Memcached におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2013-7291 2014-04-7 17:23 2013-12-20 Show GitHub Exploit DB Packet Storm
218297 1.8 注意 Memcached - Memcached の items.c の do_item_get 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2013-7290 2014-04-7 17:21 2013-12-20 Show GitHub Exploit DB Packet Storm
218298 4.8 警告 Memcached - Memcached における認証を回避される脆弱性 CWE-287
不適切な認証
CVE-2013-7239 2014-04-7 17:20 2013-12-20 Show GitHub Exploit DB Packet Storm
218299 5 警告 The PHP Group
アップル
- PHP の SOAP パーサにおける任意のファイルを読まれる脆弱性 CWE-200
情報漏えい
CVE-2013-1643 2014-04-7 17:18 2013-02-21 Show GitHub Exploit DB Packet Storm
218300 7.5 危険 The PHP Group
アップル
- PHP の ext/soap/soap.c におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2013-1635 2014-04-7 17:17 2013-02-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 12, 2026, 5:06 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
296391 - microsoft windows_server_2008
windows_7
windows_xp
windows_server_2003
windows_vista
The kernel in Microsoft Windows XP SP2, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly load structured exception han… NVD-CWE-Other
CVE-2012-0001 2024-11-21 10:34 2012-01-11 Show GitHub Exploit DB Packet Storm
296392 - apache struts The DebuggingInterceptor component in Apache Struts before 2.3.1.1, when developer mode is used, allows remote attackers to execute arbitrary commands via unspecified vectors. NOTE: the vendor chara… CWE-94
Code Injection
CVE-2012-0394 2024-11-21 10:34 2012-01-9 Show GitHub Exploit DB Packet Storm
296393 - apache struts The ParameterInterceptor component in Apache Struts before 2.3.1.1 does not prevent access to public constructors, which allows remote attackers to create or overwrite arbitrary files via a crafted p… CWE-264
Permissions, Privileges, and Access Controls
CVE-2012-0393 2024-11-21 10:34 2012-01-9 Show GitHub Exploit DB Packet Storm
296394 - apache struts The CookieInterceptor component in Apache Struts before 2.3.1.1 does not use the parameter-name whitelist, which allows remote attackers to execute arbitrary commands via a crafted HTTP Cookie header… NVD-CWE-noinfo
CVE-2012-0392 2024-11-21 10:34 2012-01-9 Show GitHub Exploit DB Packet Storm
296395 - maradns maradns MaraDNS before 1.3.07.12 and 1.4.x before 1.4.08 computes hash values for DNS data without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a den… CWE-400
 Uncontrolled Resource Consumption
CVE-2012-0024 2024-11-21 10:34 2012-01-8 Show GitHub Exploit DB Packet Storm
296396 - wordpress wordpress Cross-site scripting (XSS) vulnerability in wp-comments-post.php in WordPress 3.3.x before 3.3.1, when Internet Explorer is used, allows remote attackers to inject arbitrary web script or HTML via th… CWE-79
Cross-site Scripting
CVE-2012-0287 2024-11-21 10:34 2012-01-6 Show GitHub Exploit DB Packet Storm
296397 - gnu gnutls The DTLS implementation in GnuTLS 3.0.10 and earlier executes certain error-handling code only if there is a specific relationship between a padding length and the ciphertext size, which makes it eas… CWE-310
Cryptographic Issues
CVE-2012-0390 2024-11-21 10:34 2012-01-6 Show GitHub Exploit DB Packet Storm
296398 - openssl openssl The GOST ENGINE in OpenSSL before 1.0.0f does not properly handle invalid parameters for the GOST block cipher, which allows remote attackers to cause a denial of service (daemon crash) via crafted d… CWE-399
 Resource Management Errors
CVE-2012-0027 2024-11-21 10:34 2012-01-6 Show GitHub Exploit DB Packet Storm
296399 4.3 MEDIUM
Network
ibm rational_asset_manager IBM Rational Asset Manager 7.5 could allow a remote attacker to bypass security restrictions. An attacker could exploit this vulnerability using the UID parameter to modify another user's preferences. NVD-CWE-Other
CVE-2011-4820 2024-11-21 10:33 2022-09-29 Show GitHub Exploit DB Packet Storm
296400 5.5 MEDIUM
Local
linux linux_kernel Linux kernel through 3.1 allows local users to obtain sensitive keystroke information via access to /dev/pts/ and /dev/tty*. CWE-200
Information Exposure
CVE-2011-4916 2024-11-21 10:33 2022-07-13 Show GitHub Exploit DB Packet Storm