Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 3, 2026, 2 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
218311 10 危険 アドビシステムズ - Adobe Shockwave Player における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2014-0500 2014-02-13 14:41 2014-02-11 Show GitHub Exploit DB Packet Storm
218312 6.8 警告 GNU Project
Canonical
レッドハット		 - GNU C Library の stdio-common/vfprintf.c における FORTIFY_SOURCE フォーマットストリング保護メカニズムを回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-3406 2014-02-12 19:17 2012-07-18 Show GitHub Exploit DB Packet Storm
218313 5 警告 GNU Project
Canonical
レッドハット		 - GNU C Library の libc の stdio-common/vfprintf.c における FORTIFY_SOURCE フォーマットストリング保護メカニズムを回避される脆弱性 CWE-189
数値処理の問題 		CVE-2012-3405 2014-02-12 19:17 2012-07-18 Show GitHub Exploit DB Packet Storm
218314 5 警告 GNU Project
Canonical
レッドハット		 - GNU C Library の libc の stdio-common/vfprintf.c における FORTIFY_SOURCE フォーマットストリング保護メカニズムを回避される脆弱性 CWE-189
数値処理の問題 		CVE-2012-3404 2014-02-12 19:16 2012-07-18 Show GitHub Exploit DB Packet Storm
218315 4.3 警告 シマンテック - Symantec Web Gateway アプライアンス上で稼働する管理コンソールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-5013 2014-02-12 19:14 2013-07-30 Show GitHub Exploit DB Packet Storm
218316 6.5 警告 シマンテック - Symantec Web Gateway アプライアンス上で稼働する管理コンソールにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2013-5012 2014-02-12 19:14 2013-07-29 Show GitHub Exploit DB Packet Storm
218317 5 警告 Apache Software Foundation - Apache Wicket における重要な情報を取得される脆弱性 CWE-noinfo
情報不足 		CVE-2013-2055 2014-02-12 19:02 2013-05-17 Show GitHub Exploit DB Packet Storm
218318 5.6 警告 ソフォス - VDL で使用される Sophos Anti-Virus エンジンにおけるアンチウィルスプロテクションを回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2014-1213 2014-02-12 18:46 2014-01-31 Show GitHub Exploit DB Packet Storm
218319 4 警告 Nagios Enterprises, LLC - Nagios の status.cgi におけるホスト名についての重要な情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-2214 2014-02-12 18:45 2013-09-4 Show GitHub Exploit DB Packet Storm
218320 7.8 危険 Android for MSM - MSM デバイス用 Qualcomm Innovation Center Android コントリビューションなどで使用される Linux Kernel 用 MSM カメラドライバにおける整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2013-4736 2014-02-12 18:45 2013-08-29 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 3, 2026, 4:06 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
295171 - parallels parallels_plesk_panel The Server Administration Panel in Parallels Plesk Panel 10.2.0_build1011110331.18 does not set the secure flag for a cookie in an https session, which makes it easier for remote attackers to capture… CWE-200
Information Exposure 		CVE-2011-4728 2024-11-21 10:32 2011-12-16 Show GitHub Exploit DB Packet Storm
295172 - parallels parallels_plesk_panel The Server Administration Panel in Parallels Plesk Panel 10.2.0_build1011110331.18 does not properly validate string data that is intended for storage in an XML document, which allows remote attacker… CWE-20
 Improper Input Validation  		CVE-2011-4727 2024-11-21 10:32 2011-12-16 Show GitHub Exploit DB Packet Storm
295173 - parallels parallels_plesk_panel Multiple cross-site scripting (XSS) vulnerabilities in the Server Administration Panel in Parallels Plesk Panel 10.2.0_build1011110331.18 allow remote attackers to inject arbitrary web script or HTML… CWE-79
Cross-site Scripting 		CVE-2011-4726 2024-11-21 10:32 2011-12-16 Show GitHub Exploit DB Packet Storm
295174 - parallels parallels_plesk_panel Multiple SQL injection vulnerabilities in the Server Administration Panel in Parallels Plesk Panel 10.2.0_build1011110331.18 allow remote attackers to execute arbitrary SQL commands via crafted input… CWE-89
SQL Injection 		CVE-2011-4725 2024-11-21 10:32 2011-12-16 Show GitHub Exploit DB Packet Storm
295175 - artsoft rocks\'n\'diamonds Artsoft Entertainment Rocks'n'Diamonds (aka rocksndiamonds) 3.3.0.1 allows local users to overwrite arbitrary files via a symlink attack on .rocksndiamonds/cache/artworkinfo.cache under a user's home… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2011-4606 2024-11-21 10:32 2011-12-15 Show GitHub Exploit DB Packet Storm
295176 - digium asterisk The handle_request_info function in channels/chan_sip.c in Asterisk Open Source 1.6.2.x before 1.6.2.21 and 1.8.x before 1.8.7.2, when automon is enabled, allows remote attackers to cause a denial of… CWE-200
Information Exposure 		CVE-2011-4598 2024-11-21 10:32 2011-12-15 Show GitHub Exploit DB Packet Storm
295177 - digium asterisk The SIP over UDP implementation in Asterisk Open Source 1.4.x before 1.4.43, 1.6.x before 1.6.2.21, and 1.8.x before 1.8.7.2 uses different port numbers for responses to invalid requests depending on… CWE-200
Information Exposure 		CVE-2011-4597 2024-11-21 10:32 2011-12-15 Show GitHub Exploit DB Packet Storm
295178 - jasper_project
suse
fedoraproject
canonical
debian
oracle
redhat 		jasper
linux_enterprise_server
fedora
ubuntu_linux
linux_enterprise_desktop
debian_linux
linux_enterprise_software_development_kit
outside_in_technology
enterprise_linux_deskt… 		The jpc_crg_getparms function in libjasper/jpc/jpc_cs.c in JasPer 1.900.1 uses an incorrect data type during a certain size calculation, which allows remote attackers to trigger a heap-based buffer o… CWE-787
 Out-of-bounds Write 		CVE-2011-4517 2024-11-21 10:32 2011-12-15 Show GitHub Exploit DB Packet Storm
295179 - jasper_project
suse
fedoraproject
canonical
debian
oracle 		jasper
linux_enterprise_server
fedora
ubuntu_linux
linux_enterprise_desktop
debian_linux
linux_enterprise_software_development_kit
outside_in_technology 		Heap-based buffer overflow in the jpc_cox_getcompparms function in libjasper/jpc/jpc_cs.c in JasPer 1.900.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corr… CWE-787
 Out-of-bounds Write 		CVE-2011-4516 2024-11-21 10:32 2011-12-15 Show GitHub Exploit DB Packet Storm
295180 - ipmitool_project ipmitool ipmievd (aka the IPMI event daemon) in OpenIPMI, as used in the ipmitool package 1.8.11 in Red Hat Enterprise Linux (RHEL) 6, Debian GNU/Linux, Fedora 16, and other products uses 0666 permissions for… CWE-732
 Incorrect Permission Assignment for Critical Resource 		CVE-2011-4339 2024-11-21 10:32 2011-12-15 Show GitHub Exploit DB Packet Storm