Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 7, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
218321 4.6 警告 X.Org Foundation
XKeyboardConfig		 - X.Org の xkeyboard-config における X スクリーンロックを回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-0064 2014-02-12 18:31 2012-01-19 Show GitHub Exploit DB Packet Storm
218322 5.8 警告 Armin Burgmeier - libnet6 の inc/server.hpp における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2011-4093 2014-02-12 18:27 2011-10-30 Show GitHub Exploit DB Packet Storm
218323 5 警告 Standards Based Linux Instrumentation Project
Novell		 - Standards Based Linux Instrumentation for Manageability Common Information Model Client におけるサービス運用妨害 (DoS) の脆弱性 CWE-310
暗号の問題 		CVE-2012-2328 2014-02-12 18:21 2012-03-14 Show GitHub Exploit DB Packet Storm
218324 5 警告 レッドハット - Red Hat JBoss 製品などで使用される JBoss Web におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2011-4610 2014-02-12 18:18 2011-12-14 Show GitHub Exploit DB Packet Storm
218325 4.4 警告 F5 Networks - BIG IP Edge Client における情報漏えいの脆弱性 CWE-200
情報漏えい 		CVE-2013-6024 2014-02-12 18:13 2014-02-6 Show GitHub Exploit DB Packet Storm
218326 4.4 警告 Condor Project
Fedora Project
レッドハット		 - Red Hat MRG Grid などの製品で使用される Condor におけるフォーマットストリングの脆弱性 CWE-134
書式文字列の問題 		CVE-2011-4930 2014-02-12 18:01 2011-11-23 Show GitHub Exploit DB Packet Storm
218327 4.3 警告 Visibility Software - Visibility Software Cyber Recruiter のユーザログインページにおけるアカウント関連情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2014-1931 2014-02-12 17:25 2014-01-27 Show GitHub Exploit DB Packet Storm
218328 4.3 警告 Visibility Software - Visibility Software Cyber Recruiter に認証回避の脆弱性 CWE-200
CWE-Other
CVE-2014-1930 2014-02-12 17:24 2014-02-3 Show GitHub Exploit DB Packet Storm
218329 5 警告 LightSpeed Gaming - MumbleKit および Mumble for iOS のクライアントにおけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2014-1916 2014-02-12 16:46 2014-01-25 Show GitHub Exploit DB Packet Storm
218330 7.5 危険 LightSpeed Gaming - 複数の Mumble 製品のクライアントの AudioOutputSpeech.cpp におけるサービス運用妨害 (DoS) の脆弱性 CWE-189
数値処理の問題 		CVE-2014-0045 2014-02-12 16:46 2014-01-25 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 7, 2026, 4:22 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
294411 - fedoraproject 389_directory_server The acllas__handle_group_entry function in servers/plugins/acl/acllas.c in 389 Directory Server before 1.2.10 does not properly handled access control instructions (ACIs) that use certificate groups,… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2012-0833 2024-11-21 10:35 2012-07-4 Show GitHub Exploit DB Packet Storm
294412 - david_paleino wicd Wicd before 1.7.1 saves sensitive information in log files in /var/log/wicd, which allows context-dependent attackers to obtain passwords and other sensitive information. CWE-255
Credentials Management 		CVE-2012-0813 2024-11-21 10:35 2012-06-30 Show GitHub Exploit DB Packet Storm
294413 - ibm websphere_application_server Cross-site scripting (XSS) vulnerability in the Integration Solution Console in the Administration Console in IBM WebSphere Application Server 7.0 before 7.0.0.23 allows remote attackers to inject ar… CWE-79
Cross-site Scripting 		CVE-2012-0720 2024-11-21 10:35 2012-06-20 Show GitHub Exploit DB Packet Storm
294414 - ibm websphere_application_server IBM WebSphere Application Server 7.0 before 7.0.0.23, when a certain SSLv2 configuration with client authentication is used, allows remote attackers to bypass X.509 client-certificate authentication … CWE-287
Improper Authentication 		CVE-2012-0717 2024-11-21 10:35 2012-06-20 Show GitHub Exploit DB Packet Storm
294415 - ibm websphere_application_server Cross-site scripting (XSS) vulnerability in the Administration Console in IBM WebSphere Application Server 7.0 before 7.0.0.23 allows remote attackers to inject arbitrary web script or HTML via unspe… CWE-79
Cross-site Scripting 		CVE-2012-0716 2024-11-21 10:35 2012-06-20 Show GitHub Exploit DB Packet Storm
294416 - spamdyke spamdyke Multiple buffer overflows in Spamdyke before 4.3.0 might allow remote attackers to execute arbitrary code via vectors related to "serious errors in the usage of snprintf()/vsnprintf()" in which the r… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2012-0802 2024-11-21 10:35 2012-06-20 Show GitHub Exploit DB Packet Storm
294417 - apple itunes Heap-based buffer overflow in Apple iTunes before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted .m3u playlist. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2012-0677 2024-11-21 10:35 2012-06-12 Show GitHub Exploit DB Packet Storm
294418 - dropbear_ssh_project
debian 		dropbear_ssh
debian_linux 		Use-after-free vulnerability in Dropbear SSH Server 0.52 through 2012.54, when command restriction and public key authentication are enabled, allows remote authenticated users to execute arbitrary co… CWE-399
 Resource Management Errors 		CVE-2012-0920 2024-11-21 10:35 2012-06-6 Show GitHub Exploit DB Packet Storm
294419 - sqlalchemy sqlalchemy Multiple SQL injection vulnerabilities in SQLAlchemy before 0.7.0b4, as used in Keystone, allow remote attackers to execute arbitrary SQL commands via the (1) limit or (2) offset keyword to the selec… CWE-89
SQL Injection 		CVE-2012-0805 2024-11-21 10:35 2012-06-6 Show GitHub Exploit DB Packet Storm
294420 - xinetd xinetd builtins.c in Xinetd before 2.3.15 does not check the service type when the tcpmux-server service is enabled, which exposes all enabled services and allows remote attackers to bypass intended access … CWE-20
 Improper Input Validation  		CVE-2012-0862 2024-11-21 10:35 2012-06-5 Show GitHub Exploit DB Packet Storm