Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 4, 2026, 2 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
218341 4.3 警告 デル - Dell KACE K1000 にクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-0330 2014-02-10 19:18 2014-02-4 Show GitHub Exploit DB Packet Storm
218342 4.3 警告 Opera Software ASA - Opera browser for Android における Intent スキーム URL 処理に関する脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2014-0815 2014-02-10 19:05 2014-02-6 Show GitHub Exploit DB Packet Storm
218343 6.8 警告 Doug Poulin - Command School Student Management System におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2014-1915 2014-02-10 18:54 2014-01-7 Show GitHub Exploit DB Packet Storm
218344 4.3 警告 Doug Poulin - Command School Student Management System におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-1914 2014-02-10 18:51 2014-01-7 Show GitHub Exploit DB Packet Storm
218345 5 警告 シトリックス・システムズ - Citrix XenMobile Device Manager サーバにおける重要な情報を取得される脆弱性 CWE-noinfo
情報不足 		CVE-2014-1663 2014-02-10 18:42 2014-02-3 Show GitHub Exploit DB Packet Storm
218346 4.3 警告 Opera Software ASA - Mac OS X 上で稼働する Opera におけるアドレスバーを偽装される脆弱性 CWE-noinfo
情報不足 		CVE-2014-1870 2014-02-10 18:30 2014-01-31 Show GitHub Exploit DB Packet Storm
218347 9 危険 DELL EMC (旧 EMC Corporation) - EMC Documentum Foundation Services の Web サービスにおけるコンテンツのアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2014-0622 2014-02-10 18:17 2014-02-5 Show GitHub Exploit DB Packet Storm
218348 6.9 警告 Linux - Linux Kernel の net/compat.c の compat_sys_recvmmsg 関数における権限を取得される脆弱性 CWE-20
不適切な入力確認 		CVE-2014-0038 2014-02-10 18:00 2014-02-6 Show GitHub Exploit DB Packet Storm
218349 4 警告 シマンテック - Symantec Encryption Management Server における保存されたアウトバウンド電子メールメッセージを読まれる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2014-1643 2014-02-10 17:20 2014-02-5 Show GitHub Exploit DB Packet Storm
218350 4.3 警告 GPSD project
Canonical		 - gpsd の NMEA0183 ドライバにおけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2013-2038 2014-02-10 16:59 2013-05-1 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 4, 2026, 4:06 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
293261 - canonical
sebastian_heinlein 		ubuntu_linux
aptdaemon 		Aptdaemon 0.43 in Ubuntu 11.10 and 12.04 LTS uses short IDs when importing PPA GPG keys from a keyserver, which allows remote attackers to install arbitrary package repository GPG keys via a man-in-t… NVD-CWE-noinfo
CVE-2012-0962 2024-11-21 10:36 2012-12-27 Show GitHub Exploit DB Packet Storm
293262 - debian apt
advanced_package_tool 		Apt 0.8.16~exp5ubuntu13.x before 0.8.16~exp5ubuntu13.6, 0.8.16~exp12ubuntu10.x before 0.8.16~exp12ubuntu10.7, and 0.9.7.5ubuntu5.x before 0.9.7.5ubuntu5.2, as used in Ubuntu, uses world-readable perm… CWE-200
Information Exposure 		CVE-2012-0961 2024-11-21 10:36 2012-12-27 Show GitHub Exploit DB Packet Storm
293263 - ps_project_management_team unity-firefox-extension content/unity-api.js in the unity-firefox-extension extension 2.4.1 for Firefox exposes the toDataURL function in an API call, which allows remote attackers to bypass the Same Origin Policy and obtai… NVD-CWE-Other
CVE-2012-0958 2024-11-21 10:36 2012-12-27 Show GitHub Exploit DB Packet Storm
293264 - linux linux_kernel The override_release function in kernel/sys.c in the Linux kernel before 3.4.16 allows local users to obtain sensitive information from kernel stack memory via a uname system call in conjunction with… CWE-16
Configuration 		CVE-2012-0957 2024-11-21 10:36 2012-12-21 Show GitHub Exploit DB Packet Storm
293265 - ps_project_management_team unity-firefox-extension Unity integration extension (unity-firefox-extension) before 2.4.1 for Firefox does not properly handle callbacks, which allows remote attackers to cause a denial of service (Firefox crash) and possi… CWE-20
 Improper Input Validation  		CVE-2012-0960 2024-11-21 10:36 2012-11-25 Show GitHub Exploit DB Packet Storm
293266 - remote_login_service_hackers remote_login_service Remote Login Service (RLS) 1.0.0 does not properly clear account information when switching users, which might allow physically proximate users to obtain login credentials. CWE-200
Information Exposure 		CVE-2012-0959 2024-11-21 10:36 2012-11-25 Show GitHub Exploit DB Packet Storm
293267 - redhat jboss_enterprise_application_platform
jboss_enterprise_soa_platform
jboss_enterprise_web_platform
jboss_enterprise_brms_platform 		The JBoss Server in JBoss Enterprise Application Platform 5.1.x before 5.1.2 and 5.2.x before 5.2.2, Web Platform before 5.1.2, BRMS Platform before 5.3.0, and SOA Platform before 5.3.0, when the ser… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2012-1167 2024-11-21 10:36 2012-11-24 Show GitHub Exploit DB Packet Storm
293268 - redhat mod_cluster
jboss_enterprise_application_platform 		mod_cluster 1.0.10 before 1.0.10 CP03 and 1.1.x before 1.1.4, as used in JBoss Enterprise Application Platform 5.1.2, when "ROOT" is set to excludedContexts, exposes the root context of the server, w… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2012-1154 2024-11-21 10:36 2012-10-23 Show GitHub Exploit DB Packet Storm
293269 - socialcms socialcms Multiple cross-site request forgery (CSRF) vulnerabilities in SocialCMS 1.0.2 allow remote attackers to hijack the authentication of administrators for requests that (1) add administrator accounts vi… CWE-352
 Origin Validation Error 		CVE-2012-1416 2024-11-21 10:36 2012-10-9 Show GitHub Exploit DB Packet Storm
293270 - dlink dsl-2640b_firmware
dsl-2640b 		Cross-site request forgery (CSRF) vulnerability in redpass.cgi in D-Link DSL-2640B Firmware EU_4.00 allows remote attackers to hijack the authentication of administrators for requests that change the… CWE-352
 Origin Validation Error 		CVE-2012-1308 2024-11-21 10:36 2012-10-9 Show GitHub Exploit DB Packet Storm