Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 6, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
218391 5.6 警告 SystemTap - SystemTap における重要な情報を取得される脆弱性 CWE-399
リソース管理の問題 		CVE-2012-0875 2014-02-6 15:33 2012-02-20 Show GitHub Exploit DB Packet Storm
218392 6.8 警告 KDE project
Novell
Canonical		 - Ark におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2011-2725 2014-02-6 15:32 2011-07-26 Show GitHub Exploit DB Packet Storm
218393 6.8 警告 Rapid7 - Rapid7 Nexpose のセキュリティコンソールにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2012-6493 2014-02-6 14:40 2012-12-19 Show GitHub Exploit DB Packet Storm
218394 9.3 危険 Csound - Csound の util/lpci_main.c 内の main 関数におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2012-2108 2014-02-6 14:38 2012-04-4 Show GitHub Exploit DB Packet Storm
218395 9.3 危険 Csound - Csound の util/lpci_main.c 内の main 関数における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2012-2107 2014-02-6 14:38 2012-04-4 Show GitHub Exploit DB Packet Storm
218396 9.3 危険 Csound - Csound の util/pv_import.c 内の pv_import 関数における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2012-2106 2014-02-6 14:37 2012-04-4 Show GitHub Exploit DB Packet Storm
218397 6.8 警告 OTRS プロジェクト - Open Ticket Request System の Kernel/Modules/ 内の複数の .pm ファイルにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2014-1694 2014-02-6 14:08 2014-01-28 Show GitHub Exploit DB Packet Storm
218398 7.5 危険 OTRS プロジェクト - Open Ticket Request System の Kernel/System/State.pm における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2014-1471 2014-02-6 14:04 2014-01-28 Show GitHub Exploit DB Packet Storm
218399 1.9 注意 dest-unreach.org - socat におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2014-0019 2014-02-6 12:21 2014-01-28 Show GitHub Exploit DB Packet Storm
218400 8.5 危険 TRENDnet - TRENDnet TEW-812DRU ルータにおける任意のコマンドを実行される脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2013-3365 2014-02-6 12:20 2013-07-26 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 7, 2026, 4:22 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
292351 - siemens simatic_pcs7
wincc 		WebNavigator in Siemens WinCC 7.0 SP3 and earlier, as used in SIMATIC PCS7 and other products, allows remote attackers to discover a username and password via crafted parameters to unspecified method… CWE-200
Information Exposure 		CVE-2012-3034 2024-11-21 10:40 2012-09-18 Show GitHub Exploit DB Packet Storm
292352 - siemens simatic_pcs7
wincc 		SQL injection vulnerability in WebNavigator in Siemens WinCC 7.0 SP3 and earlier, as used in SIMATIC PCS7 and other products, allows remote attackers to execute arbitrary SQL commands via a crafted S… CWE-89
SQL Injection 		CVE-2012-3032 2024-11-21 10:40 2012-09-18 Show GitHub Exploit DB Packet Storm
292353 - siemens simatic_pcs7
wincc 		Multiple cross-site scripting (XSS) vulnerabilities in WebNavigator in Siemens WinCC 7.0 SP3 and earlier, as used in SIMATIC PCS7 and other products, allow remote attackers to inject arbitrary web sc… CWE-79
Cross-site Scripting 		CVE-2012-3031 2024-11-21 10:40 2012-09-18 Show GitHub Exploit DB Packet Storm
292354 - siemens simatic_pcs7
wincc 		WebNavigator in Siemens WinCC 7.0 SP3 and earlier, as used in SIMATIC PCS7 and other products, stores sensitive information under the web root with insufficient access control, which allows remote at… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2012-3030 2024-11-21 10:40 2012-09-18 Show GitHub Exploit DB Packet Storm
292355 - siemens simatic_pcs7
wincc 		Cross-site request forgery (CSRF) vulnerability in WebNavigator in Siemens WinCC 7.0 SP3 and earlier, as used in SIMATIC PCS7 and other products, allows remote attackers to hijack the authentication … CWE-352
 Origin Validation Error 		CVE-2012-3028 2024-11-21 10:40 2012-09-18 Show GitHub Exploit DB Packet Storm
292356 - cososys endpoint_protector_appliace_4 The CoSoSys Endpoint Protector 4 appliance establishes an EPProot password based entirely on the appliance serial number, which makes it easier for remote attackers to obtain access via a brute-force… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2012-2994 2024-11-21 10:40 2012-09-18 Show GitHub Exploit DB Packet Storm
292357 5.9 MEDIUM
Network 		microsoft windows_phone_7_firmware Microsoft Windows Phone 7 does not verify the domain name in the subject's Common Name (CN) field of an X.509 certificate, which allows man-in-the-middle attackers to spoof an SSL server for the (1) … CWE-295
Improper Certificate Validation  		CVE-2012-2993 2024-11-21 10:40 2012-09-18 Show GitHub Exploit DB Packet Storm
292358 - trendmicro interscan_messaging_security_suite Cross-site request forgery (CSRF) vulnerability in saveAccountSubTab.imss in Trend Micro InterScan Messaging Security Suite 7.1-Build_Win32_1394 allows remote attackers to hijack the authentication o… CWE-352
 Origin Validation Error 		CVE-2012-2996 2024-11-21 10:40 2012-09-17 Show GitHub Exploit DB Packet Storm
292359 - trendmicro interscan_messaging_security_suite Multiple cross-site scripting (XSS) vulnerabilities in Trend Micro InterScan Messaging Security Suite 7.1-Build_Win32_1394 allow remote attackers to inject arbitrary web script or HTML via (1) the wr… CWE-79
Cross-site Scripting 		CVE-2012-2995 2024-11-21 10:40 2012-09-17 Show GitHub Exploit DB Packet Storm
292360 - cisco unity_connection Cisco Unity Connection (UC) 7.1, 8.0, and 8.5 allows remote authenticated users to cause a denial of service (resource consumption and administration outage) via extended use of the product, aka Bug … NVD-CWE-Other
CVE-2012-3096 2024-11-21 10:40 2012-09-16 Show GitHub Exploit DB Packet Storm