Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 7, 2026, 10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
218731 4.3 警告 オラクル - Oracle MySQL の MySQL Server における Thread Pooling に関する脆弱性 CWE-noinfo
情報不足
CVE-2014-0433 2014-01-17 17:14 2014-01-14 Show GitHub Exploit DB Packet Storm
218732 1.7 注意 オラクル - Oracle Sun Solaris における Audit に関する脆弱性 CWE-noinfo
情報不足
CVE-2013-5885 2014-01-17 16:27 2014-01-14 Show GitHub Exploit DB Packet Storm
218733 3.2 注意 オラクル - Oracle Sun Solaris における Kernel に関する脆弱性 CWE-noinfo
情報不足
CVE-2013-5883 2014-01-17 16:25 2014-01-14 Show GitHub Exploit DB Packet Storm
218734 4.9 警告 オラクル - Oracle Sun Solaris における Kernel に関する脆弱性 CWE-noinfo
情報不足
CVE-2013-5876 2014-01-17 16:23 2014-01-14 Show GitHub Exploit DB Packet Storm
218735 2.7 注意 オラクル - Oracle Sun Solaris における Role Based Access Control に関する脆弱性 CWE-noinfo
情報不足
CVE-2013-5875 2014-01-17 16:21 2014-01-14 Show GitHub Exploit DB Packet Storm
218736 2.1 注意 オラクル - Oracle Sun Solaris における Name Service Cache Daemon に関する脆弱性 CWE-noinfo
情報不足
CVE-2013-5872 2014-01-17 16:19 2014-01-14 Show GitHub Exploit DB Packet Storm
218737 6.2 警告 オラクル - Oracle Sun Solaris における "ps" command line utility に関する脆弱性 CWE-noinfo
情報不足
CVE-2013-5834 2014-01-17 16:17 2014-01-14 Show GitHub Exploit DB Packet Storm
218738 4.9 警告 オラクル - Oracle Sun Solaris における Filesystem に関する脆弱性 CWE-noinfo
情報不足
CVE-2013-5833 2014-01-17 16:15 2014-01-14 Show GitHub Exploit DB Packet Storm
218739 4.6 警告 オラクル - Oracle Sun Solaris における Remote Procedure Call に関する脆弱性 CWE-noinfo
情報不足
CVE-2013-5821 2014-01-17 16:12 2014-01-14 Show GitHub Exploit DB Packet Storm
218740 4.3 警告 オラクル - Oracle PeopleSoft Products の PeopleSoft Enterprise PeopleTools における PIA Core Technology に関する脆弱性 CWE-noinfo
情報不足
CVE-2014-0445 2014-01-17 15:59 2014-01-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 7, 2026, 4:22 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
295221 - apache struts The DebuggingInterceptor component in Apache Struts before 2.3.1.1, when developer mode is used, allows remote attackers to execute arbitrary commands via unspecified vectors. NOTE: the vendor chara… CWE-94
Code Injection
CVE-2012-0394 2024-11-21 10:34 2012-01-9 Show GitHub Exploit DB Packet Storm
295222 - apache struts The ParameterInterceptor component in Apache Struts before 2.3.1.1 does not prevent access to public constructors, which allows remote attackers to create or overwrite arbitrary files via a crafted p… CWE-264
Permissions, Privileges, and Access Controls
CVE-2012-0393 2024-11-21 10:34 2012-01-9 Show GitHub Exploit DB Packet Storm
295223 - apache struts The CookieInterceptor component in Apache Struts before 2.3.1.1 does not use the parameter-name whitelist, which allows remote attackers to execute arbitrary commands via a crafted HTTP Cookie header… NVD-CWE-noinfo
CVE-2012-0392 2024-11-21 10:34 2012-01-9 Show GitHub Exploit DB Packet Storm
295224 - maradns maradns MaraDNS before 1.3.07.12 and 1.4.x before 1.4.08 computes hash values for DNS data without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a den… CWE-400
 Uncontrolled Resource Consumption
CVE-2012-0024 2024-11-21 10:34 2012-01-8 Show GitHub Exploit DB Packet Storm
295225 - wordpress wordpress Cross-site scripting (XSS) vulnerability in wp-comments-post.php in WordPress 3.3.x before 3.3.1, when Internet Explorer is used, allows remote attackers to inject arbitrary web script or HTML via th… CWE-79
Cross-site Scripting
CVE-2012-0287 2024-11-21 10:34 2012-01-6 Show GitHub Exploit DB Packet Storm
295226 - gnu gnutls The DTLS implementation in GnuTLS 3.0.10 and earlier executes certain error-handling code only if there is a specific relationship between a padding length and the ciphertext size, which makes it eas… CWE-310
Cryptographic Issues
CVE-2012-0390 2024-11-21 10:34 2012-01-6 Show GitHub Exploit DB Packet Storm
295227 - openssl openssl The GOST ENGINE in OpenSSL before 1.0.0f does not properly handle invalid parameters for the GOST block cipher, which allows remote attackers to cause a denial of service (daemon crash) via crafted d… CWE-399
 Resource Management Errors
CVE-2012-0027 2024-11-21 10:34 2012-01-6 Show GitHub Exploit DB Packet Storm
295228 4.3 MEDIUM
Network
ibm rational_asset_manager IBM Rational Asset Manager 7.5 could allow a remote attacker to bypass security restrictions. An attacker could exploit this vulnerability using the UID parameter to modify another user's preferences. NVD-CWE-Other
CVE-2011-4820 2024-11-21 10:33 2022-09-29 Show GitHub Exploit DB Packet Storm
295229 5.5 MEDIUM
Local
linux linux_kernel Linux kernel through 3.1 allows local users to obtain sensitive keystroke information via access to /dev/pts/ and /dev/tty*. CWE-200
Information Exposure
CVE-2011-4916 2024-11-21 10:33 2022-07-13 Show GitHub Exploit DB Packet Storm
295230 5.5 MEDIUM
Local
linux linux_kernel In the Linux kernel through 3.1 there is an information disclosure issue via /proc/stat. NVD-CWE-noinfo
CVE-2011-4917 2024-11-21 10:33 2022-04-19 Show GitHub Exploit DB Packet Storm