Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 13, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
218751	10	危険	Google	-	Google Chrome で使用される Google V8 におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2014-1704	2014-03-18 15:30	2014-03-11	Show	GitHub Exploit DB Packet Storm

218752	7.5	危険	Google	-	Google Chrome の Web Sockets の実装におけるサンドボックス保護メカニズムを回避される脆弱性	CWE-399 リソース管理の問題	CVE-2014-1703	2014-03-18 15:30	2014-03-11	Show	GitHub Exploit DB Packet Storm

218753	7.5	危険	Google	-	Google Chrome で使用される Blink の Web データベースの実装におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2014-1702	2014-03-18 15:30	2014-03-11	Show	GitHub Exploit DB Packet Storm

218754	4.3	警告	Google	-	Google Chrome で使用される Blink の bindings/scripts/code_generator_v8.pm における Universal XSS 攻撃を実行される脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2014-1701	2014-03-18 15:30	2014-03-11	Show	GitHub Exploit DB Packet Storm

218755	7.5	危険	Google	-	Google Chrome で使用される Blink の modules/speech/SpeechSynthesis.cpp におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2014-1700	2014-03-18 15:30	2014-03-11	Show	GitHub Exploit DB Packet Storm

218756	6.8	警告	IBM	-	IBM InfoSphere Master Data Management Server におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2014-0873	2014-03-18 14:53	2014-03-17	Show	GitHub Exploit DB Packet Storm

218757	3.5	注意	IBM	-	IBM InfoSphere Master Data Management Reference Data Management Hub におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2014-0850	2014-03-18 14:52	2014-03-17	Show	GitHub Exploit DB Packet Storm

218758	4.3	警告	IBM	-	IBM InfoSphere Information Server におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-4059	2014-03-18 14:51	2013-06-7	Show	GitHub Exploit DB Packet Storm

218759	6.5	警告	IBM	-	IBM InfoSphere Information Server における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2013-4058	2014-03-18 14:51	2013-06-7	Show	GitHub Exploit DB Packet Storm

218760	6.8	警告	IBM	-	IBM InfoSphere Information Server の XML Pack におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2013-4057	2014-03-18 14:51	2013-06-7	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 13, 2026, 5:05 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
294191	-	caucho	resin	Directory traversal vulnerability in Caucho Quercus, as distributed in Resin before 4.0.29, allows remote attackers to create files in arbitrary directories via a .. (dot dot) in a pathname within an…	CWE-22 Path Traversal	CVE-2012-2968	2024-11-21 10:40	2012-08-13	Show	GitHub Exploit DB Packet Storm

294192	-	caucho	resin	Caucho Quercus, as distributed in Resin before 4.0.29, does not properly implement the == (equals sign equals sign) operator for comparisons, which has unspecified impact and context-dependent attack…	NVD-CWE-Other	CVE-2012-2967	2024-11-21 10:40	2012-08-13	Show	GitHub Exploit DB Packet Storm

294193	-	caucho	resin	Caucho Quercus, as distributed in Resin before 4.0.29, overwrites entries in the SERVER superglobal array on the basis of POST parameters, which has unspecified impact and remote attack vectors.	NVD-CWE-Other	CVE-2012-2966	2024-11-21 10:40	2012-08-13	Show	GitHub Exploit DB Packet Storm

294194	-	caucho	resin	Caucho Quercus, as distributed in Resin before 4.0.29, does not properly handle unspecified characters in the names of variables, which has unknown impact and remote attack vectors, related to an "HT…	CWE-20 Improper Input Validation	CVE-2012-2965	2024-11-21 10:40	2012-08-13	Show	GitHub Exploit DB Packet Storm

294195	-	breakingpointsystems	breakingpoint_storm_appliance_ctm breakingpoint_storm_appliance	The BreakingPoint Storm appliance before 3.0 requires cleartext credentials for establishing a session from a GUI administrative client, which allows remote attackers to obtain sensitive information …	CWE-20 Improper Input Validation	CVE-2012-2964	2024-11-21 10:40	2012-08-13	Show	GitHub Exploit DB Packet Storm

294196	-	breakingpointsystems	breakingpoint_storm_appliance_ctm breakingpoint_storm_appliance	The administrative interface in the embedded web server on the BreakingPoint Storm appliance before 3.0 does not require authentication for the gwt/BugReport script, which allows remote attackers to …	CWE-287 Improper Authentication	CVE-2012-2963	2024-11-21 10:40	2012-08-13	Show	GitHub Exploit DB Packet Storm

294197	-	pnp4nagios	pnp4nagios	PNP4Nagios 0.6 through 0.6.16 uses world-readable permissions for process_perfdata.cfg, which allows local users to obtain the Gearman shared secret by reading the file.	CWE-264 Permissions, Privileges, and Access Controls	CVE-2012-3457	2024-11-21 10:40	2012-08-12	Show	GitHub Exploit DB Packet Storm

294198	-	oracle	database_server	SQL injection vulnerability in Oracle Database Server 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, and 11.2.0.3 allows remote authenticated users to execute arbitrary SQL commands via vectors in…	CWE-89 SQL Injection	CVE-2012-3132	2024-11-21 10:40	2012-08-11	Show	GitHub Exploit DB Packet Storm

294199	-	rubyonrails	ruby_on_rails rails	Cross-site scripting (XSS) vulnerability in actionpack/lib/action_view/helpers/sanitize_helper.rb in the strip_tags helper in Ruby on Rails before 3.0.17, 3.1.x before 3.1.8, and 3.2.x before 3.2.8 a…	CWE-79 Cross-site Scripting	CVE-2012-3465	2024-11-21 10:40	2012-08-10	Show	GitHub Exploit DB Packet Storm

294200	-	rubyonrails	ruby_on_rails rails	Cross-site scripting (XSS) vulnerability in activesupport/lib/active_support/core_ext/string/output_safety.rb in Ruby on Rails before 3.0.17, 3.1.x before 3.1.8, and 3.2.x before 3.2.8 might allow re…	CWE-79 Cross-site Scripting	CVE-2012-3464	2024-11-21 10:40	2012-08-10	Show	GitHub Exploit DB Packet Storm