Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 6, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
218771 3.5 注意 オラクル - Oracle Virtualization の Oracle VM VirtualBox における Core に関する脆弱性 CWE-noinfo
情報不足 		CVE-2013-5892 2014-01-17 14:53 2014-01-14 Show GitHub Exploit DB Packet Storm
218772 9.3 危険 アドビシステムズ - Adobe Reader におけるサービス運用妨害 (アプリケーションクラッシュ) の脆弱性 CWE-noinfo
情報不足 		CVE-2012-4363 2014-01-17 12:29 2012-08-21 Show GitHub Exploit DB Packet Storm
218773 5 警告 オラクル - Oracle E-Business Suite の Oracle Application Object Library における Discoverer に関する脆弱性 CWE-noinfo
情報不足 		CVE-2014-0398 2014-01-17 12:13 2014-01-14 Show GitHub Exploit DB Packet Storm
218774 5.5 警告 オラクル - Oracle E-Business Suite の Oracle Payroll における Exception Reporting に関する脆弱性 CWE-noinfo
情報不足 		CVE-2013-5890 2014-01-17 12:12 2014-01-14 Show GitHub Exploit DB Packet Storm
218775 1.7 注意 オラクル - Oracle E-Business Suite の Oracle Application Object Library における Logging に関する脆弱性 CWE-noinfo
情報不足 		CVE-2013-5874 2014-01-17 12:11 2014-01-14 Show GitHub Exploit DB Packet Storm
218776 5 警告 オラクル - Oracle Fusion Middleware の Oracle WebCenter Portal における Page Service に関する脆弱性 CWE-noinfo
情報不足 		CVE-2013-5869 2014-01-17 12:07 2014-01-14 Show GitHub Exploit DB Packet Storm
218777 2.6 注意 オラクル - Oracle Fusion Middleware の Oracle iPlanet Web Proxy Server における Administration に関する脆弱性 CWE-noinfo
情報不足 		CVE-2013-5808 2014-01-17 12:06 2014-01-14 Show GitHub Exploit DB Packet Storm
218778 7.5 危険 オラクル - Oracle Fusion Middleware の Oracle Reports Developer における Security および Authentication に関する脆弱性 CWE-noinfo
情報不足 		CVE-2013-5785 2014-01-17 12:06 2014-01-14 Show GitHub Exploit DB Packet Storm
218779 5 警告 Google - Google Chrome の url/url_canon_relative.cc の DoResolveRelativeHost 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2013-2920 2014-01-17 11:57 2013-10-1 Show GitHub Exploit DB Packet Storm
218780 6.8 警告 Google - Google Chrome で使用される Blink のリソースローダにおけるメモリ二重解放の脆弱性 CWE-399
リソース管理の問題 		CVE-2013-2921 2014-01-17 11:56 2013-10-1 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 7, 2026, 4:22 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
295221 - apache struts The DebuggingInterceptor component in Apache Struts before 2.3.1.1, when developer mode is used, allows remote attackers to execute arbitrary commands via unspecified vectors. NOTE: the vendor chara… CWE-94
Code Injection 		CVE-2012-0394 2024-11-21 10:34 2012-01-9 Show GitHub Exploit DB Packet Storm
295222 - apache struts The ParameterInterceptor component in Apache Struts before 2.3.1.1 does not prevent access to public constructors, which allows remote attackers to create or overwrite arbitrary files via a crafted p… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2012-0393 2024-11-21 10:34 2012-01-9 Show GitHub Exploit DB Packet Storm
295223 - apache struts The CookieInterceptor component in Apache Struts before 2.3.1.1 does not use the parameter-name whitelist, which allows remote attackers to execute arbitrary commands via a crafted HTTP Cookie header… NVD-CWE-noinfo
CVE-2012-0392 2024-11-21 10:34 2012-01-9 Show GitHub Exploit DB Packet Storm
295224 - maradns maradns MaraDNS before 1.3.07.12 and 1.4.x before 1.4.08 computes hash values for DNS data without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a den… CWE-400
 Uncontrolled Resource Consumption 		CVE-2012-0024 2024-11-21 10:34 2012-01-8 Show GitHub Exploit DB Packet Storm
295225 - wordpress wordpress Cross-site scripting (XSS) vulnerability in wp-comments-post.php in WordPress 3.3.x before 3.3.1, when Internet Explorer is used, allows remote attackers to inject arbitrary web script or HTML via th… CWE-79
Cross-site Scripting 		CVE-2012-0287 2024-11-21 10:34 2012-01-6 Show GitHub Exploit DB Packet Storm
295226 - gnu gnutls The DTLS implementation in GnuTLS 3.0.10 and earlier executes certain error-handling code only if there is a specific relationship between a padding length and the ciphertext size, which makes it eas… CWE-310
Cryptographic Issues 		CVE-2012-0390 2024-11-21 10:34 2012-01-6 Show GitHub Exploit DB Packet Storm
295227 - openssl openssl The GOST ENGINE in OpenSSL before 1.0.0f does not properly handle invalid parameters for the GOST block cipher, which allows remote attackers to cause a denial of service (daemon crash) via crafted d… CWE-399
 Resource Management Errors 		CVE-2012-0027 2024-11-21 10:34 2012-01-6 Show GitHub Exploit DB Packet Storm
295228 4.3 MEDIUM
Network 		ibm rational_asset_manager IBM Rational Asset Manager 7.5 could allow a remote attacker to bypass security restrictions. An attacker could exploit this vulnerability using the UID parameter to modify another user's preferences. NVD-CWE-Other
CVE-2011-4820 2024-11-21 10:33 2022-09-29 Show GitHub Exploit DB Packet Storm
295229 5.5 MEDIUM
Local 		linux linux_kernel Linux kernel through 3.1 allows local users to obtain sensitive keystroke information via access to /dev/pts/ and /dev/tty*. CWE-200
Information Exposure 		CVE-2011-4916 2024-11-21 10:33 2022-07-13 Show GitHub Exploit DB Packet Storm
295230 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel through 3.1 there is an information disclosure issue via /proc/stat. NVD-CWE-noinfo
CVE-2011-4917 2024-11-21 10:33 2022-04-19 Show GitHub Exploit DB Packet Storm