Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 20, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
218861 6.8 警告 madeofcode - omniauth-facebook gem におけるクロスサイトリクエストフォージェリ攻撃を実行される脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2013-4562 2014-05-16 10:14 2013-11-12 Show GitHub Exploit DB Packet Storm
218862 6.8 警告 Atlassian - Atlassian Confluence の logout.action におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2012-6342 2014-05-15 17:17 2012-09-19 Show GitHub Exploit DB Packet Storm
218863 6.5 警告 Open Dynamics - Collabtive における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2014-3246 2014-05-15 16:50 2014-05-8 Show GitHub Exploit DB Packet Storm
218864 4.3 警告 GitLab.org - GitLab Enterprise Edition におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-3456 2014-05-15 16:37 2014-02-27 Show GitHub Exploit DB Packet Storm
218865 6.5 警告 GitLab.org - GitLab で使用される gitlab-shell のリポジトリのインポート機能における任意のコマンドを実行される脆弱性 CWE-Other
その他 		CVE-2013-4546 2014-05-15 16:36 2013-11-8 Show GitHub Exploit DB Packet Storm
218866 6.5 警告 GitLab.org - GitLab で使用される gitlab-shell の SSH 鍵のアップロード機能における任意のコマンドを実行される脆弱性 CWE-Other
その他 		CVE-2013-4490 2014-05-15 16:36 2013-11-4 Show GitHub Exploit DB Packet Storm
218867 7.5 危険 LCG project - EGI UDM で使用される LCG Disk Pool Manager における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2011-4970 2014-05-15 16:34 2011-08-3 Show GitHub Exploit DB Packet Storm
218868 7.5 危険 Google - Google Chrome で使用される Blink の core/dom/CharacterData.cpp におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2014-1742 2014-05-15 16:09 2014-05-13 Show GitHub Exploit DB Packet Storm
218869 7.5 危険 Google - Google Chrome で使用される Blink の core/dom/CharacterData.cpp における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2014-1741 2014-05-15 16:08 2014-05-13 Show GitHub Exploit DB Packet Storm
218870 7.5 危険 Google - Google Chrome の WebSockets の実装におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2014-1740 2014-05-15 16:07 2014-05-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 20, 2026, 4:14 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
296531 - gajim gajim src/common/latex.py in Gajim 0.15 allows local users to overwrite arbitrary files via a symlink attack on a temporary latex file, related to the get_tmpfile_name function. CWE-59
Link Following 		CVE-2012-2093 2024-11-21 10:38 2012-05-19 Show GitHub Exploit DB Packet Storm
296532 - hp openvms The ACMELOGIN implementation in HP OpenVMS 8.3 and 8.4 on the Alpha platform, and 8.3, 8.3-1H1, and 8.4 on the Itanium platform, when the SYS$ACM system service is enabled, allows local users to gain… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2012-2010 2024-11-21 10:38 2012-05-19 Show GitHub Exploit DB Packet Storm
296533 - todd_miller sudo sudo 1.6.x and 1.7.x before 1.7.9p1, and 1.8.x before 1.8.4p5, does not properly support configurations that use a netmask syntax, which allows local users to bypass intended command restrictions in … CWE-264
Permissions, Privileges, and Access Controls 		CVE-2012-2337 2024-11-21 10:38 2012-05-19 Show GitHub Exploit DB Packet Storm
296534 - linux linux_kernel Multiple buffer overflows in the hfsplus filesystem implementation in the Linux kernel before 3.3.5 allow local users to gain privileges via a crafted HFS plus filesystem, a related issue to CVE-2009… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2012-2319 2024-11-21 10:38 2012-05-17 Show GitHub Exploit DB Packet Storm
296535 - linux linux_kernel The cap_bprm_set_creds function in security/commoncap.c in the Linux kernel before 3.3.3 does not properly handle the use of file system capabilities (aka fcaps) for implementing a privileged executa… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2012-2123 2024-11-21 10:38 2012-05-17 Show GitHub Exploit DB Packet Storm
296536 - linux linux_kernel The KVM implementation in the Linux kernel before 3.3.4 does not properly manage the relationships between memory slots and the iommu, which allows guest OS users to cause a denial of service (memory… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2012-2121 2024-11-21 10:38 2012-05-17 Show GitHub Exploit DB Packet Storm
296537 - openssl
redhat 		openssl Integer underflow in OpenSSL before 0.9.8x, 1.0.0 before 1.0.0j, and 1.0.1 before 1.0.1c, when TLS 1.1, TLS 1.2, or DTLS is used with CBC encryption, allows remote attackers to cause a denial of serv… CWE-189
Numeric Errors 		CVE-2012-2333 2024-11-21 10:38 2012-05-15 Show GitHub Exploit DB Packet Storm
296538 - emc documentum_information_rights_management The IRM Server in EMC Documentum Information Rights Management 4.x before 4.7.0100 and 5.x before 5.0.1030 allows remote attackers to cause a denial of service (pvcontrol.exe process hang) via \n (li… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2012-2277 2024-11-21 10:38 2012-05-15 Show GitHub Exploit DB Packet Storm
296539 - emc documentum_information_rights_management The IRM Server in EMC Documentum Information Rights Management 4.x before 4.7.0100 and 5.x before 5.0.1030 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon cr… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2012-2276 2024-11-21 10:38 2012-05-15 Show GitHub Exploit DB Packet Storm
296540 - php php sapi/cgi/cgi_main.c in PHP before 5.3.13 and 5.4.x before 5.4.3, when configured as a CGI script (aka php-cgi), does not properly handle query strings that lack an = (equals sign) character, which al… CWE-20
 Improper Input Validation  		CVE-2012-2336 2024-11-21 10:38 2012-05-11 Show GitHub Exploit DB Packet Storm