Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 10, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
218941 5 警告 The PHP Group - PHP の ext/gd/gd.c における重要な情報を取得される脆弱性 CWE-189
数値処理の問題
CVE-2014-2020 2014-02-19 18:36 2014-02-18 Show GitHub Exploit DB Packet Storm
218942 6.4 警告 The PHP Group - PHP の ext/gd/gd.c の gdImageCrop 関数における整数符号エラーの脆弱性 CWE-189
数値処理の問題
CVE-2013-7328 2014-02-19 18:33 2013-12-28 Show GitHub Exploit DB Packet Storm
218943 5 警告 The PHP Group - PHP の libxml RSHUTDOWN 機能における open_basedir 保護メカニズムを回避される脆弱性 CWE-200
情報漏えい
CVE-2012-1171 2014-02-19 18:31 2012-03-25 Show GitHub Exploit DB Packet Storm
218944 2.1 注意 ヒューレット・パッカード - HP Linux Imaging and Printing におけるログファイルを削除される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-6108 2014-02-19 18:24 2012-11-27 Show GitHub Exploit DB Packet Storm
218945 7.5 危険 netfilter.org - iptables の extensions/libxt_tcp.c におけるファイアウォールの制限を回避される脆弱性 CWE-20
不適切な入力確認
CVE-2012-2663 2014-02-19 18:23 2012-03-30 Show GitHub Exploit DB Packet Storm
218946 5.7 警告 レッドハット - Red Hat Enterprise Linux の kexec-tools パッケージで配布される kexec-tools 用 Red Hat mkdumprd スクリプトにおける重要な情報を取得される脆弱性 CWE-310
暗号の問題
CVE-2011-3590 2014-02-19 17:52 2011-08-10 Show GitHub Exploit DB Packet Storm
218947 5.7 警告 レッドハット - Red Hat Enterprise Linux の kexec-tools パッケージで配布される kexec-tools 用 Red Hat mkdumprd スクリプトにおける重要な情報を取得される脆弱性 CWE-310
暗号の問題
CVE-2011-3589 2014-02-19 17:51 2011-08-10 Show GitHub Exploit DB Packet Storm
218948 5.7 警告 レッドハット - Red Hat Enterprise Linux の kexec-tools パッケージで配布される kexec-tools 用 Red Hat mkdumprd スクリプトにおける kdump サーバになりすまされる脆弱性 CWE-310
暗号の問題
CVE-2011-3588 2014-02-19 17:50 2011-08-10 Show GitHub Exploit DB Packet Storm
218949 2.1 注意 Stephen Hemminger - iproute2 における任意のファイルを上書きされる脆弱性 CWE-59
リンク解釈の問題
CVE-2012-1088 2014-02-19 17:41 2012-02-15 Show GitHub Exploit DB Packet Storm
218950 6.8 警告 Google - Google Chrome における永続的なログアウトに関するクロスサイトリクエストフォージェリに相当する攻撃を実行される脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2013-6166 2014-02-19 17:18 2013-09-20 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 10, 2026, 4:58 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
293411 - gimp gimp fits-io.c in GIMP before 2.8.1 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a malformed XTENSION header of a .fit file, as demonstrated us… CWE-476
 NULL Pointer Dereference
CVE-2012-3236 2024-11-21 10:40 2012-07-13 Show GitHub Exploit DB Packet Storm
293412 - extplorer extplorer Cross-site request forgery (CSRF) vulnerability in eXtplorer 2.1 RC3 and earlier allows remote attackers to hijack the authentication of administrators for requests that add an administrator account … CWE-352
 Origin Validation Error
CVE-2012-3362 2024-11-21 10:40 2012-07-13 Show GitHub Exploit DB Packet Storm
293413 - artis.imag basilic Config/diff.php in Basilic 1.5.14 allows remote attackers to execute arbitrary commands via shell metacharacters in the file parameter. CWE-20
 Improper Input Validation 
CVE-2012-3399 2024-11-21 10:40 2012-07-13 Show GitHub Exploit DB Packet Storm
293414 - apache hadoop DataNodes in Apache Hadoop 2.0.0 alpha does not check the BlockTokens of clients when Kerberos is enabled and the DataNode has checked out the same BlockPool twice from a NodeName, which might allow … CWE-310
Cryptographic Issues
CVE-2012-3376 2024-11-21 10:40 2012-07-13 Show GitHub Exploit DB Packet Storm
293415 - cisco telepresence_recording_server The administrative web interface on Cisco TelePresence Recording Server before 1.8.0 allows remote authenticated users to execute arbitrary commands via unspecified vectors, aka Bug ID CSCth85804. CWE-78
OS Command 
CVE-2012-3076 2024-11-21 10:40 2012-07-12 Show GitHub Exploit DB Packet Storm
293416 - cisco telepresence_system_software
telepresence_system_1300_65
telepresence_system_3000
telepresence_system_3010
telepresence_system_3200
telepresence_system_3210
telepresence_system_t3
The administrative web interface on Cisco TelePresence Immersive Endpoint Devices before 1.7.4 allows remote authenticated users to execute arbitrary commands via a malformed request on TCP port 443,… CWE-78
OS Command 
CVE-2012-3075 2024-11-21 10:40 2012-07-12 Show GitHub Exploit DB Packet Storm
293417 - cisco telepresence_system_software
telepresence_system_1300_65
telepresence_system_3000
telepresence_system_3010
telepresence_system_3200
telepresence_system_3210
telepresence_system_t3
An unspecified API on Cisco TelePresence Immersive Endpoint Devices before 1.9.1 allows remote attackers to execute arbitrary commands by leveraging certain adjacency and sending a malformed request … CWE-78
OS Command 
CVE-2012-3074 2024-11-21 10:40 2012-07-12 Show GitHub Exploit DB Packet Storm
293418 - cisco telepresence_multipoint_switch_software
telepresence_multipoint_switch
telepresence_system_software
telepresence_system_1300_65
telepresence_system_3000
telepresence_system_3010
tel…
The IP implementation on Cisco TelePresence Multipoint Switch before 1.8.1, Cisco TelePresence Manager before 1.9.0, and Cisco TelePresence Recording Server 1.8 and earlier allows remote attackers to… NVD-CWE-Other
CVE-2012-3073 2024-11-21 10:40 2012-07-12 Show GitHub Exploit DB Packet Storm
293419 - astaro
sophos
security_gateway_software
security_gateway
unified_threat_management_software
unified_threat_management
Cross-site scripting (XSS) vulnerability in the Backup/Restore component in WebAdmin in Astaro Security Gateway before 8.305 allows remote attackers to inject arbitrary web script or HTML via the "Co… CWE-79
Cross-site Scripting
CVE-2012-3238 2024-11-21 10:40 2012-07-10 Show GitHub Exploit DB Packet Storm
293420 - synel sy-780\/a_time_\&_attendance_terminal The Synel SY-780/A Time & Attendance terminal allows remote attackers to cause a denial of service (device hang) via network traffic to port (1) 1641, (2) 3734, or (3) 3735. CWE-399
 Resource Management Errors
CVE-2012-2970 2024-11-21 10:40 2012-07-10 Show GitHub Exploit DB Packet Storm