Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 9, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
218991 3.5 注意 レッドハット - Spacewalk および Red Hat Network Satellite の account/EditAddress.do におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-1871 2014-02-17 15:10 2013-03-19 Show GitHub Exploit DB Packet Storm
218992 3.5 注意 レッドハット - Spacewalk および Red Hat Network Satellite の systems/sdc/notes.jsp におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-6149 2014-02-17 15:10 2012-11-29 Show GitHub Exploit DB Packet Storm
218993 4.7 警告 アップル - Apple Boot Camp の AppleMNT.sys におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2014-1253 2014-02-17 14:45 2014-02-12 Show GitHub Exploit DB Packet Storm
218994 5.1 警告 CA Technologies - CA 2E Web Option におけるセッションをハイジャックされる脆弱性 CWE-20
不適切な入力確認 		CVE-2014-1219 2014-02-17 14:44 2014-02-11 Show GitHub Exploit DB Packet Storm
218995 5.8 警告 レッドハット - Red Hat JBoss Operations Network における LDAP ベースのアカウントにログインされる脆弱性 CWE-287
不適切な認証 		CVE-2012-1100 2014-02-17 14:42 2012-03-19 Show GitHub Exploit DB Packet Storm
218996 5.8 警告 レッドハット - Red Hat JBoss Operations Network におけるエージェントのセッションをハイジャックされる脆弱性 CWE-287
不適切な認証 		CVE-2012-0062 2014-02-17 14:42 2012-02-1 Show GitHub Exploit DB Packet Storm
218997 5.8 警告 レッドハット - Red Hat JBoss Operations Network における任意のエージェントの識別情報を偽装される脆弱性 CWE-20
不適切な入力確認 		CVE-2012-0052 2014-02-17 14:41 2012-02-1 Show GitHub Exploit DB Packet Storm
218998 7.1 危険 MatrikonOPC - MatrikonOPC SCADA DNP3 OPC Server におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2013-2829 2014-02-17 14:39 2013-04-11 Show GitHub Exploit DB Packet Storm
218999 6.9 警告 Bandisoft - Bandisoft Bandizip における権限を取得される脆弱性 CWE-Other
その他 		CVE-2014-1680 2014-02-17 14:39 2014-01-24 Show GitHub Exploit DB Packet Storm
219000 5 警告 BlackBerry - 複数の BlackBerry 製品における重要な情報を取得される脆弱性 CWE-255
証明書・パスワード管理 		CVE-2014-1467 2014-02-17 14:38 2014-02-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 9, 2026, 5:07 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
295161 - moodle moodle mod/forum/user.php in Moodle 1.9.x before 1.9.16 allows remote authenticated users to obtain the names and other details of arbitrary user accounts by searching for posts. CWE-200
Information Exposure 		CVE-2012-0792 2024-11-21 10:35 2012-07-17 Show GitHub Exploit DB Packet Storm
295162 9.8 CRITICAL
Network 		tiki tikiwiki_cms\/groupware TikiWiki CMS/Groupware before 6.7 LTS and before 8.4 allows remote attackers to execute arbitrary PHP code via a crafted serialized object in the (1) cookieName to lib/banners/bannerlib.php; (2) prin… CWE-502
 Deserialization of Untrusted Data 		CVE-2012-0911 2024-11-21 10:35 2012-07-13 Show GitHub Exploit DB Packet Storm
295163 - libexpat_project
python
debian
canonical
oracle
redhat 		libexpat
python
debian_linux
ubuntu_linux
solaris
enterprise_linux_server
enterprise_linux_server_aus
enterprise_linux_workstation
enterprise_linux_desktop
storage
enter… 		The XML parser (xmlparse.c) in expat before 2.1.0 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a deni… CWE-400
 Uncontrolled Resource Consumption 		CVE-2012-0876 2024-11-21 10:35 2012-07-4 Show GitHub Exploit DB Packet Storm
295164 - fedoraproject 389_directory_server The acllas__handle_group_entry function in servers/plugins/acl/acllas.c in 389 Directory Server before 1.2.10 does not properly handled access control instructions (ACIs) that use certificate groups,… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2012-0833 2024-11-21 10:35 2012-07-4 Show GitHub Exploit DB Packet Storm
295165 - david_paleino wicd Wicd before 1.7.1 saves sensitive information in log files in /var/log/wicd, which allows context-dependent attackers to obtain passwords and other sensitive information. CWE-255
Credentials Management 		CVE-2012-0813 2024-11-21 10:35 2012-06-30 Show GitHub Exploit DB Packet Storm
295166 - ibm websphere_application_server Cross-site scripting (XSS) vulnerability in the Integration Solution Console in the Administration Console in IBM WebSphere Application Server 7.0 before 7.0.0.23 allows remote attackers to inject ar… CWE-79
Cross-site Scripting 		CVE-2012-0720 2024-11-21 10:35 2012-06-20 Show GitHub Exploit DB Packet Storm
295167 - ibm websphere_application_server IBM WebSphere Application Server 7.0 before 7.0.0.23, when a certain SSLv2 configuration with client authentication is used, allows remote attackers to bypass X.509 client-certificate authentication … CWE-287
Improper Authentication 		CVE-2012-0717 2024-11-21 10:35 2012-06-20 Show GitHub Exploit DB Packet Storm
295168 - ibm websphere_application_server Cross-site scripting (XSS) vulnerability in the Administration Console in IBM WebSphere Application Server 7.0 before 7.0.0.23 allows remote attackers to inject arbitrary web script or HTML via unspe… CWE-79
Cross-site Scripting 		CVE-2012-0716 2024-11-21 10:35 2012-06-20 Show GitHub Exploit DB Packet Storm
295169 - spamdyke spamdyke Multiple buffer overflows in Spamdyke before 4.3.0 might allow remote attackers to execute arbitrary code via vectors related to "serious errors in the usage of snprintf()/vsnprintf()" in which the r… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2012-0802 2024-11-21 10:35 2012-06-20 Show GitHub Exploit DB Packet Storm
295170 - apple itunes Heap-based buffer overflow in Apple iTunes before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted .m3u playlist. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2012-0677 2024-11-21 10:35 2012-06-12 Show GitHub Exploit DB Packet Storm