Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 31, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
219351	6	警告	TYPO3 Association	-	TYPO3 の Color Picker Wizard コンポーネントにおける任意の PHP コードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2014-3942	2014-06-5 12:20	2014-05-22	Show	GitHub Exploit DB Packet Storm

219352	5	警告	TYPO3 Association	-	TYPO3 における脆弱性	CWE-20 不適切な入力確認	CVE-2014-3941	2014-06-5 12:19	2014-05-22	Show	GitHub Exploit DB Packet Storm

219353	4	警告	TYPO3 Association	-	TYPO3 の Extbase Framework コンポーネントのクエリキャッシュ機能における任意のクエリを読まれる脆弱性	CWE-200 情報漏えい	CVE-2014-3946	2014-06-5 12:17	2014-05-22	Show	GitHub Exploit DB Packet Storm

219354	5	警告	libpam-pgsql	-	libpam-pgsql における認証を回避される脆弱性	CWE-287 不適切な認証	CVE-2013-0191	2014-06-5 11:52	2013-01-15	Show	GitHub Exploit DB Packet Storm

219355	7.5	危険	マイクロソフトアドビシステムズ Google	-	Adobe Flash Player および Adobe AIR SDK におけるアクセス制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2014-0520	2014-06-4 18:19	2014-05-13	Show	GitHub Exploit DB Packet Storm

219356	7.5	危険	マイクロソフトアドビシステムズ Google	-	Adobe Flash Player および Adobe AIR SDK におけるアクセス制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2014-0519	2014-06-4 18:19	2014-05-13	Show	GitHub Exploit DB Packet Storm

219357	7.5	危険	マイクロソフトアドビシステムズ Google	-	Adobe Flash Player および Adobe AIR SDK におけるアクセス制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2014-0518	2014-06-4 18:18	2014-05-13	Show	GitHub Exploit DB Packet Storm

219358	7.5	危険	マイクロソフトアドビシステムズ Google	-	Adobe Flash Player および Adobe AIR SDK におけるアクセス制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2014-0517	2014-06-4 18:17	2014-05-13	Show	GitHub Exploit DB Packet Storm

219359	7.5	危険	マイクロソフトアドビシステムズ Google	-	Adobe Flash Player および Adobe AIR SDK における同一生成元ポリシーを回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2014-0516	2014-06-4 18:17	2014-05-13	Show	GitHub Exploit DB Packet Storm

219360	10	危険	マイクロソフトアドビシステムズ Google	-	Adobe Flash Player におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2014-0515	2014-06-4 18:16	2014-04-28	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 31, 2026, 4:16 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
296551	-	mantisbt	mantisbt	core/email_api.php in MantisBT before 1.2.12 does not properly manage the sending of e-mail notifications about restricted bugs, which might allow remote authenticated users to obtain sensitive infor…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2012-5523	2024-11-21 10:44	2012-11-16	Show	GitHub Exploit DB Packet Storm

296552	-	mantisbt	mantisbt	MantisBT before 1.2.12 does not use an expected default value during decisions about whether a user may modify the status of a bug, which allows remote authenticated users to bypass intended access r…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2012-5522	2024-11-21 10:44	2012-11-16	Show	GitHub Exploit DB Packet Storm

296553	-	vmware	player workstation	Untrusted search path vulnerability in VMware Workstation 8.x before 8.0.5 and VMware Player 4.x before 4.0.5 on Windows allows host OS users to gain host OS privileges via a Trojan horse DLL in a "s…	NVD-CWE-Other	CVE-2012-5459	2024-11-21 10:44	2012-11-14	Show	GitHub Exploit DB Packet Storm

296554	-	vmware	player workstation	VMware Workstation 8.x before 8.0.5 and VMware Player 4.x before 4.0.5 on Windows use weak permissions for unspecified process threads, which allows host OS users to gain host OS privileges via a cra…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2012-5458	2024-11-21 10:44	2012-11-14	Show	GitHub Exploit DB Packet Storm

296555	-	adobe	flash_player flash_player_for_android adobe_air adobe_air_sdk	Buffer overflow in Adobe Flash Player before 10.3.183.29 and 11.x before 11.4.402.287 on Windows and Mac OS X, before 10.3.183.29 and 11.x before 11.2.202.243 on Linux, before 11.1.111.19 on Android …	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2012-5287	2024-11-21 10:44	2012-11-13	Show	GitHub Exploit DB Packet Storm

296556	-	adobe	flash_player flash_player_for_android adobe_air adobe_air_sdk	Buffer overflow in Adobe Flash Player before 10.3.183.29 and 11.x before 11.4.402.287 on Windows and Mac OS X, before 10.3.183.29 and 11.x before 11.2.202.243 on Linux, before 11.1.111.19 on Android …	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2012-5286	2024-11-21 10:44	2012-11-13	Show	GitHub Exploit DB Packet Storm

296557	-	adobe	flash_player air air_sdk	Buffer overflow in Adobe Flash Player before 10.3.183.29 and 11.x before 11.4.402.287 on Windows and Mac OS X, before 10.3.183.29 and 11.x before 11.2.202.243 on Linux, before 11.1.111.19 on Android …	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2012-5285	2024-11-21 10:44	2012-11-13	Show	GitHub Exploit DB Packet Storm

296558	-	openstack	image_registry_and_delivery_service_\(glance\) essex folsom	The v2 API in OpenStack Glance Grizzly, Folsom (2012.2), and Essex (2012.1) allows remote authenticated users to delete arbitrary non-protected images via an image deletion request. NOTE: this vulne…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2012-5482	2024-11-21 10:44	2012-11-11	Show	GitHub Exploit DB Packet Storm

296559	-	be-graph	bezip	Directory traversal vulnerability in Be Graph BeZIP before 3.10 allows remote attackers to create or overwrite arbitrary files via a crafted archive file.	CWE-22 Path Traversal	CVE-2012-5171	2024-11-21 10:44	2012-11-8	Show	GitHub Exploit DB Packet Storm

296560	-	cisco	secure_access_control_server	Cisco Secure Access Control System (ACS) 5.x before 5.2 Patch 11 and 5.3 before 5.3 Patch 7, when a certain configuration involving TACACS+ and LDAP is used, does not properly validate passwords, whi…	CWE-20 Improper Input Validation	CVE-2012-5424	2024-11-21 10:44	2012-11-8	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed