Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 30, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
219381 5 警告 University of California - BOINC の client/cs_account.cpp の PROJECT::write_account_file 関数におけるフォーマットストリングの脆弱性 CWE-134
書式文字列の問題 		CVE-2013-7386 2014-06-4 14:46 2013-04-25 Show GitHub Exploit DB Packet Storm
219382 9.3 危険 University of California - BOINC の XML パーサにおけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2013-2298 2014-06-4 14:45 2013-03-7 Show GitHub Exploit DB Packet Storm
219383 9.3 危険 University of California - BOINC におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2013-2019 2014-06-4 14:45 2013-04-28 Show GitHub Exploit DB Packet Storm
219384 5 警告 University of California - BOINC におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2011-5280 2014-06-4 14:45 2011-11-6 Show GitHub Exploit DB Packet Storm
219385 7.5 危険 XOOPS - XOOPS 用 Glossaire モジュールの glossaire-aff.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2014-3935 2014-06-4 14:35 2014-05-19 Show GitHub Exploit DB Packet Storm
219386 7.5 危険 PHPNUKE - PHP-Nuke 用 Submit News モジュールにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2014-3934 2014-06-4 13:59 2014-05-24 Show GitHub Exploit DB Packet Storm
219387 5 警告 OpenStack - OpenStack Identity におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2013-2014 2014-06-4 12:12 2013-02-21 Show GitHub Exploit DB Packet Storm
219388 5 警告 MediaWiki - MediaWiki の maintenance/mwdoc-filter.php における任意のファイルを読まれる脆弱性 CWE-200
情報漏えい 		CVE-2013-1818 2014-06-4 12:08 2013-03-4 Show GitHub Exploit DB Packet Storm
219389 6.8 警告 MediaWiki - MediaWiki 用 CentralAuth 拡張機能における Web セッションをハイジャックされる脆弱性 CWE-Other
その他 		CVE-2012-5395 2014-06-4 12:08 2012-11-30 Show GitHub Exploit DB Packet Storm
219390 6.8 警告 MediaWiki - MediaWiki の Special:UserLogin における Web セッションをハイジャックされる脆弱性 CWE-Other
その他 		CVE-2012-5391 2014-06-4 12:08 2012-11-30 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 30, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
296421 - google chrome Google Chrome before 23.0.1271.91 on Mac OS X does not properly mitigate improper rendering behavior in the Intel GPU driver, which allows remote attackers to cause a denial of service or possibly ha… NVD-CWE-noinfo
CVE-2012-5131 2024-11-21 10:44 2012-11-28 Show GitHub Exploit DB Packet Storm
296422 - opensuse
google 		opensuse
chrome 		Skia, as used in Google Chrome before 23.0.1271.91, allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors. CWE-125
Out-of-bounds Read 		CVE-2012-5130 2024-11-21 10:44 2012-11-28 Show GitHub Exploit DB Packet Storm
296423 - openvas openvas_manager The send_to_sourcefire function in manage_sql.c in OpenVAS Manager 3.x before 3.0.4 allows remote attackers to execute arbitrary commands via the (1) IP address or (2) port number field in an OMP req… CWE-20
 Improper Input Validation  		CVE-2012-5520 2024-11-21 10:44 2012-11-26 Show GitHub Exploit DB Packet Storm
296424 - lighttpd lighttpd The http_request_split_value function in request.c in lighttpd before 1.4.32 allows remote attackers to cause a denial of service (infinite loop) via a request with a header containing an empty token… CWE-399
 Resource Management Errors 		CVE-2012-5533 2024-11-21 10:44 2012-11-25 Show GitHub Exploit DB Packet Storm
296425 - bigace bigace Session fixation vulnerability in BIGACE before 2.7.8 allows remote attackers to hijack web sessions via unspecified vectors. NVD-CWE-Other
CVE-2012-5173 2024-11-21 10:44 2012-11-23 Show GitHub Exploit DB Packet Storm
296426 - andy_armstrong cgi.pm CGI.pm module before 3.63 for Perl does not properly escape newlines in (1) Set-Cookie or (2) P3P headers, which might allow remote attackers to inject arbitrary headers into responses from applicati… CWE-16
Configuration 		CVE-2012-5526 2024-11-21 10:44 2012-11-22 Show GitHub Exploit DB Packet Storm
296427 - moodle moodle Moodle 2.3.x before 2.3.3 allows remote authenticated users to bypass the moodle/role:manage capability requirement and read all capability data by visiting the Check Permissions page. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2012-5481 2024-11-21 10:44 2012-11-21 Show GitHub Exploit DB Packet Storm
296428 - moodle moodle The Database activity module in Moodle 2.1.x before 2.1.9, 2.2.x before 2.2.6, and 2.3.x before 2.3.3 allows remote attackers to bypass intended restrictions on reading other participants' entries vi… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2012-5480 2024-11-21 10:44 2012-11-21 Show GitHub Exploit DB Packet Storm
296429 - moodle moodle The Portfolio plugin in Moodle 2.1.x before 2.1.9, 2.2.x before 2.2.6, and 2.3.x before 2.3.3 allows remote authenticated users to upload and execute files via a modified Portfolio API callback. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2012-5479 2024-11-21 10:44 2012-11-21 Show GitHub Exploit DB Packet Storm
296430 - moodle moodle The Database activity module in Moodle 2.1.x before 2.1.9, 2.2.x before 2.2.6, and 2.3.x before 2.3.3 allows remote authenticated users to read activity entries of a different group's users via an ad… CWE-200
Information Exposure 		CVE-2012-5473 2024-11-21 10:44 2012-11-21 Show GitHub Exploit DB Packet Storm