Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 19, 2026, noon

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
219461 3.7 注意 レッドハット - Red Hat Conga の Luci における権限を取得される脆弱性 CWE-255
証明書・パスワード管理 		CVE-2012-3359 2014-04-2 14:55 2012-09-6 Show GitHub Exploit DB Packet Storm
219462 10 危険 Jgaa - War FTP Daemon におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2013-2278 2014-04-2 14:43 2013-02-25 Show GitHub Exploit DB Packet Storm
219463 4 警告 Jgaa - War FTP Daemon におけるフォーマットストリングの脆弱性 CWE-134
書式文字列の問題 		CVE-2009-5141 2014-04-2 14:43 2009-09-12 Show GitHub Exploit DB Packet Storm
219464 10 危険 アライドテレシス - 複数の Allied Telesis ルータ製品における権限を取得される脆弱性 CWE-287
CWE-78
CVE-2014-1982 2014-04-2 13:41 2014-03-26 Show GitHub Exploit DB Packet Storm
219465 10 危険 Chainfire - Android 用 Chainfire SuperSU パッケージにおける権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-6775 2014-04-2 12:19 2013-11-13 Show GitHub Exploit DB Packet Storm
219466 10 危険 AndroidSU.com
Koushik Dutta
Chainfire		 - Android 用 ChainsDD Superuser パッケージなどの製品における任意の .jar ファイルをロードされる脆弱性 CWE-Other
その他 		CVE-2013-6774 2014-04-2 12:19 2013-11-13 Show GitHub Exploit DB Packet Storm
219467 6.8 警告 Koushik Dutta - Android 用 CyanogenMod/ClockWorkMod/Koush Superuser パッケージにおける権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-6770 2014-04-2 12:18 2013-11-13 Show GitHub Exploit DB Packet Storm
219468 10 危険 Koushik Dutta - Android 用 CyanogenMod/ClockWorkMod/Koush Superuser パッケージにおける権限を取得される脆弱性 CWE-20
不適切な入力確認 		CVE-2013-6769 2014-04-2 12:18 2013-11-13 Show GitHub Exploit DB Packet Storm
219469 5 警告 Koushik Dutta - Android 用 CyanogenMod/ClockWorkMod/Koush Superuser パッケージにおけるトロイの木馬の app_process プログラムの起動を誘発される脆弱性 CWE-22
パス・トラバーサル 		CVE-2013-6768 2014-04-2 12:17 2013-11-13 Show GitHub Exploit DB Packet Storm
219470 6.9 警告 オラクル - Oracle VirtualBox における任意のコードを実行される脆弱性 CWE-399
リソース管理の問題 		CVE-2014-0983 2014-04-2 10:56 2014-02-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 19, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
294531 - apache struts The token check mechanism in Apache Struts 2.0.0 through 2.3.4 does not properly validate the token name configuration parameter, which allows remote attackers to perform cross-site request forgery (… CWE-352
 Origin Validation Error 		CVE-2012-4386 2024-11-21 10:42 2012-09-6 Show GitHub Exploit DB Packet Storm
294532 - adobe adobe_air_sdk
adobe_air
flash_player_for_android
flash_player 		Adobe Flash Player before 10.3.183.23 and 11.x before 11.4.402.265 on Windows and Mac OS X, before 10.3.183.23 and 11.x before 11.2.202.238 on Linux, before 11.1.111.16 on Android 2.x and 3.x, and be… NVD-CWE-noinfo
CVE-2012-4171 2024-11-21 10:42 2012-09-1 Show GitHub Exploit DB Packet Storm
294533 - gimp gimp The scriptfu network server in GIMP 2.6 does not require authentication, which allows remote attackers to execute arbitrary commands via the python-fu-eval command. CWE-862
 Missing Authorization 		CVE-2012-4245 2024-11-21 10:42 2012-09-1 Show GitHub Exploit DB Packet Storm
294534 - adobe photoshop_cs6 Buffer overflow in Adobe Photoshop CS6 13.x before 13.0.1 allows remote attackers to execute arbitrary code via a crafted file. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2012-4170 2024-11-21 10:42 2012-08-31 Show GitHub Exploit DB Packet Storm
294535 - cybozu cybozu_live The WebView class in the Cybozu Live application 1.0.4 and earlier for Android allows remote attackers to execute arbitrary JavaScript code, and obtain sensitive information, via a crafted applicatio… CWE-94
Code Injection 		CVE-2012-4009 2024-11-21 10:42 2012-08-31 Show GitHub Exploit DB Packet Storm
294536 - cybozu cybozu_live The Cybozu Live application 1.0.4 and earlier for Android allows remote attackers to execute arbitrary Java methods, and obtain sensitive information or execute arbitrary commands, via a crafted web … CWE-94
Code Injection 		CVE-2012-4008 2024-11-21 10:42 2012-08-31 Show GitHub Exploit DB Packet Storm
294537 - opera opera_browser Opera before 11.60 allows remote attackers to spoof the address bar via unspecified homograph characters, a different vulnerability than CVE-2010-2660. NVD-CWE-Other
CVE-2012-4010 2024-11-21 10:42 2012-08-31 Show GitHub Exploit DB Packet Storm
294538 - pbboard pbboard Unrestricted file upload vulnerability in admin.php in PBBoard 2.1.4 allows remote administrators to execute arbitrary PHP code by uploading a file with an executable extension, then accessing it via… NVD-CWE-Other
CVE-2012-4036 2024-11-21 10:42 2012-08-28 Show GitHub Exploit DB Packet Storm
294539 - foxitsoftware foxit_reader Foxit Reader before 5.3 on Windows XP and Windows 7 allows remote attackers to execute arbitrary code via a PDF document with a crafted attachment that triggers calculation of a negative number durin… NVD-CWE-Other
CVE-2012-4337 2024-11-21 10:42 2012-08-24 Show GitHub Exploit DB Packet Storm
294540 - phpmyadmin phpmyadmin Multiple cross-site scripting (XSS) vulnerabilities in the Database Structure page in phpMyAdmin 3.4.x before 3.4.11.1 and 3.5.x before 3.5.2.2 allow remote authenticated users to inject arbitrary we… CWE-79
Cross-site Scripting 		CVE-2012-4345 2024-11-21 10:42 2012-08-22 Show GitHub Exploit DB Packet Storm