Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 27, 2026, noon

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
219471 5 警告 MediaWiki - MediaWiki 用 Scribuntu 拡張機能の php-luasandbox におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2013-4570 2014-05-13 12:20 2013-09-24 Show GitHub Exploit DB Packet Storm
219472 4.3 警告 IBM - IBM Operational Decision Manager の Rule Execution Server における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2014-0946 2014-05-12 18:42 2014-04-30 Show GitHub Exploit DB Packet Storm
219473 3.5 注意 IBM - IBM Operational Decision Manager の Rule Execution Server におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-0945 2014-05-12 18:38 2014-04-30 Show GitHub Exploit DB Packet Storm
219474 6 警告 IBM - IBM Operational Decision Manager の Rule Execution Server の Rule Execution Server コンソールにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2014-0944 2014-05-12 18:33 2014-04-30 Show GitHub Exploit DB Packet Storm
219475 4.3 警告 IBM - IBM iNotes および Domino におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-0913 2014-05-12 18:20 2014-05-7 Show GitHub Exploit DB Packet Storm
219476 5 警告 ISC, Inc. - ISC BIND の named のプリフェッチの実装におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2014-3214 2014-05-12 18:11 2014-05-8 Show GitHub Exploit DB Packet Storm
219477 4.3 警告 SemanticTitle project - MediaWiki 用 SemanticTitle 拡張機能 におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-2854 2014-05-12 18:04 2014-03-7 Show GitHub Exploit DB Packet Storm
219478 4.3 警告 SKS Keyserver project - SKS Keyserver の wserver.ml におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-3207 2014-05-12 17:54 2014-05-1 Show GitHub Exploit DB Packet Storm
219479 4.3 警告 株式会社エヌ・ティ・ティ・データ・イントラマート - intra-mart におけるオープンリダイレクトの脆弱性 CWE-20
不適切な入力確認
CVE-2014-1991 2014-05-12 17:44 2014-05-8 Show GitHub Exploit DB Packet Storm
219480 5.8 警告 フォーティネット - Fortinet Fortiweb におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2014-3115 2014-05-12 17:43 2014-05-7 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 27, 2026, 4:52 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
296141 - gnu
canonical
debian
binutils
libiberty
ubuntu_linux
debian_linux
Multiple integer overflows in the (1) _objalloc_alloc function in objalloc.c and (2) objalloc_alloc macro in include/objalloc.h in GNU libiberty, as used by binutils 2.22, allow remote attackers to c… CWE-189
Numeric Errors
CVE-2012-3509 2024-11-21 10:41 2012-09-6 Show GitHub Exploit DB Packet Storm
296142 - mozilla bugzilla Auth/Verify/LDAP.pm in Bugzilla 2.x and 3.x before 3.6.11, 3.7.x and 4.0.x before 4.0.8, 4.1.x and 4.2.x before 4.2.3, and 4.3.x before 4.3.3 does not restrict the characters in a username, which mig… CWE-255
Credentials Management
CVE-2012-3981 2024-11-21 10:41 2012-09-4 Show GitHub Exploit DB Packet Storm
296143 - symantec pgp_universal_server Symantec PGP Universal Server 3.2.x before 3.2.1 MP2 does not properly manage sessions that include key search requests, which might allow remote attackers to read a private key in opportunistic circ… CWE-264
Permissions, Privileges, and Access Controls
CVE-2012-3582 2024-11-21 10:41 2012-09-4 Show GitHub Exploit DB Packet Storm
296144 - opensuse
gnugk
leap
opensuse
gnu_gatekeeper
GNU Gatekeeper before 3.1 does not limit the number of connections to the status port, which allows remote attackers to cause a denial of service (connection and thread consumption) via a large numbe… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2012-3534 2024-11-21 10:41 2012-09-1 Show GitHub Exploit DB Packet Storm
296145 - ovirt
ovirt-engine-sdk
ovirt-engine-cli
3.1.0.5
ovirt
The python SDK before 3.1.0.6 and CLI before 3.1.0.8 for oVirt 3.1 does not check the server SSL certificate against the client keys, which allows remote attackers to spoof a server via a man-in-the-… CWE-310
Cryptographic Issues
CVE-2012-3533 2024-11-21 10:41 2012-09-1 Show GitHub Exploit DB Packet Storm
296146 - wireshark wireshark The dissect_drda function in epan/dissectors/packet-drda.c in Wireshark 1.6.x through 1.6.10 and 1.8.x through 1.8.2 allows remote attackers to cause a denial of service (infinite loop and CPU consum… CWE-399
 Resource Management Errors
CVE-2012-3548 2024-11-21 10:41 2012-08-31 Show GitHub Exploit DB Packet Storm
296147 - mozilla firefox
thunderbird
thunderbird_esr
The web console in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, and Thunderbird ESR 10.x before 10.0.7 allows user-assisted remote attackers to execute arbitr… CWE-94
Code Injection
CVE-2012-3980 2024-11-21 10:41 2012-08-29 Show GitHub Exploit DB Packet Storm
296148 - mozilla
google
firefox
firefox_mobile
android
Mozilla Firefox before 15.0 on Android does not properly implement unspecified callers of the __android_log_print function, which allows remote attackers to execute arbitrary code via a crafted web p… NVD-CWE-noinfo
CVE-2012-3979 2024-11-21 10:41 2012-08-29 Show GitHub Exploit DB Packet Storm
296149 - mozilla firefox
thunderbird_esr
thunderbird
seamonkey
The nsLocation::CheckURL function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 does not prope… CWE-264
Permissions, Privileges, and Access Controls
CVE-2012-3978 2024-11-21 10:41 2012-08-29 Show GitHub Exploit DB Packet Storm
296150 - mozilla
suse
opensuse
redhat
canonical
firefox
seamonkey
linux_enterprise_desktop
opensuse
linux_enterprise_server
linux_enterprise_software_development_kit
enterprise_linux_server
enterprise_linux_workstation
ente…
Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, and SeaMonkey before 2.12 do not properly handle onLocationChange events during navigation between different https sites, which allows rem… CWE-200
Information Exposure
CVE-2012-3976 2024-11-21 10:41 2012-08-29 Show GitHub Exploit DB Packet Storm