Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 18, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
219561 4.3 警告 stunnel - stunnel における EC または DSA 証明書の秘密鍵を取得される脆弱性 CWE-310
暗号の問題 		CVE-2014-0016 2014-03-26 10:36 2014-03-6 Show GitHub Exploit DB Packet Storm
219562 6.8 警告 株式会社NTTドコモ - spモードメールにおいて Java メソッドが実行される脆弱性 CWE-DesignError
CVE-2014-1979 2014-03-25 19:25 2014-03-18 Show GitHub Exploit DB Packet Storm
219563 2.6 注意 株式会社NTTドコモ - spモードメールで作成中のメールへのアクセスに関する問題 CWE-264
認可・権限・アクセス制御 		CVE-2014-1978 2014-03-25 19:23 2014-03-18 Show GitHub Exploit DB Packet Storm
219564 2.9 注意 Linux - Linux Kernel の net/netfilter/nfnetlink_queue_core.c 内の nfqnl_zcopy 関数における重要な情報を取得される脆弱性 CWE-399
リソース管理の問題 		CVE-2014-2568 2014-03-25 18:09 2014-03-20 Show GitHub Exploit DB Packet Storm
219565 2.9 注意 Linux - Linux Kernel の net/core/skbuff.c 内の skb_segment 関数における重要な情報を取得される脆弱性 CWE-399
リソース管理の問題 		CVE-2014-0131 2014-03-25 18:08 2014-03-11 Show GitHub Exploit DB Packet Storm
219566 4.7 警告 Linux - Linux Kernel の net/rds/ib.c 内の rds_ib_laddr_check 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2013-7339 2014-03-25 18:08 2013-12-27 Show GitHub Exploit DB Packet Storm
219567 4.3 警告 デル - SonicWall Network Security Appliance 2400 の Dashboard Backend サービスにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-2589 2014-03-25 18:07 2014-03-6 Show GitHub Exploit DB Packet Storm
219568 4.9 警告 ownCloud - ownCloud におけるユーザの ownCloud のローカルファイルシステムをマウントされる脆弱性 CWE-20
不適切な入力確認 		CVE-2014-2585 2014-03-25 18:05 2014-03-7 Show GitHub Exploit DB Packet Storm
219569 4.3 警告 ownCloud - ownCloud におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-2057 2014-03-25 18:05 2014-03-7 Show GitHub Exploit DB Packet Storm
219570 6.5 警告 ownCloud - ownCloud の core/settings.php における任意の PHP コードを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2013-7344 2014-03-25 18:04 2013-02-17 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 18, 2026, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
295811 - siemens wincc The XPath functionality in unspecified web applications in Siemens WinCC 7.0 SP3 before Update 2 does not properly handle special characters in parameters, which allows remote authenticated users to … CWE-94
Code Injection 		CVE-2012-2596 2024-11-21 10:39 2012-06-9 Show GitHub Exploit DB Packet Storm
295812 - siemens wincc Multiple cross-site scripting (XSS) vulnerabilities in unspecified web applications in Siemens WinCC 7.0 SP3 before Update 2 allow remote attackers to inject arbitrary web script or HTML via vectors … CWE-79
Cross-site Scripting 		CVE-2012-2595 2024-11-21 10:39 2012-06-9 Show GitHub Exploit DB Packet Storm
295813 - collabnet scrumworks The server in CollabNet ScrumWorks Pro before 6.0 allows remote authenticated users to gain privileges and obtain sensitive information via a modified desktop client. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2012-2603 2024-11-21 10:39 2012-06-9 Show GitHub Exploit DB Packet Storm
295814 - s9y serendipity SQL injection vulnerability in include/functions_trackbacks.inc.php in Serendipity 1.6.2 allows remote attackers to execute arbitrary SQL commands via the url parameter to comment.php. CWE-89
SQL Injection 		CVE-2012-2762 2024-11-21 10:39 2012-06-8 Show GitHub Exploit DB Packet Storm
295815 - sensiolabs symfony Session fixation vulnerability in lib/user/sfBasicSecurityUser.class.php in SensioLabs Symfony before 1.4.18 allows remote attackers to hijack web sessions via vectors related to the regenerate metho… NVD-CWE-Other
CVE-2012-2667 2024-11-21 10:39 2012-06-8 Show GitHub Exploit DB Packet Storm
295816 - bandainamcogames madomagi-ip_android The Puella Magi Madoka Magica iP application 1.05 and earlier for Android places cleartext Twitter credentials in a log file, which allows remote attackers to obtain sensitive information via a craft… CWE-255
Credentials Management 		CVE-2012-2630 2024-11-21 10:39 2012-06-5 Show GitHub Exploit DB Packet Storm
295817 - networkupstools nut Buffer overflow in the addchar function in common/parseconf.c in upsd in Network UPS Tools (NUT) before 2.6.4 allows remote attackers to execute arbitrary code or cause a denial of service (electric-… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2012-2944 2024-11-21 10:39 2012-06-2 Show GitHub Exploit DB Packet Storm
295818 - vmware vma Untrusted search path vulnerability in VMware vMA 4.x and 5.x before 5.0.0.2 allows local users to gain privileges via a Trojan horse DLL in the current working directory. NVD-CWE-Other
CVE-2012-2752 2024-11-21 10:39 2012-06-2 Show GitHub Exploit DB Packet Storm
295819 - cisco ios_xr
asr_9000_rsp440_router
crs_performance_route_processor 		Cisco IOS XR before 4.2.1 on ASR 9000 series devices and CRS series devices allows remote attackers to cause a denial of service (packet transmission outage) via a crafted packet, aka Bug IDs CSCty94… CWE-20
 Improper Input Validation  		CVE-2012-2488 2024-11-21 10:39 2012-05-31 Show GitHub Exploit DB Packet Storm
295820 - captcha cryptographp CRLF injection vulnerability in cryptographp.inc.php in Cryptographp allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the cfg parameter. NVD-CWE-Other
CVE-2012-2943 2024-11-21 10:39 2012-05-28 Show GitHub Exploit DB Packet Storm