Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 25, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
219631 7.5 危険 Simple Machines - Simple Machines Forum における任意のユーザを偽装される脆弱性 CWE-20
不適切な入力確認
CVE-2013-7235 2014-05-2 10:34 2013-12-13 Show GitHub Exploit DB Packet Storm
219632 4.3 警告 Simple Machines - Simple Machines Forum におけるクリックジャッキング攻撃を実行される脆弱性 CWE-20
不適切な入力確認
CVE-2013-7234 2014-05-2 10:34 2013-12-13 Show GitHub Exploit DB Packet Storm
219633 10 危険 Mozilla Foundation - Windows 上で稼動する Mozilla Firefox および SeaMonkey の Cairo で使用される Pixman における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2014-1528 2014-05-1 19:40 2014-04-29 Show GitHub Exploit DB Packet Storm
219634 5 警告 Mozilla Foundation - Android 上で稼動する Mozilla Firefox におけるアドレスバーを偽装される脆弱性 CWE-noinfo
情報不足
CVE-2014-1527 2014-05-1 19:35 2014-04-29 Show GitHub Exploit DB Packet Storm
219635 5.8 警告 Mozilla Foundation - Mozilla Firefox および SeaMonkey の XrayWrapper 実装におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-1526 2014-05-1 19:28 2014-04-29 Show GitHub Exploit DB Packet Storm
219636 9.3 危険 Mozilla Foundation - Mozilla Firefox および SeaMonkey の mozilla::dom::TextTrack::AddCue 関数における任意のコードを実行される脆弱性 CWE-399
リソース管理の問題
CVE-2014-1525 2014-05-1 19:12 2014-04-29 Show GitHub Exploit DB Packet Storm
219637 10 危険 Mozilla Foundation - Mozilla Firefox および SeaMonkey の Web Audio サブシステムの mozilla::dom::OscillatorNodeEngine::ComputeCustom 関数における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2014-1522 2014-05-1 18:38 2014-04-29 Show GitHub Exploit DB Packet Storm
219638 6.9 警告 Mozilla Foundation - Windows 上で稼働する Mozilla Firefox の Maintenance Service Installer の maintenservice_installer.exe における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-1520 2014-05-1 18:35 2014-04-29 Show GitHub Exploit DB Packet Storm
219639 10 危険 Mozilla Foundation - Mozilla Firefox および SeaMonkey のブラウザエンジンにおけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足
CVE-2014-1519 2014-05-1 18:29 2014-04-29 Show GitHub Exploit DB Packet Storm
219640 4.3 警告 Digital Junkies - dompdf の dompdf.php における chroot の保護を回避される脆弱性 CWE-200
情報漏えい
CVE-2014-2383 2014-05-1 18:18 2014-03-11 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 25, 2026, 4:01 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
294281 - mariadb
oracle
mariadb
mysql
MySQL 5.5.19 and possibly other versions, and MariaDB 5.5.28a and possibly other versions, when configured to assign the FILE privilege to users who should not have administrative privileges, allows … CWE-16
Configuration
CVE-2012-5613 2024-11-21 10:44 2012-12-3 Show GitHub Exploit DB Packet Storm
294282 - mariadb
oracle
suse
canonical
mariadb
mysql
linux_enterprise_desktop
linux_enterprise_server
linux_enterprise_software_development_kit
ubuntu_linux
Heap-based buffer overflow in Oracle MySQL 5.5.19 and other versions through 5.5.28, and MariaDB 5.5.28a and possibly other versions, allows remote authenticated users to cause a denial of service (m… CWE-787
 Out-of-bounds Write
CVE-2012-5612 2024-11-21 10:44 2012-12-3 Show GitHub Exploit DB Packet Storm
294283 - apache
opensuse
tomcat
opensuse
Apache Tomcat through 7.0.x allows remote attackers to cause a denial of service (daemon outage) via partial HTTP requests, as demonstrated by Slowloris. NVD-CWE-noinfo
CVE-2012-5568 2024-11-21 10:44 2012-12-1 Show GitHub Exploit DB Packet Storm
294284 - kyocera ah-k3001v
xw300k
xw320kr
xw320k
xw310k
ah-k3002v
The KYOCERA AH-K3001V, AH-K3002V, WX300K, WX310K, WX320K, and WX320KR devices allow remote attackers to cause a denial of service (persistent reboot) via an e-mail message in an invalid format. NVD-CWE-noinfo
CVE-2012-5174 2024-11-21 10:44 2012-11-30 Show GitHub Exploit DB Packet Storm
294285 - sgi performance_co-pilot The (1) pcmd and (2) pmlogger init scripts in Performance Co-Pilot (PCP) before 3.6.10 allow local users to overwrite arbitrary files via a symlink attack on a /var/tmp/##### temporary file. CWE-264
Permissions, Privileges, and Access Controls
CVE-2012-5530 2024-11-21 10:44 2012-11-29 Show GitHub Exploit DB Packet Storm
294286 - oracle jdk
jre
openjdk
Oracle Java SE 7 and earlier, and OpenJDK 7 and earlier, computes hash values without properly restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers… CWE-310
Cryptographic Issues
CVE-2012-5373 2024-11-21 10:44 2012-11-28 Show GitHub Exploit DB Packet Storm
294287 - rubinius rubinius Rubinius computes hash values without properly restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) … CWE-310
Cryptographic Issues
CVE-2012-5372 2024-11-21 10:44 2012-11-28 Show GitHub Exploit DB Packet Storm
294288 - ruby-lang ruby Ruby (aka CRuby) 1.9 before 1.9.3-p327 and 2.0 before r37575 computes hash values without properly restricting the ability to trigger hash collisions predictably, which allows context-dependent attac… CWE-310
Cryptographic Issues
CVE-2012-5371 2024-11-21 10:44 2012-11-28 Show GitHub Exploit DB Packet Storm
294289 - jruby jruby JRuby computes hash values without properly restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via… CWE-310
Cryptographic Issues
CVE-2012-5370 2024-11-21 10:44 2012-11-28 Show GitHub Exploit DB Packet Storm
294290 - google
opensuse
chrome
opensuse
Google Chrome before 23.0.1271.91 does not properly perform a cast of an unspecified variable during handling of the INPUT element, which allows remote attackers to cause a denial of service or possi… CWE-20
 Improper Input Validation 
CVE-2012-5136 2024-11-21 10:44 2012-11-28 Show GitHub Exploit DB Packet Storm