Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 25, 2026, 12:07 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
219771 6.8 警告 アップル - Apple OS X の ImageIO におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2014-1319 2014-04-24 15:53 2014-04-22 Show GitHub Exploit DB Packet Storm
219772 10 危険 アップル - Apple OS X の Intel Graphics Driver における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認
CVE-2014-1318 2014-04-24 15:53 2014-04-22 Show GitHub Exploit DB Packet Storm
219773 5 警告 アップル - Apple OS X で使用される Heimdal におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2014-1316 2014-04-24 15:52 2014-04-22 Show GitHub Exploit DB Packet Storm
219774 6.8 警告 アップル - Apple OS X の CoreServicesUIAgent におけるフォーマットストリングの脆弱性 CWE-134
書式文字列の問題
CVE-2014-1315 2014-04-24 15:52 2014-04-22 Show GitHub Exploit DB Packet Storm
219775 10 危険 アップル - Apple OS X の WindowServer におけるサンドボックス保護メカニズムを回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-1314 2014-04-24 15:52 2014-04-22 Show GitHub Exploit DB Packet Storm
219776 6.8 警告 アップル - 複数の Apple 製品の Secure Transport における重要な情報を取得される脆弱性 CWE-287
不適切な認証
CVE-2014-1295 2014-04-24 15:51 2014-04-22 Show GitHub Exploit DB Packet Storm
219777 6.8 警告 CubeCart Limited - CubeCar における Web セッションをハイジャックされる脆弱性 CWE-287
不適切な認証
CVE-2014-2341 2014-04-24 11:42 2014-04-10 Show GitHub Exploit DB Packet Storm
219778 6.4 警告 pimcore - pimcore の Pimcore_Tool_Newsletter モジュールにおける PHP オブジェクトインジェクション攻撃を実行される脆弱性 CWE-20
不適切な入力確認
CVE-2014-2922 2014-04-24 10:22 2014-04-11 Show GitHub Exploit DB Packet Storm
219779 7.5 危険 pimcore - pimcore の Pimcore_Tool_Newsletter モジュールにおける PHP オブジェクトインジェクション攻撃を実行される脆弱性 CWE-94
コード・インジェクション
CVE-2014-2921 2014-04-24 10:21 2014-04-11 Show GitHub Exploit DB Packet Storm
219780 4 警告 MediaWiki - MediaWiki の includes/specials/SpecialChangePassword.php における重要な情報を取得される脆弱性 CWE-287
不適切な認証
CVE-2014-2665 2014-04-23 20:02 2014-03-28 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 25, 2026, 4:01 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
293631 - intel connman ConnMan 1.3 on Tizen continues to list the bluetooth service after offline mode has been enabled, which might allow remote attackers to obtain sensitive information via Bluetooth packets. CWE-200
Information Exposure
CVE-2012-6459 2024-11-21 10:46 2013-01-2 Show GitHub Exploit DB Packet Storm
293632 - lemonldap-ng lemonldap\ LemonLDAP::NG before 1.2.3 does not use the signature-verification capability of the Lasso library, which allows remote attackers to bypass intended access-control restrictions via crafted SAML data. CWE-264
Permissions, Privileges, and Access Controls
CVE-2012-6426 2024-11-21 10:46 2013-01-2 Show GitHub Exploit DB Packet Storm
293633 - belkin n900_wireless_router The WPA2 implementation on the Belkin N900 F9K1104v1 router establishes a WPS PIN based on 6 digits of the LAN/WLAN MAC address, which makes it easier for remote attackers to obtain access to a Wi-Fi… CWE-310
Cryptographic Issues
CVE-2012-6371 2024-11-21 10:46 2013-01-1 Show GitHub Exploit DB Packet Storm
293634 - mediawiki rssreader Cross-site scripting (XSS) vulnerability in the RSS Reader extension before 0.2.6 for MediaWiki allows remote attackers to inject arbitrary web script or HTML via a crafted feed. CWE-79
Cross-site Scripting
CVE-2012-6453 2024-11-21 10:46 2012-12-31 Show GitHub Exploit DB Packet Storm
293635 - cerberusftp ftp_server Multiple cross-site scripting (XSS) vulnerabilities in the administrative web interface in Cerberus FTP Server before 5.0.6.0 allow (1) remote attackers to inject arbitrary web script or HTML via a l… CWE-79
Cross-site Scripting
CVE-2012-6339 2024-11-21 10:46 2012-12-31 Show GitHub Exploit DB Packet Storm
293636 - samsung samsungdive The Track My Mobile feature in the SamsungDive subsystem for Android on Samsung Galaxy devices shows the activation of remote tracking, which might allow physically proximate attackers to defeat a pr… CWE-200
Information Exposure
CVE-2012-6337 2024-11-21 10:46 2012-12-31 Show GitHub Exploit DB Packet Storm
293637 - lookout lookout The Missing Device feature in Lookout allows physically proximate attackers to provide arbitrary location data via a "commonly available simple GPS location spoofer." NVD-CWE-noinfo
CVE-2012-6336 2024-11-21 10:46 2012-12-31 Show GitHub Exploit DB Packet Storm
293638 - avg avg_antivirus The Anti-theft service in AVG AntiVirus for Android allows physically proximate attackers to provide arbitrary location data via a "commonly available simple GPS location spoofer." NVD-CWE-noinfo
CVE-2012-6335 2024-11-21 10:46 2012-12-31 Show GitHub Exploit DB Packet Storm
293639 - samsung samsungdive The Track My Mobile feature in the SamsungDive subsystem for Android on Samsung Galaxy devices does not properly implement Location APIs, which allows physically proximate attackers to provide arbitr… CWE-264
Permissions, Privileges, and Access Controls
CVE-2012-6334 2024-11-21 10:46 2012-12-31 Show GitHub Exploit DB Packet Storm
293640 - 1password 1password Cross-site scripting (XSS) vulnerability in the Troubleshooting Reporting System feature in AgileBits 1Password 3.9.9 might allow remote attackers to inject arbitrary web script or HTML via a crafted… CWE-79
Cross-site Scripting
CVE-2012-6369 2024-11-21 10:46 2012-12-28 Show GitHub Exploit DB Packet Storm