Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 25, 2026, 2:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
220021	-	-	The Prosody Team	-	削除 Prosody におけるサービス運用妨害 (DoS) の脆弱性	-	CVE-2014-2750	2014-04-14 18:40	2014-04-2	Show	GitHub Exploit DB Packet Storm

220022	5.8	警告	デル	-	Dell OpenManage Server Administrator におけるオープンリダイレクトの脆弱性	CWE-20 不適切な入力確認	CVE-2013-0740	2014-04-14 18:36	2013-07-22	Show	GitHub Exploit DB Packet Storm

220023	4.3	警告	Roundup	-	Roundup におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-6132	2014-04-14 18:31	2012-05-15	Show	GitHub Exploit DB Packet Storm

220024	6.8	警告	Lester Chan	-	WordPress 用 WP-PostViews プラグインのオプションの管理者ページにおけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2013-3252	2014-04-14 18:26	2013-05-7	Show	GitHub Exploit DB Packet Storm

220025	6.8	警告	Qian Qin	-	WordPress 用 qTranslate プラグインにおけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2013-3251	2014-04-14 18:26	2013-06-4	Show	GitHub Exploit DB Packet Storm

220026	6.8	警告	Jeremy Massel	-	WordPress 用 underConstruction プラグインにおけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2013-2699	2014-04-14 18:26	2013-06-3	Show	GitHub Exploit DB Packet Storm

220027	6.8	警告	Lester Chan	-	WordPress 用 WP-Print プラグインのオプションにおけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2013-2693	2014-04-14 18:25	2013-04-5	Show	GitHub Exploit DB Packet Storm

220028	6.8	警告	Dean Adjie Minwarie	-	WordPress 用 DVS Custom Notification プラグインにおけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2012-4921	2014-04-14 18:24	2012-09-14	Show	GitHub Exploit DB Packet Storm

220029	5.8	警告	kernel.org	-	Linux-PAM 用 pam_timestamp モジュールの pam_timestamp.c におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2014-2583	2014-04-14 18:04	2014-03-26	Show	GitHub Exploit DB Packet Storm

220030	7.5	危険	Pearson Education, Inc.	-	Pearson eSIS Enterprise Student Information System のパスワードリセット機能における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2014-1455	2014-04-14 17:52	2014-04-6	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 25, 2026, 4:01 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
295061	-	google	android	diagchar_core.c in the Qualcomm Innovation Center (QuIC) Diagnostics (aka DIAG) kernel-mode driver for Android 2.3 through 4.2 allows attackers to execute arbitrary code or cause a denial of service …	NVD-CWE-noinfo	CVE-2012-4220	2024-11-21 10:42	2012-11-30	Show	GitHub Exploit DB Packet Storm

295062	-	xen	xen	The graphical console in Xen 4.0, 4.1 and 4.2 allows local OS guest administrators to obtain sensitive host resource information via the qemu monitor. NOTE: this might be a duplicate of CVE-2007-099…	CWE-200 Information Exposure	CVE-2012-4411	2024-11-21 10:42	2012-11-24	Show	GitHub Exploit DB Packet Storm

295063	-	mcrypt	mcrypt	Multiple format string vulnerabilities in mcrypt 2.6.8 and earlier might allow user-assisted remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via vectors invol…	CWE-134 Use of Externally-Controlled Format String	CVE-2012-4426	2024-11-21 10:42	2012-11-22	Show	GitHub Exploit DB Packet Storm

295064	-	mcrypt	mcrypt	Stack-based buffer overflow in the check_file_head function in extra.c in mcrypt 2.6.8 and earlier allows user-assisted remote attackers to execute arbitrary code via an encrypted file with a crafted…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2012-4409	2024-11-21 10:42	2012-11-22	Show	GitHub Exploit DB Packet Storm

295065	-	mozilla canonical suse opensuse	firefox seamonkey thunderbird ubuntu_linux linux_enterprise_desktop linux_enterprise_software_development_kit opensuse linux_enterprise_server	Use-after-free vulnerability in the BuildTextRunsScanner::BreakSink::SetBreaks function in Mozilla Firefox before 17.0, Thunderbird before 17.0, and SeaMonkey before 2.14 allows remote attackers to e…	CWE-416 Use After Free	CVE-2012-4218	2024-11-21 10:42	2012-11-21	Show	GitHub Exploit DB Packet Storm

295066	-	mozilla suse opensuse canonical	firefox seamonkey thunderbird thunderbird_esr linux_enterprise_server linux_enterprise_desktop opensuse linux_enterprise_software_development_kit ubuntu_linux	Use-after-free vulnerability in the nsViewManager::ProcessPendingUpdates function in Mozilla Firefox before 17.0, Thunderbird before 17.0, and SeaMonkey before 2.14 allows remote attackers to execute…	CWE-416 Use After Free	CVE-2012-4217	2024-11-21 10:42	2012-11-21	Show	GitHub Exploit DB Packet Storm

295067	-	mozilla suse opensuse redhat debian canonical	firefox seamonkey thunderbird thunderbird_esr linux_enterprise_server linux_enterprise_desktop opensuse linux_enterprise_software_development_kit enterprise_linux_server en…	Use-after-free vulnerability in the gfxFont::GetFontEntry function in Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird before 17.0, Thunderbird ESR 10.x before 10.0.11, and S…	CWE-416 Use After Free	CVE-2012-4216	2024-11-21 10:42	2012-11-21	Show	GitHub Exploit DB Packet Storm

295068	-	mozilla suse opensuse canonical	firefox seamonkey thunderbird thunderbird_esr linux_enterprise_server linux_enterprise_desktop opensuse linux_enterprise_software_development_kit ubuntu_linux	Use-after-free vulnerability in the nsEditor::FindNextLeafNode function in Mozilla Firefox before 17.0, Thunderbird before 17.0, and SeaMonkey before 2.14 allows remote attackers to execute arbitrary…	CWE-416 Use After Free	CVE-2012-4213	2024-11-21 10:42	2012-11-21	Show	GitHub Exploit DB Packet Storm

295069	-	mozilla canonical suse opensuse	firefox seamonkey thunderbird ubuntu_linux linux_enterprise_desktop linux_enterprise_software_development_kit opensuse linux_enterprise_server	Use-after-free vulnerability in the XPCWrappedNative::Mark function in Mozilla Firefox before 17.0, Thunderbird before 17.0, and SeaMonkey before 2.14 allows remote attackers to execute arbitrary cod…	CWE-416 Use After Free	CVE-2012-4212	2024-11-21 10:42	2012-11-21	Show	GitHub Exploit DB Packet Storm

295070	-	mozilla	firefox	The Style Inspector in Mozilla Firefox before 17.0 and Firefox ESR 10.x before 10.0.11 does not properly restrict the context of HTML markup and Cascading Style Sheets (CSS) token sequences, which al…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2012-4210	2024-11-21 10:42	2012-11-21	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed