Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 25, 2026, 4:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
220031	7.5	危険	Pearson Education, Inc.	-	Pearson eSIS Enterprise Student Information System のパスワードリセット機能における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2014-1455	2014-04-14 17:52	2014-04-6	Show	GitHub Exploit DB Packet Storm

220032	2.1	注意	CloudBees	-	CloudBees Jenkins におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-2033	2014-04-14 17:38	2013-05-2	Show	GitHub Exploit DB Packet Storm

220033	6.5	警告	レッドハット (KIE Group) レッドハット	-	複数の Red Hat Jboss 製品における任意の Java コードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2013-6468	2014-04-14 17:23	2013-11-4	Show	GitHub Exploit DB Packet Storm

220034	7.5	危険	SAP	-	SAP Business Object Processing Framework for ABAP におけるアクセス権を取得される脆弱性	CWE-255 証明書・パスワード管理	CVE-2014-2752	2014-04-14 17:23	2014-03-9	Show	GitHub Exploit DB Packet Storm

220035	7.5	危険	SAP	-	SAP Print and Output Management におけるアクセス権を取得される脆弱性	CWE-255 証明書・パスワード管理	CVE-2014-2751	2014-04-14 17:22	2014-03-9	Show	GitHub Exploit DB Packet Storm

220036	5	警告	SAP	-	SAP HANA の HANA ICM プロセスにおける重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2014-2749	2014-04-14 17:22	2014-01-7	Show	GitHub Exploit DB Packet Storm

220037	7.5	危険	SAP	-	SAP ERP 用 SAP エンハンスメントパッケージのセキュリティ監査ログ機能における任意のログクラスを変更される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2014-2748	2014-04-14 17:21	2014-03-9	Show	GitHub Exploit DB Packet Storm

220038	4.3	警告	フォーティネット	-	Fortinet FortiADC にクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2014-0331	2014-04-14 15:53	2014-04-11	Show	GitHub Exploit DB Packet Storm

220039	9.3	危険	マイクロソフト	-	Microsoft Word および Office 互換機能パックにおける任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2014-1757	2014-04-11 15:54	2014-04-8	Show	GitHub Exploit DB Packet Storm

220040	4.3	警告	マイクロソフトアドビシステムズ Google	-	Adobe Flash Player および Adobe AIR におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2014-0509	2014-04-11 15:46	2014-04-8	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 25, 2026, 4:01 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
295121	-	oracle sun	jdk jre	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, and 6 Update 35 and earlier, allows remote attackers to affect confidentiality and …	NVD-CWE-noinfo	CVE-2012-4416	2024-11-21 10:42	2012-10-17	Show	GitHub Exploit DB Packet Storm

295122	-	mozilla suse canonical redhat	firefox seamonkey thunderbird thunderbird_esr linux_enterprise_server linux_enterprise_desktop linux_enterprise_software_development_kit ubuntu_linux enterprise_linux_server	Mozilla Firefox before 16.0.1, Firefox ESR 10.x before 10.0.9, Thunderbird before 16.0.1, Thunderbird ESR 10.x before 10.0.9, and SeaMonkey before 2.13.1 omit a security check in the defaultValue fun…	CWE-346 Origin Validation Error	CVE-2012-4193	2024-11-21 10:42	2012-10-12	Show	GitHub Exploit DB Packet Storm

295123	-	mozilla	seamonkey thunderbird firefox	Mozilla Firefox 16.0, Thunderbird 16.0, and SeaMonkey 2.13 allow remote attackers to bypass the Same Origin Policy and read the properties of a Location object via a crafted web site, a related issue…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2012-4192	2024-11-21 10:42	2012-10-12	Show	GitHub Exploit DB Packet Storm

295124	-	mozilla canonical	firefox seamonkey thunderbird ubuntu_linux	The mozilla::net::FailDelayManager::Lookup function in the WebSockets implementation in Mozilla Firefox before 16.0.1, Thunderbird before 16.0.1, and SeaMonkey before 2.13.1 allows remote attackers t…	CWE-787 Out-of-bounds Write	CVE-2012-4191	2024-11-21 10:42	2012-10-12	Show	GitHub Exploit DB Packet Storm

295125	-	mozilla cyanogenmod	firefox cyanogenmod	The FT2FontEntry::CreateFontEntry function in FreeType, as used in the Android build of Mozilla Firefox before 16.0.1 on CyanogenMod 10, allows remote attackers to cause a denial of service (memory c…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2012-4190	2024-11-21 10:42	2012-10-12	Show	GitHub Exploit DB Packet Storm

295126	-	linux	linux_kernel	The (1) do_siocgstamp and (2) do_siocgstampns functions in net/socket.c in the Linux kernel before 3.5.4 use an incorrect argument order, which allows local users to obtain sensitive information from…	CWE-399 Resource Management Errors	CVE-2012-4467	2024-11-21 10:42	2012-10-11	Show	GitHub Exploit DB Packet Storm

295127	-	lars_hjemli	cgit	Heap-based buffer overflow in the substr function in parsing.c in cgit 0.9.0.3 and earlier allows remote authenticated users to cause a denial of service (crash) and possibly execute arbitrary code v…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2012-4465	2024-11-21 10:42	2012-10-11	Show	GitHub Exploit DB Packet Storm

295128	-	midnight-commander	midnight_commander	Midnight Commander (mc) 4.8.5 does not properly handle the (1) MC_EXT_SELECTED or (2) MC_EXT_ONLYTAGGED environment variables when multiple files are selected, which allows user-assisted remote attac…	CWE-20 Improper Input Validation	CVE-2012-4463	2024-11-21 10:42	2012-10-11	Show	GitHub Exploit DB Packet Storm

295129	-	opencryptoki_project	opencryptoki	openCryptoki 2.4.1 allows local users to create or set world-writable permissions on arbitrary files via a symlink attack on the (1) LCK..opencryptoki or (2) LCK..opencryptoki_stdll file in /var/lock…	CWE-59 Link Following	CVE-2012-4455	2024-11-21 10:42	2012-10-11	Show	GitHub Exploit DB Packet Storm

295130	-	opencryptoki_project	opencryptoki	openCryptoki before 2.4.1, when using spinlocks, allows local users to create or set world-writable permissions on arbitrary files via a symlink attack on the (1) .pkapi_xpk or (2) .pkcs11spinloc fil…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2012-4454	2024-11-21 10:42	2012-10-11	Show	GitHub Exploit DB Packet Storm