Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 26, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
220101 6.8 警告 Mozilla Foundation - 複数の Mozilla 製品の mozilla::WaveReader::DecodeAudioData 機能における重要な情報を取得される脆弱性 CWE-119
バッファエラー 		CVE-2014-1497 2014-04-8 17:02 2014-03-18 Show GitHub Exploit DB Packet Storm
220102 9.3 危険 Mozilla Foundation - 複数の Mozilla 製品のブラウザエンジンにおけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2014-1493 2014-04-8 17:01 2014-03-18 Show GitHub Exploit DB Packet Storm
220103 4.3 警告 Huawei - Huawei Echo Life 光ルータにクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-0337 2014-04-8 16:56 2014-04-2 Show GitHub Exploit DB Packet Storm
220104 5 警告 Net-SNMP - Net-SNMP の ICMP-MIB の Linux の実装におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2014-2284 2014-04-8 15:54 2014-02-19 Show GitHub Exploit DB Packet Storm
220105 7.1 危険 Linux - Linux Kernel の net/sctp/sm_statefuns.c 内の sctp_sf_do_5_1D_ce 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2014-0101 2014-04-8 15:53 2014-03-3 Show GitHub Exploit DB Packet Storm
220106 6.2 警告 Linux - Linux Kernel の fs/cifs/file.c 内の cifs_iovec_write 関数における重要な情報を取得される脆弱性 CWE-119
バッファエラー 		CVE-2014-0069 2014-04-8 15:52 2014-02-14 Show GitHub Exploit DB Packet Storm
220107 4.3 警告 Ruby on Rails project - Ruby on Rails の actionview/lib/action_view/helpers/number_helper.rb におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-0081 2014-04-8 15:48 2014-02-18 Show GitHub Exploit DB Packet Storm
220108 4.3 警告 Horde - Horde Groupware Webmail Edition で使用される Horde Internet Mail Program におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-6640 2014-04-8 14:40 2012-06-26 Show GitHub Exploit DB Packet Storm
220109 4.3 警告 Horde - Horde Groupware Webmail Edition で使用される Horde Kronolith Calendar Application H4 におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-5567 2014-04-8 14:39 2012-11-14 Show GitHub Exploit DB Packet Storm
220110 4.3 警告 Horde - Horde Groupware Webmail Edition で使用される Horde Kronolith Calendar Application H4 におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-5566 2014-04-8 14:33 2012-05-29 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 26, 2026, 4:05 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
295111 - adobe shockwave_player Array index error in Adobe Shockwave Player before 11.6.8.638 allows attackers to execute arbitrary code via unspecified vectors. CWE-20
 Improper Input Validation  		CVE-2012-4176 2024-11-21 10:42 2012-10-24 Show GitHub Exploit DB Packet Storm
295112 - adobe shockwave_player Buffer overflow in Adobe Shockwave Player before 11.6.8.638 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2012-4172, CVE-2012-4173, CVE-2012-4… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2012-4175 2024-11-21 10:42 2012-10-24 Show GitHub Exploit DB Packet Storm
295113 - adobe shockwave_player Buffer overflow in Adobe Shockwave Player before 11.6.8.638 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2012-4172, CVE-2012-4173, CVE-2012-4… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2012-4174 2024-11-21 10:42 2012-10-24 Show GitHub Exploit DB Packet Storm
295114 - adobe shockwave_player Buffer overflow in Adobe Shockwave Player before 11.6.8.638 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2012-4172, CVE-2012-4174, CVE-2012-4… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2012-4173 2024-11-21 10:42 2012-10-24 Show GitHub Exploit DB Packet Storm
295115 - adobe shockwave_player Buffer overflow in Adobe Shockwave Player before 11.6.8.638 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2012-4173, CVE-2012-4174, CVE-2012-4… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2012-4172 2024-11-21 10:42 2012-10-24 Show GitHub Exploit DB Packet Storm
295116 - cipherdyne fwknop Buffer overflow in the run_last_args function in client/fwknop.c in fwknop before 2.0.3, when processing --last, might allow local users to cause a denial of service (client crash) and possibly execu… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2012-4436 2024-11-21 10:42 2012-10-23 Show GitHub Exploit DB Packet Storm
295117 - cipherdyne fwknop fwknop before 2.0.3 does not properly validate IP addresses, which allows remote authenticated users to cause a denial of service (server crash) via a long IP address. CWE-20
 Improper Input Validation  		CVE-2012-4435 2024-11-21 10:42 2012-10-23 Show GitHub Exploit DB Packet Storm
295118 9.8 CRITICAL
Network 		openstack
fedoraproject
redhat 		swift
fedora
enterprise_linux_server
storage
storage_for_public_cloud
gluster_storage_server_for_on-premise
gluster_storage_management_console 		OpenStack Object Storage (swift) before 1.7.0 uses the loads function in the pickle Python module unsafely when storing and loading metadata in memcached, which allows remote attackers to execute arb… CWE-502
 Deserialization of Untrusted Data 		CVE-2012-4406 2024-11-21 10:42 2012-10-23 Show GitHub Exploit DB Packet Storm
295119 - jcore jcore SQL injection vulnerability in admin/index.php in jCore before 1.0pre2 allows remote attackers to execute arbitrary SQL commands via the memberloginid cookie. CWE-89
SQL Injection 		CVE-2012-4232 2024-11-21 10:42 2012-10-23 Show GitHub Exploit DB Packet Storm
295120 - jcore jcore Cross-site scripting (XSS) vulnerability in admin/index.php in jCore before 1.0pre2 allows remote attackers to inject arbitrary web script or HTML via the path parameter. CWE-79
Cross-site Scripting 		CVE-2012-4231 2024-11-21 10:42 2012-10-23 Show GitHub Exploit DB Packet Storm