Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
229291 6.8 警告 Mozilla Foundation - 複数の Mozilla 製品におけるクリックジャッキング攻撃を誘発される脆弱性 CWE-DesignError
CVE-2012-5354 2012-10-15 10:44 2012-10-9 Show GitHub Exploit DB Packet Storm
229292 4 警告 Mozilla Foundation - Android 上で稼働する Mozilla Firefox におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-3987 2012-10-15 10:28 2012-10-9 Show GitHub Exploit DB Packet Storm
229293 4.3 警告 Mozilla Foundation - 複数の Mozilla 製品におけるクロスサイトスクリプティングの脆弱性 CWE-DesignError
CVE-2012-3985 2012-10-15 10:23 2012-10-9 Show GitHub Exploit DB Packet Storm
229294 6.8 警告 Mozilla Foundation - 複数の Mozilla 製品におけるページコンテンツを偽造される脆弱性 CWE-Other
その他
CVE-2012-3984 2012-10-15 10:19 2012-10-9 Show GitHub Exploit DB Packet Storm
229295 5.8 警告 JOSSO - Java Open Single Sign-On Project Home におけるメッセージを偽造される脆弱性 CWE-287
不適切な認証
CVE-2012-5352 2012-10-12 16:47 2012-10-9 Show GitHub Exploit DB Packet Storm
229296 6.4 警告 Apache Software Foundation - Apache Axis2 におけるメッセージを偽造される脆弱性 CWE-287
不適切な認証
CVE-2012-5351 2012-10-12 16:45 2012-10-9 Show GitHub Exploit DB Packet Storm
229297 2.1 注意 dracut Project
Fedora Project
レッドハット
- 複数の製品で使用される dracut における重要な情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-4453 2012-10-12 16:43 2012-09-21 Show GitHub Exploit DB Packet Storm
229298 5.8 警告 Apache Software Foundation - Apache Axis2 におけるメッセージを偽造される脆弱性 CWE-287
不適切な認証
CVE-2012-4418 2012-10-12 16:08 2012-10-9 Show GitHub Exploit DB Packet Storm
229299 5 警告 Cake Software Foundation - CakePHP の XML クラスにおける任意のファイルを読まれる脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-4399 2012-10-12 16:06 2012-07-14 Show GitHub Exploit DB Packet Storm
229300 4.3 警告 GLPI-PROJECT.ORG - GLPI-PROJECT GLPI におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-4003 2012-10-12 15:46 2012-06-28 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 26, 2026, 4:08 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
285511 - citadel webcit Cross-site request forgery (CSRF) vulnerability in Webcit before 7.11 allows remote attackers to modify configurations and perform other actions as arbitrary users via unspecified vectors. NVD-CWE-Other
CVE-2007-3821 2018-10-16 06:31 2007-07-17 Show GitHub Exploit DB Packet Storm
285512 - citadel webcit Multiple cross-site scripting (XSS) vulnerabilities in Webcit before 7.11 allow remote attackers to inject arbitrary web script or HTML via (1) the who parameter to showuser; and other vectors involv… NVD-CWE-Other
CVE-2007-3822 2018-10-16 06:31 2007-07-17 Show GitHub Exploit DB Packet Storm
285513 - mozilla firefox Mozilla Firefox allows for cookies to be set with a null domain (aka "domainless cookies"), which allows remote attackers to pass information between arbitrary domains and track user activity, as dem… NVD-CWE-Other
CVE-2007-3827 2018-10-16 06:31 2007-07-18 Show GitHub Exploit DB Packet Storm
285514 - exlibris_group aleph Multiple cross-site scripting (XSS) vulnerabilities in Ex Libris ALEPH allow remote attackers to inject arbitrary web script or HTML via unspecified vectors related to a URL that can be discovered th… NVD-CWE-Other
CVE-2007-3834 2018-10-16 06:31 2007-07-18 Show GitHub Exploit DB Packet Storm
285515 - exlibris_group metalib Cross-site scripting (XSS) vulnerability in Ex Libris MetaLib 3.13 and 4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to a resource id that can be di… NVD-CWE-Other
CVE-2007-3835 2018-10-16 06:31 2007-07-18 Show GitHub Exploit DB Packet Storm
285516 - mozilla firefox
seamonkey
thunderbird
Mozilla Firefox 2.0.0.5, Thunderbird 2.0.0.5 and before 1.5.0.13, and SeaMonkey 1.1.3 allows remote attackers to conduct cross-site scripting (XSS) attacks with chrome privileges via an addon that in… NVD-CWE-Other
CVE-2007-3844 2018-10-16 06:31 2007-08-8 Show GitHub Exploit DB Packet Storm
285517 - linux linux_kernel Linux kernel 2.4.35 and other versions allows local users to send arbitrary signals to a child process that is running at higher privileges by causing a setuid-root parent process to die, which deliv… NVD-CWE-Other
CVE-2007-3848 2018-10-16 06:31 2007-08-15 Show GitHub Exploit DB Packet Storm
285518 - oracle database_server Multiple unspecified vulnerabilities in Oracle Database 9.0.1.5+, 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3 allows remote authenticated users to have an unknown impact via (1) SYS.DBMS_DRS in the Da… NVD-CWE-Other
CVE-2007-3855 2018-10-16 06:31 2007-07-19 Show GitHub Exploit DB Packet Storm
285519 - oracle apex Unspecified vulnerability in Oracle Application Express (formerly Oracle HTML DB) 2.2.0.00.32 up to 3.0.0.00.20 allows developers to have an unknown impact via unknown attack vectors, aka APEX01. NO… NVD-CWE-Other
CVE-2007-3860 2018-10-16 06:31 2007-07-19 Show GitHub Exploit DB Packet Storm
285520 - oracle e-business_suite Unspecified vulnerability in the Oracle Customer Intelligence component in Oracle E-Business Suite 12.0.1 has unknown impact and remote attack vectors, aka APPS01. NVD-CWE-Other
CVE-2007-3865 2018-10-16 06:31 2007-07-19 Show GitHub Exploit DB Packet Storm