Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 9, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
231121	8.5	危険	Axway	-	Axway SecureTransport におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2012-4991	2012-12-14 14:49	2012-12-13	Show	GitHub Exploit DB Packet Storm

231122	4.3	警告	シスコシステムズ	-	Cisco AnyConnect Secure Mobility Client におけるバージョンのダウングレードを強制される脆弱性	CWE-20 不適切な入力確認	CVE-2012-2494	2012-12-14 14:47	2012-06-20	Show	GitHub Exploit DB Packet Storm

231123	9.3	危険	シスコシステムズ	-	Cisco AnyConnect Secure Mobility Client における任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2012-2493	2012-12-14 14:44	2012-06-20	Show	GitHub Exploit DB Packet Storm

231124	7.8	危険	シスコシステムズ	-	Cisco Unified MeetingPlace Web Conferencing におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2012-5416	2012-12-14 14:40	2012-10-31	Show	GitHub Exploit DB Packet Storm

231125	6.5	警告	シスコシステムズ	-	Cisco Unified MeetingPlace の Web コンポーネントにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2012-0337	2012-12-14 14:37	2012-05-2	Show	GitHub Exploit DB Packet Storm

231126	7.5	危険	アドビシステムズ	-	Adobe Photoshop Camera Raw における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2012-5679	2012-12-14 14:00	2012-12-12	Show	GitHub Exploit DB Packet Storm

231127	5	警告	ヒューレット・パッカード	-	Itanium および Alpha プラットフォーム上の HP OpenVMS におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2012-3277	2012-12-14 12:12	2012-12-10	Show	GitHub Exploit DB Packet Storm

231128	2.6	注意	コルネ株式会社	-	Welcart におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2012-5178	2012-12-14 12:02	2012-12-14	Show	GitHub Exploit DB Packet Storm

231129	5	警告	コルネ株式会社	-	Welcart におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-5177	2012-12-14 12:02	2012-12-14	Show	GitHub Exploit DB Packet Storm

231130	4.3	警告	Zoho Corporation	-	ManageEngine AssetExplorer にクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-5956	2012-12-13 18:21	2012-12-7	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 9, 2026, 5:07 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
292681	-	mozilla	bugzilla	Auth/Verify/LDAP.pm in Bugzilla 2.x and 3.x before 3.6.11, 3.7.x and 4.0.x before 4.0.8, 4.1.x and 4.2.x before 4.2.3, and 4.3.x before 4.3.3 does not restrict the characters in a username, which mig…	CWE-255 Credentials Management	CVE-2012-3981	2024-11-21 10:41	2012-09-4	Show	GitHub Exploit DB Packet Storm

292682	-	symantec	pgp_universal_server	Symantec PGP Universal Server 3.2.x before 3.2.1 MP2 does not properly manage sessions that include key search requests, which might allow remote attackers to read a private key in opportunistic circ…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2012-3582	2024-11-21 10:41	2012-09-4	Show	GitHub Exploit DB Packet Storm

292683	-	opensuse gnugk	leap opensuse gnu_gatekeeper	GNU Gatekeeper before 3.1 does not limit the number of connections to the status port, which allows remote attackers to cause a denial of service (connection and thread consumption) via a large numbe…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2012-3534	2024-11-21 10:41	2012-09-1	Show	GitHub Exploit DB Packet Storm

292684	-	ovirt ovirt-engine-sdk	ovirt-engine-cli 3.1.0.5 ovirt	The python SDK before 3.1.0.6 and CLI before 3.1.0.8 for oVirt 3.1 does not check the server SSL certificate against the client keys, which allows remote attackers to spoof a server via a man-in-the-…	CWE-310 Cryptographic Issues	CVE-2012-3533	2024-11-21 10:41	2012-09-1	Show	GitHub Exploit DB Packet Storm

292685	-	wireshark	wireshark	The dissect_drda function in epan/dissectors/packet-drda.c in Wireshark 1.6.x through 1.6.10 and 1.8.x through 1.8.2 allows remote attackers to cause a denial of service (infinite loop and CPU consum…	CWE-399 Resource Management Errors	CVE-2012-3548	2024-11-21 10:41	2012-08-31	Show	GitHub Exploit DB Packet Storm

292686	-	mozilla	firefox thunderbird thunderbird_esr	The web console in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, and Thunderbird ESR 10.x before 10.0.7 allows user-assisted remote attackers to execute arbitr…	CWE-94 Code Injection	CVE-2012-3980	2024-11-21 10:41	2012-08-29	Show	GitHub Exploit DB Packet Storm

292687	-	mozilla google	firefox firefox_mobile android	Mozilla Firefox before 15.0 on Android does not properly implement unspecified callers of the __android_log_print function, which allows remote attackers to execute arbitrary code via a crafted web p…	NVD-CWE-noinfo	CVE-2012-3979	2024-11-21 10:41	2012-08-29	Show	GitHub Exploit DB Packet Storm

292688	-	mozilla	firefox thunderbird_esr thunderbird seamonkey	The nsLocation::CheckURL function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 does not prope…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2012-3978	2024-11-21 10:41	2012-08-29	Show	GitHub Exploit DB Packet Storm

292689	-	mozilla suse opensuse redhat canonical	firefox seamonkey linux_enterprise_desktop opensuse linux_enterprise_server linux_enterprise_software_development_kit enterprise_linux_server enterprise_linux_workstation ente…	Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, and SeaMonkey before 2.12 do not properly handle onLocationChange events during navigation between different https sites, which allows rem…	CWE-200 Information Exposure	CVE-2012-3976	2024-11-21 10:41	2012-08-29	Show	GitHub Exploit DB Packet Storm

292690	-	mozilla	firefox thunderbird seamonkey	The DOMParser component in Mozilla Firefox before 15.0, Thunderbird before 15.0, and SeaMonkey before 2.12 loads subresources during parsing of text/html data within an extension, which allows remote…	CWE-200 Information Exposure	CVE-2012-3975	2024-11-21 10:41	2012-08-29	Show	GitHub Exploit DB Packet Storm