Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 8, 2026, 2:21 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
231271 9.3 危険 ヒューレット・パッカード - HP Integrated Lights-Out 3 および Integrated Lights-Out 4 における重要な情報を取得される脆弱性 CWE-noinfo
情報不足
CVE-2012-3271 2012-11-30 12:01 2012-11-19 Show GitHub Exploit DB Packet Storm
231272 7.8 危険 京セラ株式会社 - 複数の京セラ製携帯端末におけるメール受信時に再起動する問題 CWE-noinfo
情報不足
CVE-2012-5174 2012-11-30 12:01 2012-11-30 Show GitHub Exploit DB Packet Storm
231273 9.3 危険 シマンテック - 複数の Symantec 製品に脆弱性 CWE-119
バッファエラー
CVE-2012-4953 2012-11-30 11:52 2012-11-6 Show GitHub Exploit DB Packet Storm
231274 5 警告 Google - Google CityHash におけるサービス運用妨害 (CPU 資源の消費) の脆弱性 CWE-310
暗号の問題
CVE-2012-6051 2012-11-29 16:16 2012-11-28 Show GitHub Exploit DB Packet Storm
231275 5 警告 オラクル - Oracle Java SE および OpenJDK におけるサービス運用妨害 (CPU 資源の消費) の脆弱性 CWE-310
暗号の問題
CVE-2012-5373 2012-11-29 16:12 2012-11-28 Show GitHub Exploit DB Packet Storm
231276 5 警告 Rubinius - Rubinius におけるサービス運用妨害 (CPU 資源の消費) の脆弱性 CWE-310
暗号の問題
CVE-2012-5372 2012-11-29 16:10 2011-11-28 Show GitHub Exploit DB Packet Storm
231277 5 警告 Ruby-lang.org - Ruby におけるサービス運用妨害 (CPU 資源の消費) の脆弱性 CWE-310
暗号の問題
CVE-2012-5371 2012-11-29 16:08 2011-11-9 Show GitHub Exploit DB Packet Storm
231278 5 警告 JRuby - JRuby におけるサービス運用妨害 (CPU 資源の消費) の脆弱性 CWE-310
暗号の問題
CVE-2012-5370 2012-11-29 16:05 2011-11-28 Show GitHub Exploit DB Packet Storm
231279 5 警告 オラクル - Oracle Java SE および OpenJDK におけるサービス運用妨害 (CPU 資源の消費) の脆弱性 CWE-310
暗号の問題
CVE-2012-2739 2012-11-29 16:03 2012-06-12 Show GitHub Exploit DB Packet Storm
231280 7.5 危険 サムスン - Samsung 製プリンタに SNMP コミュニティ文字列がハードコードされている問題 CWE-264
認可・権限・アクセス制御
CVE-2012-4964 2012-11-29 16:01 2012-11-27 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 8, 2026, 4:54 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
293221 - christopher_mitchell smart_breadcrumb The filter_titles function in the Smart Breadcrumb module 6.x-1.x before 6.x-1.3 for Drupal does not properly convert a title to plain-text, which allows remote authenticated users with create or edi… CWE-20
 Improper Input Validation 
CVE-2012-2705 2024-11-21 10:39 2012-06-27 Show GitHub Exploit DB Packet Storm
293222 - john_franklin advertisement Cross-site scripting (XSS) vulnerability in the Advertisement module 6.x-2.x before 6.x-2.3 for Drupal, when debug mode is enabled, allows remote attackers to inject arbitrary web script or HTML via … CWE-79
Cross-site Scripting
CVE-2012-2703 2024-11-21 10:39 2012-06-27 Show GitHub Exploit DB Packet Storm
293223 - tony_freixas ubercart_product_keys The Ubercart Product Keys module 6.x-1.x before 6.x-1.1 for Drupal does not properly check access for product keys, which allows remote attackers to read all unassigned product keys via certain condi… CWE-264
Permissions, Privileges, and Access Controls
CVE-2012-2702 2024-11-21 10:39 2012-06-27 Show GitHub Exploit DB Packet Storm
293224 - rubyonrails ruby_on_rails
rails
The Active Record component in Ruby on Rails before 3.0.14, 3.1.x before 3.1.6, and 3.2.x before 3.2.6 does not properly implement the passing of request data to a where method in an ActiveRecord cla… CWE-89
SQL Injection
CVE-2012-2695 2024-11-21 10:39 2012-06-22 Show GitHub Exploit DB Packet Storm
293225 - rubyonrails ruby_on_rails
rails
actionpack/lib/action_dispatch/http/request.rb in Ruby on Rails before 3.0.14, 3.1.x before 3.1.6, and 3.2.x before 3.2.6 does not properly consider differences in parameter handling between the Acti… CWE-264
Permissions, Privileges, and Access Controls
CVE-2012-2694 2024-11-21 10:39 2012-06-22 Show GitHub Exploit DB Packet Storm
293226 - rubyonrails ruby_on_rails
rails
The Active Record component in Ruby on Rails 3.0.x before 3.0.13, 3.1.x before 3.1.5, and 3.2.x before 3.2.4 does not properly implement the passing of request data to a where method in an ActiveReco… CWE-89
SQL Injection
CVE-2012-2661 2024-11-21 10:39 2012-06-22 Show GitHub Exploit DB Packet Storm
293227 - rubyonrails ruby_on_rails
rails
actionpack/lib/action_dispatch/http/request.rb in Ruby on Rails before 3.0.13, 3.1.x before 3.1.5, and 3.2.x before 3.2.4 does not properly consider differences in parameter handling between the Acti… CWE-264
Permissions, Privileges, and Access Controls
CVE-2012-2660 2024-11-21 10:39 2012-06-22 Show GitHub Exploit DB Packet Storm
293228 - drupal-id counter_module SQL injection vulnerability in the Counter module for Drupal allows remote attackers to execute arbitrary SQL commands via unspecified vectors related to "recording visits." CWE-89
SQL Injection
CVE-2012-2718 2024-11-21 10:39 2012-06-22 Show GitHub Exploit DB Packet Storm
293229 - david_stosik comment_moderation Cross-site request forgery (CSRF) vulnerability in the Comment Moderation module 6.x-1.x before 6.x-1.1 for Drupal allows remote attackers to hijack the authentication of administrators for requests … CWE-352
 Origin Validation Error
CVE-2012-2716 2024-11-21 10:39 2012-06-22 Show GitHub Exploit DB Packet Storm
293230 - openstack compute
essex
diablo
The (1) EC2 and (2) OS APIs in OpenStack Compute (Nova) Folsom (2012.2), Essex (2012.1), and Diablo (2011.3) do not properly check the protocol when security groups are created and the network protoc… CWE-20
 Improper Input Validation 
CVE-2012-2654 2024-11-21 10:39 2012-06-22 Show GitHub Exploit DB Packet Storm