Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 6, 2026, 2 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
231391 2.9 注意 DELL EMC (旧 EMC Corporation) - EMC RSA Adaptive Authentication On-Premise における重要な情報を取得される脆弱性 CWE-noinfo
情報不足
CVE-2012-2286 2012-10-15 14:01 2012-10-10 Show GitHub Exploit DB Packet Storm
231392 6.2 警告 openCryptoki Project - openCryptoki における任意のファイルに誰でも書き込みできる権限 (world-writable permissions) を作成される脆弱性 CWE-59
リンク解釈の問題
CVE-2012-4455 2012-10-15 13:55 2012-04-27 Show GitHub Exploit DB Packet Storm
231393 2.9 注意 openCryptoki Project - openCryptoki における任意のファイルに誰でも書き込みできる権限 (world-writable permissions) を作成される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-4454 2012-10-15 13:51 2012-02-22 Show GitHub Exploit DB Packet Storm
231394 9.3 危険 Mozilla Foundation - 複数の Mozilla 製品におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2012-3989 2012-10-15 11:37 2012-10-9 Show GitHub Exploit DB Packet Storm
231395 6.8 警告 Mozilla Foundation - 複数の Mozilla 製品におけるクリックジャッキング攻撃を誘発される脆弱性 CWE-DesignError
CVE-2012-5354 2012-10-15 10:44 2012-10-9 Show GitHub Exploit DB Packet Storm
231396 4 警告 Mozilla Foundation - Android 上で稼働する Mozilla Firefox におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-3987 2012-10-15 10:28 2012-10-9 Show GitHub Exploit DB Packet Storm
231397 4.3 警告 Mozilla Foundation - 複数の Mozilla 製品におけるクロスサイトスクリプティングの脆弱性 CWE-DesignError
CVE-2012-3985 2012-10-15 10:23 2012-10-9 Show GitHub Exploit DB Packet Storm
231398 6.8 警告 Mozilla Foundation - 複数の Mozilla 製品におけるページコンテンツを偽造される脆弱性 CWE-Other
その他
CVE-2012-3984 2012-10-15 10:19 2012-10-9 Show GitHub Exploit DB Packet Storm
231399 5.8 警告 JOSSO - Java Open Single Sign-On Project Home におけるメッセージを偽造される脆弱性 CWE-287
不適切な認証
CVE-2012-5352 2012-10-12 16:47 2012-10-9 Show GitHub Exploit DB Packet Storm
231400 6.4 警告 Apache Software Foundation - Apache Axis2 におけるメッセージを偽造される脆弱性 CWE-287
不適切な認証
CVE-2012-5351 2012-10-12 16:45 2012-10-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 6, 2026, 4:08 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
292791 - freso languageicons Cross-site scripting (XSS) vulnerability in the Language Icons module 6.x-2.x before 6.x-2.1 and 7.x-1.x before 7.x-1.0 for Drupal allows remote authenticated users with administer languages permissi… CWE-79
Cross-site Scripting
CVE-2012-2065 2024-11-21 10:38 2012-09-5 Show GitHub Exploit DB Packet Storm
292792 - mark_theunissen views_lang_switch Cross-site scripting (XSS) vulnerability in theme/views_lang_switch.theme.inc in the Views Language Switcher module before 7.x-1.2 for Drupal allows remote attackers to inject arbitrary web script or… CWE-79
Cross-site Scripting
CVE-2012-2064 2024-11-21 10:38 2012-09-5 Show GitHub Exploit DB Packet Storm
292793 - brian_altenhofel slidebox The Slidebox module before 7.x-1.4 for Drupal does not properly check permissions, which allows remote attackers to obtain sensitive information via unspecified vectors. CWE-264
Permissions, Privileges, and Access Controls
CVE-2012-2063 2024-11-21 10:38 2012-09-5 Show GitHub Exploit DB Packet Storm
292794 - buddypress buddypress SQL injection vulnerability in wp-load.php in the BuddyPress plugin 1.5.x before 1.5.5 of WordPress allows remote attackers to execute arbitrary SQL commands via the page parameter in an activity_wid… CWE-89
SQL Injection
CVE-2012-2109 2024-11-21 10:38 2012-09-5 Show GitHub Exploit DB Packet Storm
292795 - emc networker Format string vulnerability in the nsrd RPC service in EMC NetWorker 7.6.3 and 7.6.4 before 7.6.4.1, and 8.0 before 8.0.0.1, allows remote attackers to execute arbitrary code via format string specif… CWE-134
Use of Externally-Controlled Format String
CVE-2012-2288 2024-11-21 10:38 2012-09-4 Show GitHub Exploit DB Packet Storm
292796 - yaniv_aran-shamir gigya Cross-site scripting (XSS) vulnerability in the Gigya - Social optimization module 6.x before 6.x-3.2 for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. CWE-79
Cross-site Scripting
CVE-2012-2117 2024-11-21 10:38 2012-09-1 Show GitHub Exploit DB Packet Storm
292797 - commerceguys commerce_reorder Cross-site request forgery (CSRF) vulnerability in the Commerce Reorder module before 7.x-1.1 for Drupal allows remote attackers to hijack the authentication of arbitrary users for requests that add … CWE-352
 Origin Validation Error
CVE-2012-2116 2024-11-21 10:38 2012-09-1 Show GitHub Exploit DB Packet Storm
292798 - etalabs musl Stack-based buffer overflow in fprintf in musl before 0.8.8 and earlier allows context-dependent attackers to cause a denial of service (crash) or possibly execute arbitrary code via a long string to… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2012-2114 2024-11-21 10:38 2012-09-1 Show GitHub Exploit DB Packet Storm
292799 - fusiondrupalthemes fusion Cross-site scripting (XSS) vulnerability in the fusion_core_preprocess_page function in fusion_core/template.php in the Fusion module before 6.x-1.13 for Drupal allows remote attackers to inject arbi… CWE-79
Cross-site Scripting
CVE-2012-2083 2024-11-21 10:38 2012-09-1 Show GitHub Exploit DB Packet Storm
292800 - asterisk
sangoma
open_source
asterisk
certified_asterisk
digiumphones
business_edition
Incomplete blacklist vulnerability in main/manager.c in Asterisk Open Source 1.8.x before 1.8.15.1 and 10.x before 10.7.1, Certified Asterisk 1.8.11 before 1.8.11-cert6, Asterisk Digiumphones 10.x.x-… NVD-CWE-Other
CVE-2012-2186 2024-11-21 10:38 2012-08-31 Show GitHub Exploit DB Packet Storm