Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 11, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
231531 3.5 注意 TYPO3 Association - TYPO3 のバックエンドの configuration モジュールにおける暗号鍵を取得される脆弱性 CWE-200
情報漏えい 		CVE-2012-3529 2012-11-15 14:24 2012-08-15 Show GitHub Exploit DB Packet Storm
231532 4 警告 TYPO3 Association - TYPO3 のバックエンドにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-3528 2012-11-15 14:23 2012-08-15 Show GitHub Exploit DB Packet Storm
231533 4.6 警告 TYPO3 Association - TYPO3 のバックエンドのヘルプシステムにおける任意のオブジェクトのシリアル化を解除される脆弱性 CWE-310
暗号の問題 		CVE-2012-3527 2012-11-15 14:22 2012-08-15 Show GitHub Exploit DB Packet Storm
231534 7.5 危険 Zabbix - Zabbix の frontends/php/popup_bitem.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2012-3435 2012-11-15 12:09 2012-07-18 Show GitHub Exploit DB Packet Storm
231535 10 危険 マイクロソフト
アドビシステムズ
Google		 - Adobe Flash Player および Adobe AIR におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2012-5287 2012-11-14 16:07 2012-11-2 Show GitHub Exploit DB Packet Storm
231536 10 危険 マイクロソフト
アドビシステムズ
Google		 - Adobe Flash Player および Adobe AIR におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2012-5286 2012-11-14 16:07 2012-11-2 Show GitHub Exploit DB Packet Storm
231537 10 危険 マイクロソフト
アドビシステムズ
Google		 - Adobe Flash Player および Adobe AIR における脆弱性 CWE-noinfo
情報不足 		CVE-2012-5673 2012-11-14 16:07 2012-11-2 Show GitHub Exploit DB Packet Storm
231538 10 危険 マイクロソフト
アドビシステムズ
Google		 - Adobe Flash Player および Adobe AIR におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2012-5285 2012-11-14 16:06 2012-11-2 Show GitHub Exploit DB Packet Storm
231539 5 警告 C3-ilex - C3-ilex EOScada の EOSCoreScada.exe におけるサービス運用妨害 (デーモン再起動) の脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-1810 2012-11-14 16:03 2012-11-1 Show GitHub Exploit DB Packet Storm
231540 7.8 危険 C3-ilex - C3-ilex EOScada の EOSDataServer.exe におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2012-1811 2012-11-14 16:02 2012-11-1 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 11, 2026, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
293451 - openvswitch openvswitch Open vSwitch 1.4.2 uses world writable permissions for (1) /var/lib/openvswitch/pki/controllerca/incoming/ and (2) /var/lib/openvswitch/pki/switchca/incoming/, which allows local users to delete and … CWE-264
Permissions, Privileges, and Access Controls 		CVE-2012-3449 2024-11-21 10:40 2012-08-8 Show GitHub Exploit DB Packet Storm
293452 - kde kde_pim The HTMLQuoteColorer::process function in messageviewer/htmlquotecolorer.cpp in KDE PIM 4.6 through 4.8 does not disable JavaScript, Java, and Plugins, which allows remote attackers to inject arbitra… CWE-16
Configuration 		CVE-2012-3413 2024-11-21 10:40 2012-08-8 Show GitHub Exploit DB Packet Storm
293453 - ganglia ganglia-web Unspecified vulnerability in Ganglia Web before 3.5.1 allows remote attackers to execute arbitrary PHP code via unknown attack vectors. NVD-CWE-noinfo
CVE-2012-3448 2024-11-21 10:40 2012-08-7 Show GitHub Exploit DB Packet Storm
293454 - php php pdo_sql_parser.re in the PDO extension in PHP before 5.3.14 and 5.4.x before 5.4.4 does not properly determine the end of the query string during parsing of prepared statements, which allows remote a… NVD-CWE-Other
CVE-2012-3450 2024-11-21 10:40 2012-08-7 Show GitHub Exploit DB Packet Storm
293455 - puppetlabs
puppet 		puppet
puppet_enterprise 		lib/puppet/network/authstore.rb in Puppet before 2.7.18, and Puppet Enterprise before 2.5.2, supports use of IP addresses in certnames without warning of potential risks, which might allow remote att… CWE-287
Improper Authentication 		CVE-2012-3408 2024-11-21 10:40 2012-08-7 Show GitHub Exploit DB Packet Storm
293456 - siemens synco_ozw_web_server
synco_ozw_web_server_firmware 		The Siemens Synco OZW Web Server devices OZW672.*, OZW772.*, and OZW775 with firmware before 4 have an unspecified default password, which makes it easier for remote attackers to obtain administrativ… CWE-255
Credentials Management 		CVE-2012-3020 2024-11-21 10:40 2012-08-7 Show GitHub Exploit DB Packet Storm
293457 - djangoproject django The get_image_dimensions function in the image-handling functionality in Django before 1.3.2 and 1.4.x before 1.4.1 uses a constant chunk size in all attempts to determine dimensions, which allows re… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2012-3444 2024-11-21 10:40 2012-08-1 Show GitHub Exploit DB Packet Storm
293458 - djangoproject django The django.forms.ImageField class in the form system in Django before 1.3.2 and 1.4.x before 1.4.1 completely decompresses image data during image validation, which allows remote attackers to cause a… CWE-20
 Improper Input Validation  		CVE-2012-3443 2024-11-21 10:40 2012-08-1 Show GitHub Exploit DB Packet Storm
293459 - djangoproject django The (1) django.http.HttpResponseRedirect and (2) django.http.HttpResponsePermanentRedirect classes in Django before 1.3.2 and 1.4.x before 1.4.1 do not validate the scheme of a redirect target, which… CWE-79
Cross-site Scripting 		CVE-2012-3442 2024-11-21 10:40 2012-08-1 Show GitHub Exploit DB Packet Storm
293460 - openstack essex
keystone
horizon 		OpenStack Keystone before 2012.1.1, as used in OpenStack Folsom before Folsom-1 and OpenStack Essex, does not properly implement token expiration, which allows remote authenticated users to bypass in… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2012-3426 2024-11-21 10:40 2012-07-31 Show GitHub Exploit DB Packet Storm