Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 11, 2026, 6:01 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
231601 2.6 注意 Angry Donuts - Drupal 用 Chaos tool suite モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-5559 2012-12-5 17:44 2012-11-14 Show GitHub Exploit DB Packet Storm
231602 3.6 注意 User Read-Only project - Drupal 用 User Read-Only モジュールにおける権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-5557 2012-12-5 17:43 2012-11-14 Show GitHub Exploit DB Packet Storm
231603 6.8 警告 Klaus Purer - Drupal 用 RESTful Web Services モジュールにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2012-5556 2012-12-5 17:40 2012-11-14 Show GitHub Exploit DB Packet Storm
231604 5 警告 Coleman Watts - Webform CiviCRM Integration モジュールのデフォルト設定における連絡先情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2012-5554 2012-12-5 17:40 2012-11-7 Show GitHub Exploit DB Packet Storm
231605 2.1 注意 Daniel Honrade - Drupal 用 OM Maximenu モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-5553 2012-12-5 17:39 2012-11-7 Show GitHub Exploit DB Packet Storm
231606 6.8 警告 Carlos Carvalhar - Drupal 用 Time Spent モジュールにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2012-5549 2012-12-5 17:33 2012-10-24 Show GitHub Exploit DB Packet Storm
231607 4.3 警告 Carlos Carvalhar - Drupal 用 Time Spent モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-5548 2012-12-5 17:28 2012-10-24 Show GitHub Exploit DB Packet Storm
231608 6.8 警告 Thomas Seidl - Drupal 用 Search API モジュールにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2012-5547 2012-12-5 17:28 2012-10-17 Show GitHub Exploit DB Packet Storm
231609 2.1 注意 Rob Loach - Drupal 用 ShareThis モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-5545 2012-12-5 17:26 2012-10-10 Show GitHub Exploit DB Packet Storm
231610 4 警告 ThinkShout - Drupal 用 Mandrill モジュールにおけるパスワードのリセットリンクを取得される脆弱性 CWE-200
情報漏えい
CVE-2012-5544 2012-12-5 16:57 2012-10-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 11, 2026, 4:09 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
293481 - symantec web_gateway The management console in Symantec Web Gateway 5.0.x before 5.0.3.18 allows remote attackers to execute arbitrary shell commands via crafted input to application scripts, related to an "injection" is… CWE-78
OS Command 
CVE-2012-2976 2024-11-21 10:40 2012-07-24 Show GitHub Exploit DB Packet Storm
293482 - symantec web_gateway SQL injection vulnerability in the management console in Symantec Web Gateway 5.0.x before 5.0.3.18 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. CWE-89
SQL Injection
CVE-2012-2961 2024-11-21 10:40 2012-07-24 Show GitHub Exploit DB Packet Storm
293483 - symantec web_gateway The management console in Symantec Web Gateway 5.0.x before 5.0.3.18 allows local users to gain privileges by modifying files, related to a "file inclusion" issue. CWE-264
Permissions, Privileges, and Access Controls
CVE-2012-2957 2024-11-21 10:40 2012-07-24 Show GitHub Exploit DB Packet Storm
293484 - symantec web_gateway The management console in Symantec Web Gateway 5.0.x before 5.0.3.18 allows remote attackers to execute arbitrary commands via crafted input to application scripts. CWE-78
OS Command 
CVE-2012-2953 2024-11-21 10:40 2012-07-24 Show GitHub Exploit DB Packet Storm
293485 - wordpress wordpress WordPress before 3.4.1 does not properly restrict access to post contents such as private or draft posts, which allows remote authors or contributors to obtain sensitive information via unknown vecto… CWE-264
Permissions, Privileges, and Access Controls
CVE-2012-3385 2024-11-21 10:40 2012-07-23 Show GitHub Exploit DB Packet Storm
293486 - wordpress wordpress Cross-site request forgery (CSRF) vulnerability in the customizer in WordPress before 3.4.1 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors. CWE-352
 Origin Validation Error
CVE-2012-3384 2024-11-21 10:40 2012-07-23 Show GitHub Exploit DB Packet Storm
293487 - wordpress wordpress The map_meta_cap function in wp-includes/capabilities.php in WordPress 3.4.x before 3.4.2, when the multisite feature is enabled, does not properly assign the unfiltered_html capability, which allows… CWE-264
Permissions, Privileges, and Access Controls
CVE-2012-3383 2024-11-21 10:40 2012-07-23 Show GitHub Exploit DB Packet Storm
293488 - openstack essex
folsom
diablo
virt/disk/api.py in OpenStack Compute (Nova) Folsom (2012.2), Essex (2012.1), and Diablo (2011.3) allows remote authenticated users to overwrite arbitrary files via a symlink attack on a file in an i… CWE-264
Permissions, Privileges, and Access Controls
CVE-2012-3361 2024-11-21 10:40 2012-07-23 Show GitHub Exploit DB Packet Storm
293489 - openstack essex
folsom
Directory traversal vulnerability in virt/disk/api.py in OpenStack Compute (Nova) Folsom (2012.2) and Essex (2012.1), when used over libvirt-based hypervisors, allows remote authenticated users to wr… CWE-22
Path Traversal
CVE-2012-3360 2024-11-21 10:40 2012-07-23 Show GitHub Exploit DB Packet Storm
293490 - viewvc viewvc The SVN revision view (lib/vclib/svn/svn_repos.py) in ViewVC before 1.1.15 does not properly handle log messages when a readable path is copied from an unreadable path, which allows remote attackers … CWE-200
Information Exposure
CVE-2012-3357 2024-11-21 10:40 2012-07-23 Show GitHub Exploit DB Packet Storm