Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 11, 2026, 12:16 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
231631 4.3 警告 David Alkire - Drupal 用 Drag & Drop Gallery モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-4476 2012-12-4 16:26 2012-07-11 Show GitHub Exploit DB Packet Storm
231632 5 警告 Chris Hertzog - Drupal 用 Security Questions モジュールにおける任意のユーザの質問および回答を編集される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-4475 2012-12-4 16:26 2012-07-11 Show GitHub Exploit DB Packet Storm
231633 4.3 警告 Dennis Blake - Drupal 用 Colorbox Node モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-4474 2012-12-4 16:24 2012-07-11 Show GitHub Exploit DB Packet Storm
231634 3.5 注意 Christian Johansson - Drupal 用 Restrict node page view モジュールにおける未公開のノードにアクセスされる脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-4473 2012-12-4 16:21 2012-07-11 Show GitHub Exploit DB Packet Storm
231635 5.1 警告 David Alkire - Drupal 用 Drag & Drop Gallery モジュールにおける任意の PHP コードを実行される脆弱性 CWE-Other
その他
CVE-2012-4472 2012-12-4 16:20 2012-07-11 Show GitHub Exploit DB Packet Storm
231636 5 警告 Dominique CLAUSE - Drupal 用 Search Autocomplete モジュールにおけるオートコンプリートを無効される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-4471 2012-12-4 16:19 2012-07-11 Show GitHub Exploit DB Packet Storm
231637 7.5 危険 Philip Ludlam - Drupal 用 Listhandler モジュールにおけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-4470 2012-12-4 16:13 2012-07-11 Show GitHub Exploit DB Packet Storm
231638 2.6 注意 Simon Rycroft - Drupal 用 Hashcash モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-4469 2012-12-4 15:17 2012-06-21 Show GitHub Exploit DB Packet Storm
231639 4.3 警告 Privatemsg Project - Drupal 用 Privatemsg モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-4468 2012-12-4 15:16 2012-06-20 Show GitHub Exploit DB Packet Storm
231640 2.1 注意 Python Software Foundation - Python Keyring におけるパスワードを取得される脆弱性 CWE-310
暗号の問題
CVE-2012-4571 2012-12-4 14:30 2012-11-20 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 11, 2026, 4:09 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
293401 - ibm websphere_mq
websphere_mq_managed_file_transfer
Multiple cross-site request forgery (CSRF) vulnerabilities in the Web Gateway component in IBM WebSphere MQ File Transfer Edition 7.0.4 and earlier, and WebSphere MQ - Managed File Transfer 7.5, allo… CWE-352
 Origin Validation Error
CVE-2012-3294 2024-11-21 10:40 2012-08-17 Show GitHub Exploit DB Packet Storm
293402 - standards_based_linux_instrumentation sblim-sfcb sfcb in sblim-sfcb places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory. NVD-CWE-Other
CVE-2012-3381 2024-11-21 10:40 2012-08-17 Show GitHub Exploit DB Packet Storm
293403 - hp service_manager_web_tier
service_center_web_tier
Cross-site scripting (XSS) vulnerability in HP Service Manager Web Tier 7.11, 9.21, and 9.30, and HP Service Center Web Tier 6.28, allows remote attackers to inject arbitrary web script or HTML via u… CWE-79
Cross-site Scripting
CVE-2012-3251 2024-11-21 10:40 2012-08-16 Show GitHub Exploit DB Packet Storm
293404 - hp service_manager_server
service_center_server
Unspecified vulnerability in HP Service Manager Server 7.11, 9.21, and 9.30, and HP Service Center Server 6.28, allows remote attackers to cause a denial of service via unknown vectors. NVD-CWE-noinfo
CVE-2012-3250 2024-11-21 10:40 2012-08-16 Show GitHub Exploit DB Packet Storm
293405 - hp fortify_software_security_center HP Fortify Software Security Center 3.1, 3.3, 3.4, and 3.5 allows remote authenticated users to obtain sensitive information via unspecified vectors. CWE-200
Information Exposure
CVE-2012-3249 2024-11-21 10:40 2012-08-16 Show GitHub Exploit DB Packet Storm
293406 - hp fortify_software_security_center HP Fortify Software Security Center 3.1, 3.3, 3.4, and 3.5 allows remote attackers to obtain sensitive information via unspecified vectors. CWE-200
Information Exposure
CVE-2012-3248 2024-11-21 10:40 2012-08-16 Show GitHub Exploit DB Packet Storm
293407 - hp integrity_firmware
integrity
itegrity
Unspecified vulnerability on the HP Integrity Server BL860c i2, BL870c i2, and BL890c i2 with firmware before 26.31 and the HP Integrity Server rx2800 i2 with firmware before 26.30 allows local users… NVD-CWE-noinfo
CVE-2012-3247 2024-11-21 10:40 2012-08-16 Show GitHub Exploit DB Packet Storm
293408 - tridium niagara_ax The default configuration of Tridium Niagara AX Framework through 3.6 uses a cleartext base64 format for transmission of credentials in cookies, which allows remote attackers to obtain sensitive info… CWE-522
 Insufficiently Protected Credentials
CVE-2012-3025 2024-11-21 10:40 2012-08-16 Show GitHub Exploit DB Packet Storm
293409 - tridium niagara_ax Tridium Niagara AX Framework through 3.6 uses predictable values for (1) session IDs and (2) keys, which might allow remote attackers to bypass authentication via a brute-force attack. CWE-287
Improper Authentication
CVE-2012-3024 2024-11-21 10:40 2012-08-16 Show GitHub Exploit DB Packet Storm
293410 - siemens comos Siemens COMOS before 9.1 Patch 413, 9.2 before Update 03 Patch 023, and 10.0 before Patch 005 allows remote authenticated users to obtain database administrative access via unspecified method calls. CWE-264
Permissions, Privileges, and Access Controls
CVE-2012-3009 2024-11-21 10:40 2012-08-16 Show GitHub Exploit DB Packet Storm