Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 12, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
231691	3.5	注意	Christian Johansson	-	Drupal 用 Restrict node page view モジュールにおける未公開のノードにアクセスされる脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-4473	2012-12-4 16:21	2012-07-11	Show	GitHub Exploit DB Packet Storm

231692	5.1	警告	David Alkire	-	Drupal 用 Drag & Drop Gallery モジュールにおける任意の PHP コードを実行される脆弱性	CWE-Other その他	CVE-2012-4472	2012-12-4 16:20	2012-07-11	Show	GitHub Exploit DB Packet Storm

231693	5	警告	Dominique CLAUSE	-	Drupal 用 Search Autocomplete モジュールにおけるオートコンプリートを無効される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-4471	2012-12-4 16:19	2012-07-11	Show	GitHub Exploit DB Packet Storm

231694	7.5	危険	Philip Ludlam	-	Drupal 用 Listhandler モジュールにおけるアクセス制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-4470	2012-12-4 16:13	2012-07-11	Show	GitHub Exploit DB Packet Storm

231695	2.6	注意	Simon Rycroft	-	Drupal 用 Hashcash モジュールにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-4469	2012-12-4 15:17	2012-06-21	Show	GitHub Exploit DB Packet Storm

231696	4.3	警告	Privatemsg Project	-	Drupal 用 Privatemsg モジュールにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-4468	2012-12-4 15:16	2012-06-20	Show	GitHub Exploit DB Packet Storm

231697	2.1	注意	Python Software Foundation	-	Python Keyring におけるパスワードを取得される脆弱性	CWE-310 暗号の問題	CVE-2012-4571	2012-12-4 14:30	2012-11-20	Show	GitHub Exploit DB Packet Storm

231698	7.5	危険	libssh	-	libssh におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2012-4560	2012-12-4 14:27	2012-11-20	Show	GitHub Exploit DB Packet Storm

231699	7.5	危険	PS Project Management Team	-	libunity-webapps におけるサービス運用妨害 (メモリ破損およびクラッシュ) の脆弱性	CWE-399 リソース管理の問題	CVE-2012-4551	2012-12-4 14:25	2012-11-28	Show	GitHub Exploit DB Packet Storm

231700	5	警告	IBM	-	IBM WebSphere Portal の theme コンポーネントにおけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2012-4834	2012-12-4 14:12	2012-11-29	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 13, 2026, 5:05 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
292251	-	apache redhat	cxf jboss_enterprise_web_platform jboss_enterprise_soa_platform jboss_fuse_esb_enterprise jboss_enterprise_portal_platform jboss_enterprise_application_platform	Apache CXF 2.5.x before 2.5.10, 2.6.x before CXF 2.6.7, and 2.7.x before CXF 2.7.4 does not verify that a specified cryptographic algorithm is allowed by the WS-SecurityPolicy AlgorithmSuite definiti…	CWE-310 Cryptographic Issues	CVE-2012-5575	2024-11-21 10:44	2013-08-20	Show	GitHub Exploit DB Packet Storm

292252	-	juniper	ive_os secure_access_virtual_appliance fips_secure_access_4000 fips_secure_access_4500 fips_secure_access_6000 fips_secure_access_6500 mag2600_gateway mag4610_gateway mag6610_…	Cross-site scripting (XSS) vulnerability in the help page in Juniper Secure Access (SA) with IVE OS before 7.1r13, 7.2.x before 7.2r7, and 7.3.x before 7.3r2 allows remote attackers to inject arbitra…	CWE-79 Cross-site Scripting	CVE-2012-5460	2024-11-21 10:44	2013-08-1	Show	GitHub Exploit DB Packet Storm

292253	-	hp	system_management_homepage	HP System Management Homepage (SMH) before 7.2.1 allows remote attackers to bypass intended access restrictions and obtain sensitive information via unspecified vectors, a different vulnerability tha…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2012-5217	2024-11-21 10:44	2013-07-22	Show	GitHub Exploit DB Packet Storm

292254	-	hp	service_manager_web_tier	HP Service Manager Web Tier 9.31 before 9.31.2004 p2 allows remote attackers to obtain sensitive information via unspecified vectors.	CWE-200 Information Exposure	CVE-2012-5222	2024-11-21 10:44	2013-05-2	Show	GitHub Exploit DB Packet Storm

292255	-	hp	color_laserjet_enterprise_cp4525 laserjet_4345_mfp laserjet_9040 laserjet_p4015 color_laserjet_cp3525 laserjet_m3035_mfp color_laserjet_cp4005 color_laserjet_cp3505 laserjet_9…	Directory traversal vulnerability in the PostScript Interpreter, as used on the HP LaserJet 4xxx, 5200, 90xx, M30xx, M4345, M50xx, M90xx, P3005, and P4xxx; LaserJet Enterprise P3015; Color LaserJet 3…	NVD-CWE-noinfo	CVE-2012-5221	2024-11-21 10:44	2013-04-30	Show	GitHub Exploit DB Packet Storm

292256	-	hp	managed_printing_administration	Cross-site scripting (XSS) vulnerability in HP Managed Printing Administration (MPA) before 2.7.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.	CWE-79 Cross-site Scripting	CVE-2012-5219	2024-11-21 10:44	2013-04-28	Show	GitHub Exploit DB Packet Storm

292257	-	hp	storage_data_protector	Unspecified vulnerability in HP Storage Data Protector 6.20, 6.21, 7.00, and 7.01 allows local users to gain privileges via unknown vectors.	NVD-CWE-noinfo	CVE-2012-5220	2024-11-21 10:44	2013-04-26	Show	GitHub Exploit DB Packet Storm

292258	-	hp	elitepad	HP ElitePad 900 PCs with BIOS F.0x before F.01 Update 1.0.0.8 do not enable the Secure Boot feature, which allows local users to bypass intended BIOS restrictions and boot unintended operating system…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2012-5218	2024-11-21 10:44	2013-04-24	Show	GitHub Exploit DB Packet Storm

292259	-	cisco	5500_series_adaptive_security_appliance adaptive_security_appliance 5500_adaptive_security_appliance	Race condition on Cisco Adaptive Security Appliances (ASA) devices allows remote attackers to cause a denial of service (CPU consumption or device reload) by establishing multiple connections, leadin…	CWE-362 Race Condition	CVE-2012-5415	2024-11-21 10:44	2013-04-16	Show	GitHub Exploit DB Packet Storm

292260	-	hp	procurve_switch_software procurve_switch_1700-24 procurve_switch_1700-8	Cross-site request forgery (CSRF) vulnerability on HP ProCurve 1700-8 (aka J9079A) switches with software before VA.02.09 and 1700-24 (aka J9080A) switches with software before VB.02.09 allows remote…	CWE-352 Origin Validation Error	CVE-2012-5216	2024-11-21 10:44	2013-03-29	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed