Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 18, 2026, 12:09 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
232271 6.4 警告 サイバートラスト株式会社
VMware
レッドハット		 - libuser におけるアクセス権を取得される脆弱性 CWE-310
暗号の問題 		CVE-2011-0002 2012-12-18 17:35 2011-01-20 Show GitHub Exploit DB Packet Storm
232272 4.3 警告 アップル
サイバートラスト株式会社
ブルーコートシステムズ
ヒューレット・パッカード
OpenSSL Project
オラクル
VMware
レッドハット		 - OpenSSL における暗号スイートのダウングレードに関する脆弱性 CWE-DesignError
CVE-2010-4180 2012-12-18 17:34 2010-12-2 Show GitHub Exploit DB Packet Storm
232273 4.3 警告 サイバートラスト株式会社
VMware
OpenSSL Project
レッドハット
オラクル		 - OpenSSL における暗号を強制的に利用される脆弱性 CWE-310
暗号の問題 		CVE-2008-7270 2012-12-18 17:31 2010-12-6 Show GitHub Exploit DB Packet Storm
232274 5 警告 GNU Project
VMware		 - GNU C Library の posix/fnmatch.c における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2011-1659 2012-12-18 17:16 2011-04-8 Show GitHub Exploit DB Packet Storm
232275 3.7 注意 GNU Project
VMware		 - GNU C Library の ld.so における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-1658 2012-12-18 17:14 2011-04-8 Show GitHub Exploit DB Packet Storm
232276 6.2 警告 GNU Project
VMware
サイバートラスト株式会社
レッドハット		 - GNU C Library の locale/programs/locale.c における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-1095 2012-12-18 17:12 2011-04-4 Show GitHub Exploit DB Packet Storm
232277 5.1 警告 GNU Project
VMware
サイバートラスト株式会社
レッドハット		 - GNU C Library および Embedded GLIBC における任意のコードを実行される脆弱性 CWE-399
リソース管理の問題 		CVE-2011-1071 2012-12-18 17:10 2011-04-4 Show GitHub Exploit DB Packet Storm
232278 6.9 警告 GNU Project
VMware
サイバートラスト株式会社
レッドハット		 - GNU C Library の elf/dl-object.c における権限を取得される脆弱性 CWE-Other
その他 		CVE-2011-0536 2012-12-18 17:07 2011-04-4 Show GitHub Exploit DB Packet Storm
232279 7.2 危険 GNU Project
VMware
サイバートラスト株式会社
レッドハット		 - GNU C Library の encode_name マクロにおける権限を取得される脆弱性 CWE-20
不適切な入力確認 		CVE-2010-0296 2012-12-18 17:04 2010-06-1 Show GitHub Exploit DB Packet Storm
232280 5 警告 サイバートラスト株式会社
VMware
MIT Kerberos
レッドハット
オラクル		 - MIT Kerberos 5 の Key Distribution Center におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他 		CVE-2011-0282 2012-12-18 16:57 2011-02-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 18, 2026, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
293451 - catalin_florian_radut zeropoint Cross-site scripting (XSS) vulnerability in the Zero Point module 6.x-1.x before 6.x-1.18 and 7.x-1.x before 7.x-1.4 for Drupal allows remote attackers to inject arbitrary web script or HTML via the … CWE-79
Cross-site Scripting 		CVE-2012-5591 2024-11-21 10:44 2012-12-27 Show GitHub Exploit DB Packet Storm
293452 - scripthead webmail_plus SQL injection vulnerability in the Webmail Plus module for Drupal allows remote attackers to execute arbitrary SQL commands via unspecified vectors. CWE-89
SQL Injection 		CVE-2012-5590 2024-11-21 10:44 2012-12-27 Show GitHub Exploit DB Packet Storm
293453 - netgenius multilink The MultiLink module 6.x-2.x before 6.x-2.7 and 7.x-2.x before 7.x-2.7 for Drupal does not properly check node permissions when generating an in-content link, which allows remote authenticated users … CWE-200
Information Exposure 		CVE-2012-5589 2024-11-21 10:44 2012-12-27 Show GitHub Exploit DB Packet Storm
293454 - epiqo email The Email Field module 6.x-1.x before 6.x-1.3 for Drupal, when using a field permission module and the field contact field formatter is set to the full or teaser display mode, does not properly check… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2012-5588 2024-11-21 10:44 2012-12-27 Show GitHub Exploit DB Packet Storm
293455 - epiqo email Cross-site scripting (XSS) vulnerability in the Email Field module 6.x-1.x before 6.x-1.3 for Drupal allows remote attackers to inject arbitrary web script or HTML via the mailto link. CWE-79
Cross-site Scripting 		CVE-2012-5587 2024-11-21 10:44 2012-12-27 Show GitHub Exploit DB Packet Storm
293456 - marc_ingram services The Services module 6.x-3.x before 6.x-3.3 and 7.x-3.x before 7.x-3.3 for Drupal allows remote authenticated users with the "access user profiles" permission to access arbitrary users' emails via vec… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2012-5586 2024-11-21 10:44 2012-12-27 Show GitHub Exploit DB Packet Storm
293457 - mixpanel_project mixpanel Cross-site scripting (XSS) vulnerability in the Mixpanel module 6.x-1.x before 6.x-1.1 in Drupal allows remote authenticated users with the "access administration pages" permission to inject arbitrar… CWE-79
Cross-site Scripting 		CVE-2012-5585 2024-11-21 10:44 2012-12-27 Show GitHub Exploit DB Packet Storm
293458 - m2osw tableofcontents The Table of Contents module 6.x-3.x before 6.x-3.8 for Drupal does not properly check node permissions, which allows remote attackers to read a node's headers by accessing a table of contents block. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2012-5584 2024-11-21 10:44 2012-12-27 Show GitHub Exploit DB Packet Storm
293459 - naver loctouch The Loctouch application 3.4.6 and earlier for Android allows attackers to obtain sensitive information about logged locations via a crafted application that leverages read permission for system log … CWE-200
Information Exposure 		CVE-2012-5183 2024-11-21 10:44 2012-12-27 Show GitHub Exploit DB Packet Storm
293460 - naver loctouch The Loctouch application 3.4.6 and earlier for Android does not properly handle implicit intents, which allows attackers to obtain sensitive information about logged locations via a crafted applicati… CWE-200
Information Exposure 		CVE-2012-5182 2024-11-21 10:44 2012-12-27 Show GitHub Exploit DB Packet Storm