Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 17, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
232391 7.5 危険 Gajim.org - Gajim の common/logger.py における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2012-2086 2012-11-27 20:12 2011-11-4 Show GitHub Exploit DB Packet Storm
232392 4.6 警告 レッドハット - 複数の JBoss Enterprise 製品における任意のアプリケーションにアクセスされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-1167 2012-11-27 20:10 2012-06-19 Show GitHub Exploit DB Packet Storm
232393 7.5 危険 レッドハット - 複数の JBoss Enterprise 製品における JNDI ツリーにアイテムを追加される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-4605 2012-11-27 20:07 2012-06-20 Show GitHub Exploit DB Packet Storm
232394 6.8 警告 レッドハット - 複数の JBoss Enterprise 製品における認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2011-4085 2012-11-27 20:06 2011-11-16 Show GitHub Exploit DB Packet Storm
232395 6 警告 レッドハット - 複数の JBoss Enterprise 製品におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2011-2908 2012-11-27 20:05 2012-08-8 Show GitHub Exploit DB Packet Storm
232396 5 警告 レッドハット - JBoss Enterprise Portal Platform の JBossWS における平文データを取得される脆弱性 CWE-310
暗号の問題 		CVE-2011-1096 2012-11-27 20:03 2012-10-8 Show GitHub Exploit DB Packet Storm
232397 4.3 警告 JRuby - JRuby の正規表現エンジンにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-1330 2012-11-27 20:02 2010-04-26 Show GitHub Exploit DB Packet Storm
232398 7.5 危険 OpenVAS - OpenVAS Manager の manage_sql.c における任意のコマンドを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2012-5520 2012-11-27 16:58 2012-11-12 Show GitHub Exploit DB Packet Storm
232399 5 警告 awcm - ar web content manager におけるサービス運用妨害 (ディスク消費) の脆弱性 CWE-399
リソース管理の問題 		CVE-2012-2438 2012-11-27 16:58 2012-11-26 Show GitHub Exploit DB Packet Storm
232400 5 警告 awcm - ar web content manager の cookie_gen.php における任意のクッキーを生成される脆弱性 CWE-287
不適切な認証 		CVE-2012-2437 2012-11-27 16:57 2012-11-26 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 17, 2026, 4:15 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
293121 - xen xen The do_tmem_op function in the Transcendent Memory (TMEM) in Xen 4.0, 4.1, and 4.2 allow local guest OS users to cause a denial of service (host crash) and possibly have other unspecified impacts via… CWE-20
 Improper Input Validation  		CVE-2012-6030 2024-11-21 10:45 2012-11-24 Show GitHub Exploit DB Packet Storm
293122 - sinapsitech sinapsi_firmware
esolar_duo_photovoltaic_system_monitor
esolar_light_photovoltaic_system_monitor
esolar_photovoltaic_system_monitor 		The management web pages on the Sinapsi eSolar Light Photovoltaic System Monitor (aka Schneider Electric Ezylog photovoltaic SCADA management server), Sinapsi eSolar, and Sinapsi eSolar DUO with firm… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2012-5864 2024-11-21 10:45 2012-11-23 Show GitHub Exploit DB Packet Storm
293123 - sinapsitech sinapsi_firmware
esolar_duo_photovoltaic_system_monitor
esolar_light_photovoltaic_system_monitor
esolar_photovoltaic_system_monitor 		ping.php on the Sinapsi eSolar Light Photovoltaic System Monitor (aka Schneider Electric Ezylog photovoltaic SCADA management server), Sinapsi eSolar, and Sinapsi eSolar DUO with firmware before 2.0.… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2012-5863 2024-11-21 10:45 2012-11-23 Show GitHub Exploit DB Packet Storm
293124 - sinapsitech sinapsi_firmware
esolar_duo_photovoltaic_system_monitor
esolar_light_photovoltaic_system_monitor
esolar_photovoltaic_system_monitor 		login.php on the Sinapsi eSolar Light Photovoltaic System Monitor (aka Schneider Electric Ezylog photovoltaic SCADA management server), Sinapsi eSolar, and Sinapsi eSolar DUO with firmware before 2.0… CWE-310
Cryptographic Issues 		CVE-2012-5862 2024-11-21 10:45 2012-11-23 Show GitHub Exploit DB Packet Storm
293125 - sinapsitech sinapsi_firmware
esolar_duo_photovoltaic_system_monitor
esolar_light_photovoltaic_system_monitor
esolar_photovoltaic_system_monitor 		Multiple SQL injection vulnerabilities on the Sinapsi eSolar Light Photovoltaic System Monitor (aka Schneider Electric Ezylog photovoltaic SCADA management server), Sinapsi eSolar, and Sinapsi eSolar… CWE-89
SQL Injection 		CVE-2012-5861 2024-11-21 10:45 2012-11-23 Show GitHub Exploit DB Packet Storm
293126 - ibm websphere_datapower_xc10_appliance The IBM WebSphere DataPower XC10 Appliance 2.0.0.0 through 2.0.0.3 and 2.1.0.0 through 2.1.0.2 allows remote authenticated users to bypass intended administrative-role requirements and perform arbitr… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2012-5759 2024-11-21 10:45 2012-11-23 Show GitHub Exploit DB Packet Storm
293127 - ibm websphere_datapower_xc10_appliance The IBM WebSphere DataPower XC10 Appliance 2.0.0.0 through 2.0.0.3 and 2.1.0.0 through 2.1.0.2 does not require authentication for an unspecified interface, which allows remote attackers to cause a d… CWE-287
Improper Authentication 		CVE-2012-5758 2024-11-21 10:45 2012-11-23 Show GitHub Exploit DB Packet Storm
293128 - ibm websphere_datapower_xc10_appliance The IBM WebSphere DataPower XC10 Appliance 2.0.0.0 through 2.0.0.3 and 2.1.0.0 through 2.1.0.2, when a collective configuration is enabled, has a single secret key that is shared across different cus… CWE-310
Cryptographic Issues 		CVE-2012-5756 2024-11-21 10:45 2012-11-23 Show GitHub Exploit DB Packet Storm
293129 - mozilla
suse
opensuse
canonical 		firefox
seamonkey
thunderbird
thunderbird_esr
linux_enterprise_server
linux_enterprise_desktop
opensuse
linux_enterprise_software_development_kit
ubuntu_linux 		Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 17.0, Thunderbird before 17.0, and SeaMonkey before 2.14 allow remote attackers to cause a denial of service (memo… NVD-CWE-noinfo
CVE-2012-5843 2024-11-21 10:45 2012-11-21 Show GitHub Exploit DB Packet Storm
293130 - mozilla
suse
opensuse
canonical 		firefox
seamonkey
thunderbird
thunderbird_esr
linux_enterprise_server
linux_enterprise_desktop
opensuse
linux_enterprise_software_development_kit
ubuntu_linux 		The copyTexImage2D implementation in the WebGL subsystem in Mozilla Firefox before 17.0, Thunderbird before 17.0, and SeaMonkey before 2.14 allows remote attackers to execute arbitrary code or cause … CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2012-5838 2024-11-21 10:45 2012-11-21 Show GitHub Exploit DB Packet Storm