Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 18, 2026, 4:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
232511	5.7	警告	VMware Linux レッドハット	-	Linux kernel の InfiniBand ドライバ内にある cm_work_handler 関数におけるサービス運用妨害 (パニック) の脆弱性	CWE-362 競合状態	CVE-2011-0695	2012-12-19 16:57	2011-03-15	Show	GitHub Exploit DB Packet Storm

232512	4.4	警告	VMware Linux レッドハット	-	Linux kernel の ib_uverbs_poll_cq 関数における整数オーバーフロー脆弱性	CWE-189 数値処理の問題	CVE-2010-4649	2012-12-19 16:56	2011-01-4	Show	GitHub Exploit DB Packet Storm

232513	4.9	警告	サイバートラスト株式会社 VMware Linux レッドハット	-	Linux kernel の is_gpt_valid 関数におけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2011-1577	2012-12-19 16:56	2011-03-14	Show	GitHub Exploit DB Packet Storm

232514	10	危険	サン・マイクロシステムズサイバートラスト株式会社 VMware ヒューレット・パッカードレッドハット	-	複数の Oracle 製品の Sound コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-3559	2012-12-19 16:54	2010-10-12	Show	GitHub Exploit DB Packet Storm

232515	10	危険	サン・マイクロシステムズサイバートラスト株式会社 VMware ヒューレット・パッカードレッドハット	-	複数の Oracle 製品の Java Web Start コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-3558	2012-12-19 16:51	2010-10-12	Show	GitHub Exploit DB Packet Storm

232516	6.8	警告	サン・マイクロシステムズサイバートラスト株式会社 VMware ヒューレット・パッカードレッドハット	-	複数の Oracle 製品の Swing コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-3557	2012-12-19 16:49	2010-10-12	Show	GitHub Exploit DB Packet Storm

232517	5.1	警告	レッドハット	-	OpenShift の管理コンソールにおけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2012-5622	2012-12-19 16:42	2012-12-10	Show	GitHub Exploit DB Packet Storm

232518	6.5	警告	ownCloud	-	ownCloud の lib/filesystem.php における任意の PHP コードを実行される脆弱性	CWE-20 CWE-Other	CVE-2012-5610	2012-12-19 16:32	2012-11-13	Show	GitHub Exploit DB Packet Storm

232519	6.5	警告	ownCloud	-	ownCloud の lib/migrate.php における任意の PHP コードを実行される脆弱性	CWE-Other その他	CVE-2012-5609	2012-12-19 16:21	2012-11-13	Show	GitHub Exploit DB Packet Storm

232520	4.3	警告	ownCloud	-	ownCloud の apps/user_webdavauth/settings.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-5608	2012-12-19 16:11	2012-11-13	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 18, 2026, 4:12 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
293061	-	moodle	moodle	lib.php in the Submission comments plugin in the Assignment module in Moodle 2.3.x before 2.3.4 and 2.4.x before 2.4.1 allows remote attackers to read or modify the submission comments (aka feedback …	CWE-264 Permissions, Privileges, and Access Controls	CVE-2012-6102	2024-11-21 10:45	2013-01-28	Show	GitHub Exploit DB Packet Storm

293062	-	moodle	moodle	Multiple open redirect vulnerabilities in Moodle 2.2.x before 2.2.7, 2.3.x before 2.3.4, and 2.4.x before 2.4.1 allow remote attackers to redirect users to arbitrary web sites and conduct phishing at…	CWE-20 Improper Input Validation	CVE-2012-6101	2024-11-21 10:45	2013-01-28	Show	GitHub Exploit DB Packet Storm

293063	-	moodle	moodle	report/outline/index.php in Moodle 2.2.x before 2.2.7, 2.3.x before 2.3.4, and 2.4.x before 2.4.1 does not properly enforce the moodle/user:viewhiddendetails capability requirement, which allows remo…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2012-6100	2024-11-21 10:45	2013-01-28	Show	GitHub Exploit DB Packet Storm

293064	-	moodle	moodle	The moodle1 backup converter in backup/converter/moodle1/lib.php in Moodle 2.1.x before 2.1.10, 2.2.x before 2.2.7, 2.3.x before 2.3.4, and 2.4.x before 2.4.1 does not properly validate pathnames, wh…	CWE-20 Improper Input Validation	CVE-2012-6099	2024-11-21 10:45	2013-01-28	Show	GitHub Exploit DB Packet Storm

293065	-	moodle	moodle	grade/edit/outcome/edit_form.php in Moodle 1.9.x through 1.9.19, 2.1.x before 2.1.10, 2.2.x before 2.2.7, 2.3.x before 2.3.4, and 2.4.x before 2.4.1 does not properly enforce the moodle/grade:manage …	CWE-264 Permissions, Privileges, and Access Controls	CVE-2012-6098	2024-11-21 10:45	2013-01-28	Show	GitHub Exploit DB Packet Storm

293066	-	tp-link	tl-wr841n_firmware tl-wr841n	Directory traversal vulnerability in the web-based management interface on the TP-LINK TL-WR841N router with firmware 3.13.9 build 120201 Rel.54965n and earlier allows remote attackers to read arbitr…	CWE-22 Path Traversal	CVE-2012-6276	2024-11-21 10:45	2013-01-27	Show	GitHub Exploit DB Packet Storm

293067	-	dell	openmanage_server_administrator	Multiple cross-site scripting (XSS) vulnerabilities in Dell OpenManage Server Administrator 6.5.0.1, 7.0.0.1, and 7.1.0.1 allow remote attackers to inject arbitrary web script or HTML via the topic p…	CWE-79 Cross-site Scripting	CVE-2012-6272	2024-11-21 10:45	2013-01-25	Show	GitHub Exploit DB Packet Storm

293068	-	isc redhat canonical	bind enterprise_linux_hpc_node enterprise_linux_server_eus enterprise_linux_server_aus enterprise_linux_desktop enterprise_linux_server enterprise_linux_workstation ubuntu_linux	ISC BIND 9.8.x through 9.8.4-P1 and 9.9.x through 9.9.2-P1, in certain configurations involving DNS64 with a Response Policy Zone that lacks an AAAA rewrite rule, allows remote attackers to cause a d…	CWE-20 Improper Input Validation	CVE-2012-5689	2024-11-21 10:45	2013-01-25	Show	GitHub Exploit DB Packet Storm

293069	-	proftpd	proftpd	ProFTPD before 1.3.5rc1, when using the UserOwner directive, allows local users to modify the ownership of arbitrary files via a race condition and a symlink attack on the (1) MKD or (2) XMKD command…	CWE-362 Race Condition	CVE-2012-6095	2024-11-21 10:45	2013-01-25	Show	GitHub Exploit DB Packet Storm

293070	-	freetype	freetype	The _bdf_parse_glyphs function in FreeType before 2.4.11 allows context-dependent attackers to cause a denial of service (out-of-bounds write and crash) via vectors related to BDF fonts and an ENCODI…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2012-5670	2024-11-21 10:45	2013-01-25	Show	GitHub Exploit DB Packet Storm