Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 16, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
240301 4.3 警告 IBM - IBM Lotus Domino の HTTP サーバにおける CRLF インジェクションの脆弱性 CWE-20
不適切な入力確認 		CVE-2012-3301 2012-08-22 16:53 2012-08-15 Show GitHub Exploit DB Packet Storm
240302 4.3 警告 IBM - IBM WAS の管理コンソールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-3293 2012-08-22 16:52 2012-08-6 Show GitHub Exploit DB Packet Storm
240303 5 警告 IBM - IBM WAS の HTTP サーバで使用される IBM Global Security Kit におけるサービス運用妨害 (DoS) の脆弱性 CWE-310
暗号の問題 		CVE-2012-2190 2012-08-22 16:51 2012-08-6 Show GitHub Exploit DB Packet Storm
240304 4 警告 ヒューレット・パッカード - HP Virtual SAN Appliance 上で稼働する HP SAN/iQ におけるアクセス権を取得される脆弱性 CWE-255
証明書・パスワード管理 		CVE-2012-4362 2012-08-22 16:50 2012-08-20 Show GitHub Exploit DB Packet Storm
240305 7.7 危険 ヒューレット・パッカード - HP Virtual SAN Appliance 上で稼働する HP SAN/iQ における任意のコマンドを実行される脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2012-4361 2012-08-22 16:48 2012-08-20 Show GitHub Exploit DB Packet Storm
240306 7.8 危険 ヒューレット・パッカード - HP Serviceguard におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2012-3252 2012-08-22 16:47 2012-08-15 Show GitHub Exploit DB Packet Storm
240307 7.7 危険 ヒューレット・パッカード - HP Virtual SAN Appliance 上で稼働する HP SAN/iQ における任意のコマンドを実行される脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2012-2986 2012-08-22 16:46 2012-08-20 Show GitHub Exploit DB Packet Storm
240308 2.1 注意 Tecnick.com - TCExam の admin/code/tce_edit_answer.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-4238 2012-08-22 16:44 2012-08-6 Show GitHub Exploit DB Packet Storm
240309 6.8 警告 Tecnick.com - TCExam における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2012-4237 2012-08-22 16:43 2012-08-6 Show GitHub Exploit DB Packet Storm
240310 4.3 警告 Jease - Jease におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-4052 2012-08-22 16:42 2012-08-20 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 16, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
285971 - microsoft internet_explorer Microsoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corru… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2014-0297 2024-11-21 11:01 2014-03-12 Show GitHub Exploit DB Packet Storm
285972 - apple
todd_miller 		mac_os_x
sudo 		Sudo 1.6.9 before 1.8.5, when env_reset is disabled, does not properly check environment variables for the env_delete restriction, which allows local users with sudo permissions to bypass intended co… CWE-20
 Improper Input Validation  		CVE-2014-0106 2024-11-21 11:01 2014-03-12 Show GitHub Exploit DB Packet Storm
285973 - freedesktop
canonical 		udisks
ubuntu_linux 		Stack-based buffer overflow in udisks before 1.0.5 and 2.x before 2.1.3 allows local users to cause a denial of service (crash) and possibly execute arbitrary code via a long mount point. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2014-0004 2024-11-21 11:01 2014-03-12 Show GitHub Exploit DB Packet Storm
285974 - linux linux_kernel The keyring_detect_cycle_iterator function in security/keys/keyring.c in the Linux kernel through 3.13.6 does not properly determine whether keyrings are identical, which allows local users to cause … CWE-310
Cryptographic Issues 		CVE-2014-0102 2024-11-21 11:01 2014-03-11 Show GitHub Exploit DB Packet Storm
285975 - linux linux_kernel Race condition in the inet_frag_intern function in net/ipv4/inet_fragment.c in the Linux kernel through 3.13.6 allows remote attackers to cause a denial of service (use-after-free error) or possibly … CWE-362
CWE-416
Race Condition
 Use After Free 		CVE-2014-0100 2024-11-21 11:01 2014-03-11 Show GitHub Exploit DB Packet Storm
285976 - linux
redhat
canonical
f5 		linux_kernel
enterprise_linux_server_aus
enterprise_linux_server_tus
enterprise_linux_desktop
enterprise_linux_server
enterprise_linux_workstation
enterprise_linux_eus
ubuntu_lin… 		The sctp_sf_do_5_1D_ce function in net/sctp/sm_statefuns.c in the Linux kernel through 3.13.6 does not validate certain auth_enable and auth_capable fields before making an sctp_sf_authenticate call,… CWE-476
 NULL Pointer Dereference 		CVE-2014-0101 2024-11-21 11:01 2014-03-11 Show GitHub Exploit DB Packet Storm
285977 - linux linux_kernel Buffer overflow in the complete_emulated_mmio function in arch/x86/kvm/x86.c in the Linux kernel before 3.13.6 allows guest OS users to execute arbitrary code on the host OS by leveraging a loop that… CWE-120
Classic Buffer Overflow 		CVE-2014-0049 2024-11-21 11:01 2014-03-11 Show GitHub Exploit DB Packet Storm
285978 - apache struts The ParametersInterceptor in Apache Struts before 2.3.16.2 allows remote attackers to "manipulate" the ClassLoader via the class parameter, which is passed to the getClass method. NVD-CWE-noinfo
CVE-2014-0094 2024-11-21 11:01 2014-03-11 Show GitHub Exploit DB Packet Storm
285979 - gnu gnutls lib/x509/verify.c in GnuTLS before 3.1.22 and 3.2.x before 3.2.12 does not properly handle unspecified errors when verifying X.509 certificates from SSL servers, which allows man-in-the-middle attack… CWE-310
Cryptographic Issues 		CVE-2014-0092 2024-11-21 11:01 2014-03-7 Show GitHub Exploit DB Packet Storm
285980 - serena dimensions_cm Cross-site request forgery (CSRF) vulnerability in the web client in Serena Dimensions CM 12.2 build 7.199.0 allows remote attackers to hijack the authentication of administrators for requests that u… CWE-352
 Origin Validation Error 		CVE-2014-0336 2024-11-21 11:01 2014-03-6 Show GitHub Exploit DB Packet Storm