Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 15, 2026, 4 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
240651 7.5 危険 Mozilla Foundation - 複数の Mozilla 製品のブラウザエンジンの nsWindow 実装におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2012-0463 2012-07-30 17:22 2012-03-13 Show GitHub Exploit DB Packet Storm
240652 5 警告 SAND STUDIO - AirDroid のログインの実装における多重ログイン防止機能を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-3888 2012-07-30 16:53 2012-07-26 Show GitHub Exploit DB Packet Storm
240653 5 警告 SAND STUDIO - AirDroid における重要な情報を取得される脆弱性 CWE-310
暗号の問題
CVE-2012-3887 2012-07-30 16:50 2012-07-26 Show GitHub Exploit DB Packet Storm
240654 5 警告 SAND STUDIO - AirDroid における平文データを取得される脆弱性 CWE-200
情報漏えい
CVE-2012-3886 2012-07-30 16:39 2012-07-26 Show GitHub Exploit DB Packet Storm
240655 7.5 危険 SAND STUDIO - AirDroid のデフォルト設定におけるアクセス権を取得される脆弱性 CWE-287
不適切な認証
CVE-2012-3885 2012-07-30 16:38 2012-07-26 Show GitHub Exploit DB Packet Storm
240656 5 警告 SAND STUDIO - AirDroid におけるアクセス権を取得される脆弱性 CWE-287
不適切な認証
CVE-2012-3884 2012-07-30 16:35 2012-07-26 Show GitHub Exploit DB Packet Storm
240657 5 警告 Igor Sysoev - nginx/Windows におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2011-4963 2012-07-30 16:24 2012-07-26 Show GitHub Exploit DB Packet Storm
240658 7.5 危険 シトリックス・システムズ - Citrix Provisioning Services の SoapServer サービスにおけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2012-4068 2012-07-30 16:22 2012-05-1 Show GitHub Exploit DB Packet Storm
240659 4.3 警告 Palo Alto Networks - 複数の Palo Alto Networks 製品 におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-4043 2012-07-30 16:20 2012-07-26 Show GitHub Exploit DB Packet Storm
240660 5 警告 アップル - Apple Xcode におけるキーチェーンエントリを読まれる脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-3698 2012-07-30 16:19 2012-07-26 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 15, 2026, 4:28 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
285791 - apache
apple
http_server
mac_os_x
The mod_proxy module in the Apache HTTP Server 2.4.x before 2.4.10, when a reverse proxy is enabled, allows remote attackers to cause a denial of service (child-process crash) via a crafted HTTP Conn… CWE-20
 Improper Input Validation 
CVE-2014-0117 2024-11-21 11:01 2014-07-20 Show GitHub Exploit DB Packet Storm
285792 - redhat enterprise_mrg Cumin (aka MRG Management Console), as used in Red Hat Enterprise MRG 2.5, does not include the HTTPOnly flag in a Set-Cookie header for the session cookie, which makes it easier for remote attackers… CWE-200
Information Exposure
CVE-2014-0174 2024-11-21 11:01 2014-07-11 Show GitHub Exploit DB Packet Storm
285793 - christos_zoulas
php
oracle
opensuse
debian
file
php
linux
opensuse
debian_linux
The cdf_read_short_sector function in cdf.c in file before 5.19, as used in the Fileinfo component in PHP before 5.4.30 and 5.5.x before 5.5.14, allows remote attackers to cause a denial of service (… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2014-0207 2024-11-21 11:01 2014-07-9 Show GitHub Exploit DB Packet Storm
285794 - redhat jboss_enterprise_web_platform
jboss_enterprise_application_platform
jboss_web_framework_kit
org.jboss.seam.web.AuthenticationFilter in Red Hat JBoss Web Framework Kit 2.5.0, JBoss Enterprise Application Platform (JBEAP) 5.2.0, and JBoss Enterprise Web Platform (JBEWP) 5.2.0 allows remote at… CWE-94
Code Injection
CVE-2014-0248 2024-11-21 11:01 2014-07-7 Show GitHub Exploit DB Packet Storm
285795 - redhat cloudforms_3.0_management_engine Red Hat CloudForms 3.0 Management Engine (CFME) before 5.2.4.2 logs the root password when deploying a VM, which allows local users to obtain sensitive information by reading the evm.log file. CWE-255
Credentials Management
CVE-2014-0184 2024-11-21 11:01 2014-07-7 Show GitHub Exploit DB Packet Storm
285796 - redhat cloudforms_3.0_management_engine The wait_for_task function in app/controllers/application_controller.rb in Red Hat CloudForms 3.0 Management Engine (CFME) before 5.2.4.2 allows remote attackers to cause a denial of service (infinit… CWE-399
 Resource Management Errors
CVE-2014-0180 2024-11-21 11:01 2014-07-7 Show GitHub Exploit DB Packet Storm
285797 - redhat cloudforms_3.0_management_engine Cross-site scripting (XSS) vulnerability in application/panel_control in CloudForms 3.0 Management Engine (CFME) before 5.2.4.2 allows remote attackers to inject arbitrary web script or HTML via unsp… CWE-79
Cross-site Scripting
CVE-2014-0176 2024-11-21 11:01 2014-07-7 Show GitHub Exploit DB Packet Storm
285798 - apache
redhat
cxf
jboss_enterprise_application_platform
The SymmetricBinding in Apache CXF before 2.6.13 and 2.7.x before 2.7.10, when EncryptBeforeSigning is enabled and the UsernameToken policy is set to an EncryptedSupportingToken, transmits the Userna… CWE-310
Cryptographic Issues
CVE-2014-0035 2024-11-21 11:01 2014-07-7 Show GitHub Exploit DB Packet Storm
285799 - apache
redhat
cxf
jboss_enterprise_application_platform
The SecurityTokenService (STS) in Apache CXF before 2.6.12 and 2.7.x before 2.7.9 does not properly validate SAML tokens when caching is enabled, which allows remote attackers to gain access via an i… CWE-20
 Improper Input Validation 
CVE-2014-0034 2024-11-21 11:01 2014-07-7 Show GitHub Exploit DB Packet Storm
285800 - fedoraproject
redhat
libreoffice
canonical
opensuse
fedora
enterprise_linux_desktop
enterprise_linux_workstation
enterprise_linux_server
libreoffice
ubuntu_linux
opensuse
LibreOffice 4.2.4 executes unspecified VBA macros automatically, which has unspecified impact and attack vectors, possibly related to doc/docmacromode.cxx. NVD-CWE-noinfo
CVE-2014-0247 2024-11-21 11:01 2014-07-4 Show GitHub Exploit DB Packet Storm