Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 18, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
241231 6.9 警告 Puppet - Puppet および Puppet Enterprise の change_user メソッドにおける権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-1053 2012-07-25 11:00 2012-05-29 Show GitHub Exploit DB Packet Storm
241232 7.5 危険 The PHP Group - PHP の php_variables.c 内の php_register_variable_ex 関数における任意のコードを実行される脆弱性 CWE-399
リソース管理の問題 		CVE-2012-0830 2012-07-24 18:02 2012-02-1 Show GitHub Exploit DB Packet Storm
241233 7.5 危険 PNG Development Group - libpng の pngerror.c におけるサービス運用妨害 (アプリケーションクラッシュ) の脆弱性 CWE-189
数値処理の問題 		CVE-2011-3464 2012-07-24 16:44 2012-07-22 Show GitHub Exploit DB Packet Storm
241234 2.1 注意 kernel.org - Linux-PAM の modules/pam_env/pam_env.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2011-3149 2012-07-24 16:43 2012-07-22 Show GitHub Exploit DB Packet Storm
241235 4.6 警告 kernel.org - Linux-PAM の modules/pam_env/pam_env.c におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2011-3148 2012-07-24 16:39 2012-07-22 Show GitHub Exploit DB Packet Storm
241236 7.5 危険 H. Peter Anvin - tftp-hpa におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2011-2199 2012-07-24 16:38 2011-06-10 Show GitHub Exploit DB Packet Storm
241237 5 警告 ModSecurity - ModSecurity におけるフィルタリングルールを回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2009-5031 2012-07-24 16:21 2012-07-22 Show GitHub Exploit DB Packet Storm
241238 5.5 警告 Moodle - Moodle の mod/data/preset.php における任意のデータベースアクティビティのプリセットが上書きされる脆弱性 CWE-DesignError
CVE-2012-2366 2012-07-24 16:16 2012-07-21 Show GitHub Exploit DB Packet Storm
241239 3.5 注意 Moodle - Moodle の lib/filelib.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-2364 2012-07-24 16:14 2012-07-21 Show GitHub Exploit DB Packet Storm
241240 6.5 警告 Moodle - Moodle のカレンダーの実装における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2012-2363 2012-07-24 16:10 2012-07-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 19, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
286291 6.5 MEDIUM
Network 		canonical
samsung 		ubuntu_linux
x14j_firmware 		Integer overflow in the gdk_cairo_set_source_pixbuf function in gdk/gdkcairo.c in GTK+ before 3.9.8, as used in eom, gnome-photos, eog, gambas3, thunar, pinpoint, and possibly other applications, all… NVD-CWE-Other
CVE-2013-7447 2024-11-21 11:01 2016-02-18 Show GitHub Exploit DB Packet Storm
286292 5.3 MEDIUM
Local 		linux linux_kernel Use-after-free vulnerability in net/unix/af_unix.c in the Linux kernel before 4.3.3 allows local users to bypass intended AF_UNIX socket permissions or cause a denial of service (panic) via crafted e… NVD-CWE-Other
CVE-2013-7446 2024-11-21 11:01 2015-12-28 Show GitHub Exploit DB Packet Storm
286293 - linux linux_kernel The Direct Rendering Manager (DRM) subsystem in the Linux kernel through 4.x mishandles requests for Graphics Execution Manager (GEM) objects, which allows context-dependent attackers to cause a deni… CWE-399
 Resource Management Errors 		CVE-2013-7445 2024-11-21 11:01 2015-10-16 Show GitHub Exploit DB Packet Storm
286294 - mediawiki mediawiki The Special:Contributions page in MediaWiki before 1.22.0 allows remote attackers to determine if an IP is autoblocked via the "Change block" text. CWE-200
Information Exposure 		CVE-2013-7444 2024-11-21 11:01 2015-09-1 Show GitHub Exploit DB Packet Storm
286295 - canonical
sqlite 		ubuntu_linux
sqlite 		Buffer overflow in the skip-scan optimization in SQLite 3.8.2 allows remote attackers to cause a denial of service (crash) via crafted SQL statements. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2013-7443 2024-11-21 11:01 2015-08-12 Show GitHub Exploit DB Packet Storm
286296 - gehealthcare centricity_pacs_workstation GE Healthcare Centricity PACS Workstation 4.0 and 4.0.1 has a password of (1) CANal1 for the Administrator user and (2) iis for the IIS user, which has unspecified impact and attack vectors related t… CWE-255
Credentials Management 		CVE-2013-7442 2024-11-21 11:01 2015-08-4 Show GitHub Exploit DB Packet Storm
286297 - apache
oracle 		tomcat
virtualization 		Apache Tomcat 6.x before 6.0.44, 7.x before 7.0.55, and 8.x before 8.0.9 does not properly handle cases where an HTTP response occurs before finishing the reading of an entire request body, which all… CWE-399
 Resource Management Errors 		CVE-2014-0230 2024-11-21 11:01 2015-06-8 Show GitHub Exploit DB Packet Storm
286298 - wouter_verhelst nbd The modern style negotiation in Network Block Device (nbd-server) 2.9.22 through 3.3 allows remote attackers to cause a denial of service (root process termination) by (1) closing the connection duri… CWE-399
 Resource Management Errors 		CVE-2013-7441 2024-11-21 11:01 2015-05-30 Show GitHub Exploit DB Packet Storm
286299 - x.org
canonical
debian 		libx11
ubuntu_linux
debian_linux
x11 		Multiple off-by-one errors in the (1) MakeBigReq and (2) SetReqLen macros in include/X11/Xlibint.h in X11R6.x and libX11 before 1.6.0 allow remote attackers to have unspecified impact via a crafted r… CWE-189
Numeric Errors 		CVE-2013-7439 2024-11-21 11:01 2015-04-16 Show GitHub Exploit DB Packet Storm
286300 - redhat jboss_enterprise_brms_platform
jboss_enterprise_application_platform 		PicketBox and JBossSX, as used in Red Hat JBoss Enterprise Application Platform (JBEAP) 6.2.2 and JBoss BRMS before 6.0.3 roll up patch 2, allows remote authenticated users to read and modify the app… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2014-0005 2024-11-21 11:01 2015-02-21 Show GitHub Exploit DB Packet Storm