Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 27, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
241261 3.5 注意 Pidgin - Pidgin の libpurple におけるサービス運用妨害 (アプリケーションクラッシュ) の脆弱性 CWE-399
リソース管理の問題
CVE-2012-2214 2012-09-6 13:40 2012-05-7 Show GitHub Exploit DB Packet Storm
241262 7.5 危険 BuddyPress.org - WordPress 用 BuddyPress プラグインの wp-load.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2012-2109 2012-09-6 11:31 2012-09-4 Show GitHub Exploit DB Packet Storm
241263 5 警告 Coppermine Photo Gallery - Coppermine Photo Gallery における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2012-1614 2012-09-6 11:29 2012-09-4 Show GitHub Exploit DB Packet Storm
241264 3.5 注意 Coppermine Photo Gallery - Coppermine Photo Gallery の edit_one_pic.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-1613 2012-09-6 11:28 2012-09-4 Show GitHub Exploit DB Packet Storm
241265 5 警告 TYPO3 Association - TYPO3 におけるクロスサイトスクリプティング保護メカニズムを回避される脆弱性 CWE-20
不適切な入力確認
CVE-2012-1608 2012-09-6 11:16 2012-03-28 Show GitHub Exploit DB Packet Storm
241266 5 警告 TYPO3 Association - TYPO3 の Command Line Interface スクリプトにおけるデータベース名を取得される脆弱性 CWE-200
情報漏えい
CVE-2012-1607 2012-09-6 11:15 2012-03-28 Show GitHub Exploit DB Packet Storm
241267 3.5 注意 TYPO3 Association - TYPO3 の Backend コンポーネントにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-1606 2012-09-6 11:12 2012-03-28 Show GitHub Exploit DB Packet Storm
241268 5 警告 TYPO3 Association - TYPO3 の Extbase Framework における任意のオブジェクトのシリアル化を解除される脆弱性 CWE-DesignError
CVE-2012-1605 2012-09-6 11:10 2012-03-28 Show GitHub Exploit DB Packet Storm
241269 5 警告 Mozilla Foundation - Bugzilla におけるファイルを読まれる脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-4747 2012-09-6 10:59 2012-08-30 Show GitHub Exploit DB Packet Storm
241270 5 警告 Mozilla Foundation - Bugzilla の Auth/Verify/LDAP.pm における LDAP ディレクトリにデータを挿入される脆弱性 CWE-255
証明書・パスワード管理
CVE-2012-3981 2012-09-6 10:46 2012-08-30 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
285341 - cisco ios_xe
ios
The Ethernet Connectivity Fault Management (CFM) handling feature in Cisco IOS 12.2(33)SRE9a and earlier and IOS XE 3.13S and earlier allows remote attackers to cause a denial of service (device relo… CWE-399
 Resource Management Errors
CVE-2014-3409 2024-11-21 11:08 2014-10-25 Show GitHub Exploit DB Packet Storm
285342 - not_yet_commons_ssl_project not_yet_commons_ssl Certificates.java in Not Yet Commons SSL before 0.3.15 does not properly verify that the server hostname matches a domain name in the subject's Common Name (CN) field of the X.509 certificate, which … CWE-310
Cryptographic Issues
CVE-2014-3604 2024-11-21 11:08 2014-10-25 Show GitHub Exploit DB Packet Storm
285343 - merethis centreon
centreon_enterprise_server
displayServiceStatus.php in Centreon 2.5.1 and Centreon Enterprise Server 2.2 (fixed in Centreon web 2.5.3) allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) s… CWE-94
Code Injection
CVE-2014-3829 2024-11-21 11:08 2014-10-23 Show GitHub Exploit DB Packet Storm
285344 - merethis centreon
centreon_enterprise_server
Multiple SQL injection vulnerabilities in Centreon 2.5.1 and Centreon Enterprise Server 2.2 (fixed in Centreon web 2.5.3) allow remote attackers to execute arbitrary SQL commands via (1) the index_id… CWE-89
SQL Injection
CVE-2014-3828 2024-11-21 11:08 2014-10-23 Show GitHub Exploit DB Packet Storm
285345 - redhat shim Unspecified vulnerability in Shim might allow attackers to execute arbitrary code via a crafted MOK list, which triggers memory corruption. NVD-CWE-noinfo
CVE-2014-3677 2024-11-21 11:08 2014-10-22 Show GitHub Exploit DB Packet Storm
285346 - redhat shim Heap-based buffer overflow in Shim allows remote attackers to execute arbitrary code via a crafted IPv6 address, related to the "tftp:// DHCPv6 boot option." CWE-787
 Out-of-bounds Write
CVE-2014-3676 2024-11-21 11:08 2014-10-22 Show GitHub Exploit DB Packet Storm
285347 - redhat shim Shim allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted DHCPv6 packet. CWE-125
Out-of-bounds Read
CVE-2014-3675 2024-11-21 11:08 2014-10-22 Show GitHub Exploit DB Packet Storm
285348 - gnu
debian
canonical
gpgme
debian_linux
ubuntu_linux
Multiple heap-based buffer overflows in the status_handler function in (1) engine-gpgsm.c and (2) engine-uiserver.c in GPGME before 1.5.1 allow remote attackers to cause a denial of service (crash) a… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2014-3564 2024-11-21 11:08 2014-10-21 Show GitHub Exploit DB Packet Storm
285349 - tomatocart tomatocart Cross-site scripting (XSS) vulnerability in info.php in TomatoCart 1.1.8.6.1 allows remote attackers to inject arbitrary web script or HTML via the faqs_id parameter. CWE-79
Cross-site Scripting
CVE-2014-3830 2024-11-21 11:08 2014-10-21 Show GitHub Exploit DB Packet Storm
285350 - openssl openssl OpenSSL before 0.9.8zc, 1.0.0 before 1.0.0o, and 1.0.1 before 1.0.1j does not properly enforce the no-ssl3 build option, which allows remote attackers to bypass intended access restrictions via an SS… CWE-310
Cryptographic Issues
CVE-2014-3568 2024-11-21 11:08 2014-10-19 Show GitHub Exploit DB Packet Storm