Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 1, 2026, noon

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
241701 5 警告 XChat - XChat におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2011-5129 2012-09-3 13:42 2012-08-30 Show GitHub Exploit DB Packet Storm
241702 4.3 警告 The PHP Group - PHP の main/SAPI.c における HTTP レスポンス分割の保護メカニズムを回避される脆弱性 CWE-20
不適切な入力確認 		CVE-2011-1398 2012-09-3 13:41 2012-04-26 Show GitHub Exploit DB Packet Storm
241703 10 危険 ヒューレット・パッカード - HP iNode Management Center における任意のコードを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2012-3254 2012-08-31 16:41 2012-08-29 Show GitHub Exploit DB Packet Storm
241704 10 危険 ヒューレット・パッカード - HP Intelligent Management Center における任意のコードを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2012-3253 2012-08-31 16:40 2012-08-29 Show GitHub Exploit DB Packet Storm
241705 3.3 注意 ソフォス - Sophos SafeGuard Enterprise の Device Encryption Client におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-4736 2012-08-31 16:23 2012-08-29 Show GitHub Exploit DB Packet Storm
241706 5 警告 IBM - IBM InfoSphere Guardium のデータソース定義エディタにおける重要な情報を取得される脆弱性 CWE-310
暗号の問題 		CVE-2012-3312 2012-08-31 16:22 2012-08-29 Show GitHub Exploit DB Packet Storm
241707 6.8 警告 IBM - IBM InfoSphere Guardium のアカウント作成パネルにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2012-3309 2012-08-31 16:21 2012-08-29 Show GitHub Exploit DB Packet Storm
241708 4.3 警告 IBM - IBM WebSphere MQ におけるセキュリティ構成の設定ステップを回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-3295 2012-08-31 16:19 2012-05-17 Show GitHub Exploit DB Packet Storm
241709 6.8 警告 DELL EMC (旧 EMC Corporation) - EMC CTA および CTA/VE における GUI 管理者のアクセス権を取得される脆弱性 CWE-287
不適切な認証 		CVE-2012-2285 2012-08-31 16:14 2012-08-29 Show GitHub Exploit DB Packet Storm
241710 4.6 警告 Ted Felix - acpid の event.c における書き込み操作を実行される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-4578 2012-08-31 16:10 2012-08-29 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 1, 2026, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
286491 - owncloud owncloud ownCloud Server before 6.0.3 does not properly check permissions, which allows remote authenticated users to (1) access the contacts of other users via the address book or (2) rename files via unspec… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2014-3834 2024-11-21 11:08 2014-06-4 Show GitHub Exploit DB Packet Storm
286492 - owncloud owncloud Multiple cross-site scripting (XSS) vulnerabilities in the (1) Gallery and (2) core components in ownCloud Server before 5.016 and 6.0.x before 6.0.3 allow remote attackers to inject arbitrary web sc… CWE-79
Cross-site Scripting 		CVE-2014-3833 2024-11-21 11:08 2014-06-4 Show GitHub Exploit DB Packet Storm
286493 - owncloud owncloud Cross-site scripting (XSS) vulnerability in the Documents component in ownCloud Server 6.0.x before 6.0.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, possi… CWE-79
Cross-site Scripting 		CVE-2014-3832 2024-11-21 11:08 2014-06-4 Show GitHub Exploit DB Packet Storm
286494 - lucidcrew pixie Multiple cross-site scripting (XSS) vulnerabilities in the contact module (admin/modules/contact.php) in Pixie CMS 1.04 allow remote attackers to inject arbitrary web script or HTML via the (1) uemai… CWE-79
Cross-site Scripting 		CVE-2014-3786 2024-11-21 11:08 2014-06-4 Show GitHub Exploit DB Packet Storm
286495 - gnu gnutls Buffer overflow in the read_server_hello function in lib/gnutls_handshake.c in GnuTLS before 3.1.25, 3.2.x before 3.2.15, and 3.3.x before 3.3.4 allows remote servers to cause a denial of service (me… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2014-3466 2024-11-21 11:08 2014-06-3 Show GitHub Exploit DB Packet Storm
286496 - vmware vcenter_server_appliance Ruby vSphere Console (RVC) in VMware vCenter Server Appliance allows remote authenticated users to execute arbitrary commands as root by escaping from a chroot jail. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2014-3790 2024-11-21 11:08 2014-06-1 Show GitHub Exploit DB Packet Storm
286497 - vmware player
esxi
fusion
workstation 		VMware Tools in VMware Workstation 10.x before 10.0.2, VMware Player 6.x before 6.0.2, VMware Fusion 6.x before 6.0.3, and VMware ESXi 5.0 through 5.5, when a Windows 8.1 guest OS is used, allows gue… NVD-CWE-Other
CVE-2014-3793 2024-11-21 11:08 2014-05-31 Show GitHub Exploit DB Packet Storm
286498 - citrix vdi-in-a-box Unspecified vulnerability in Citrix VDI-In-A-Box 5.3.x before 5.3.8 and 5.4.x before 5.4.4 allows remote attackers to bypass authentication via unspecified vectors, related to a Java servlet. CWE-287
Improper Authentication 		CVE-2014-3780 2024-11-21 11:08 2014-05-30 Show GitHub Exploit DB Packet Storm
286499 - jasig uportal uPortal before 4.0.13.1 does not properly check the CONFIG permission, which allows remote authenticated users to configure portlets by leveraging the SUBSCRIBE permission for a portlet. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2014-3417 2024-11-21 11:08 2014-05-29 Show GitHub Exploit DB Packet Storm
286500 - jasig uportal uPortal before 4.0.13.1 does not properly check the MANAGE permissions, which allows remote authenticated users to manage arbitrary portlets by leveraging the SUBSCRIBE permission for the portlet-adm… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2014-3416 2024-11-21 11:08 2014-05-29 Show GitHub Exploit DB Packet Storm