Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 30, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
241801 4.3 警告 Roundcube.net - Roundcube Webmail の program/lib/washtml.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-3508 2012-08-28 15:56 2012-08-14 Show GitHub Exploit DB Packet Storm
241802 2.6 注意 Roundcube.net - RoundCube Webmail の program/steps/mail/func.inc におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-3507 2012-08-28 15:36 2012-06-7 Show GitHub Exploit DB Packet Storm
241803 6.5 警告 Katello Project - Katello における任意のユーザーとして CloudForms System Engine の Web インターフェイスに認証される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-3503 2012-08-28 15:35 2012-08-25 Show GitHub Exploit DB Packet Storm
241804 5 警告 Gilles Darold - SquidClamav の squidclamav.c におけるサービス運用妨害 (デーモンクラッシュ) の脆弱性 CWE-119
バッファエラー 		CVE-2012-3501 2012-08-28 15:34 2012-08-25 Show GitHub Exploit DB Packet Storm
241805 6.8 警告 The GIMP Team - GIMP の Adobe Photoshop PSD プラグインにおける整数オーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2012-3402 2012-08-28 13:49 2012-08-25 Show GitHub Exploit DB Packet Storm
241806 4.3 警告 OpenTTD - OpenTTD におけるサービス運用妨害 (ゲーム休止) の脆弱性 CWE-399
リソース管理の問題 		CVE-2012-0048 2012-08-28 13:47 2012-01-6 Show GitHub Exploit DB Packet Storm
241807 4.3 警告 アドビシステムズ - Adobe Flash Player におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-0767 2012-08-27 16:55 2012-02-15 Show GitHub Exploit DB Packet Storm
241808 10 危険 アドビシステムズ - Adobe Flash Player におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-0756 2012-08-27 16:54 2012-02-15 Show GitHub Exploit DB Packet Storm
241809 10 危険 アドビシステムズ - Adobe Flash Player におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-0755 2012-08-27 16:53 2012-02-15 Show GitHub Exploit DB Packet Storm
241810 10 危険 アドビシステムズ - Adobe Flash Player における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2012-0754 2012-08-27 16:52 2012-02-15 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 31, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
285951 - oracle fusion_middleware Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.0.2.0, 10.3.6.0, 12.1.1.0, and 12.1.2.0 allows remote attackers to affect availability via vectors rel… NVD-CWE-noinfo
CVE-2014-4202 2024-11-21 11:09 2014-07-17 Show GitHub Exploit DB Packet Storm
285952 - oracle fusion_middleware Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6.0, 12.1.1.0, and 12.1.2.0 allows remote attackers to affect availability via vectors related to WL… NVD-CWE-noinfo
CVE-2014-4201 2024-11-21 11:09 2014-07-17 Show GitHub Exploit DB Packet Storm
285953 - zte zxv10_w300_firmware
zxv10_w300 		ZTE ZXV10 W300 router with firmware W300V1.0.0a_ZRD_LK stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain the PPPoE/PPPoA passwo… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2014-4154 2024-11-21 11:09 2014-07-16 Show GitHub Exploit DB Packet Storm
285954 - zte zxv10_w300_firmware
zxv10_w300 		The ZTE ZXV10 W300 router with firmware W300V1.0.0a_ZRD_LK has a default password of admin for the admin account, which makes it easier for remote attackers to obtain access via unspecified vectors. CWE-255
Credentials Management 		CVE-2014-4018 2024-11-21 11:09 2014-07-16 Show GitHub Exploit DB Packet Storm
285955 - arubanetworks clearpass The Policy Manager in Aruba Networks ClearPass 5.x, 6.0.x, 6.1.x through 6.1.4.61696, 6.2.x through 6.2.6.62196, and 6.3.x before 6.3.4 allows remote authenticated users to obtain database credential… CWE-200
Information Exposure 		CVE-2014-4031 2024-11-21 11:09 2014-07-15 Show GitHub Exploit DB Packet Storm
285956 - freebsd freebsd FreeBSD 8.4 before p14, 9.1 before p17, 9.2 before p10, and 10.0 before p7 does not properly initialize certain data structures, which allows local users to obtain sensitive information from kernel m… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2014-3953 2024-11-21 11:09 2014-07-15 Show GitHub Exploit DB Packet Storm
285957 - freebsd freebsd FreeBSD 8.4 before p14, 9.1 before p17, 9.2 before p10, and 10.0 before p7 does not properly initialize the buffer between the header and data of a control message, which allows local users to obtain… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2014-3952 2024-11-21 11:09 2014-07-15 Show GitHub Exploit DB Packet Storm
285958 - arubanetworks clearpass SQL injection vulnerability in the Policy Manager in Aruba Networks ClearPass 5.x, 6.0.x, 6.1.x through 6.1.4.61696, 6.2.x through 6.2.6.62196, and 6.3.x before 6.3.4 allows remote authenticated user… CWE-89
SQL Injection 		CVE-2014-4013 2024-11-21 11:09 2014-07-14 Show GitHub Exploit DB Packet Storm
285959 - openstack
canonical 		neutron
ubuntu_linux 		The L3-agent in OpenStack Neutron before 2013.2.4, 2014.x before 2014.1.2, and Juno before Juno-2 allows remote authenticated users to cause a denial of service (IPv4 address attachment outage) by at… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2014-4167 2024-11-21 11:09 2014-07-11 Show GitHub Exploit DB Packet Storm
285960 - dolibarr dolibarr_erp\/crm Multiple SQL injection vulnerabilities in Dolibarr ERP/CRM 3.5.3 allow remote authenticated users to execute arbitrary SQL commands via the (1) entity parameter in an update action to user/fiche.php … CWE-89
SQL Injection 		CVE-2014-3992 2024-11-21 11:09 2014-07-11 Show GitHub Exploit DB Packet Storm