Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 9, 2026, 2:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
250351 10 危険 Mozilla Foundation - 複数の Mozilla 製品のブラウザエンジンにおけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2011-2997 2012-04-16 16:00 2011-09-27 Show GitHub Exploit DB Packet Storm
250352 10 危険 Mozilla Foundation - 複数の Mozilla 製品におけるサービス運用妨害 (メモリ破損およびアプリケーションクラッシュ) の脆弱性 CWE-noinfo
情報不足 		CVE-2011-2995 2012-04-16 15:58 2011-09-27 Show GitHub Exploit DB Packet Storm
250353 3.5 注意 Mozilla Foundation - 複数の Mozilla 製品におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-2372 2012-04-16 15:57 2011-09-27 Show GitHub Exploit DB Packet Storm
250354 9.3 危険 アップル - Apple iOS の FreeType における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2011-3439 2012-04-16 15:55 2011-11-11 Show GitHub Exploit DB Packet Storm
250355 4.3 警告 Mozilla Foundation - 複数の Mozilla 製品における同一生成元ポリシーを回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-2999 2012-04-16 15:52 2011-09-27 Show GitHub Exploit DB Packet Storm
250356 10 危険 Mozilla Foundation - Mozilla Firefox におけるサービス運用妨害 (アプリケーションクラッシュ) の脆弱性 CWE-189
数値処理の問題 		CVE-2011-2998 2012-04-16 15:50 2011-09-27 Show GitHub Exploit DB Packet Storm
250357 4.3 警告 アップル - Apple iOS の CoreGraphics の FreeType における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2011-3256 2012-04-16 15:48 2011-10-14 Show GitHub Exploit DB Packet Storm
250358 9.3 危険 マイクロソフト - 複数の Microsoft 製品の Office Works ファイル コンバータにおけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2012-0177 2012-04-16 13:45 2012-04-10 Show GitHub Exploit DB Packet Storm
250359 9.3 危険 マイクロソフト - Microsoft Internet Explorer 6 から 8 における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2012-0172 2012-04-16 13:44 2012-04-10 Show GitHub Exploit DB Packet Storm
250360 9.3 危険 マイクロソフト - Microsoft Internet Explorer における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2012-0171 2012-04-16 13:43 2012-04-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 9, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
290991 6.1 MEDIUM
Network 		open-xchange open-xchange_appsuite Cross-site scripting (XSS) vulnerability in the backend in Open-Xchange (OX) AppSuite 7.2.x before 7.2.2-rev27 and 7.4.x before 7.4.0-rev20 allows remote attackers to inject arbitrary web script or H… CWE-79
Cross-site Scripting 		CVE-2013-7486 2024-11-21 11:01 2020-01-3 Show GitHub Exploit DB Packet Storm
290992 6.1 MEDIUM
Network 		open-xchange open-xchange_appsuite Cross-site scripting (XSS) vulnerability in the backend in Open-Xchange (OX) AppSuite 7.2.x before 7.2.2-rev26 and 7.4.x before 7.4.0-rev16 allows remote attackers to inject arbitrary web script or H… CWE-79
Cross-site Scripting 		CVE-2013-7485 2024-11-21 11:01 2020-01-3 Show GitHub Exploit DB Packet Storm
290993 5.9 MEDIUM
Network 		ovirt-engine-sdk-python_project ovirt-engine-sdk-python ovirt-engine-sdk-python before 3.4.0.7 and 3.5.0.4 does not verify that the hostname of the remote endpoint matches the Common Name (CN) or subjectAltName as specified by its x.509 certificate in a T… CWE-295
Improper Certificate Validation  		CVE-2014-0161 2024-11-21 11:01 2020-01-3 Show GitHub Exploit DB Packet Storm
290994 5.9 MEDIUM
Network 		clusterlabs fence-agents In fence-agents before 4.0.17 does not verify remote SSL certificates in the fence_cisco_ucs.py script which can potentially allow for man-in-the-middle attackers to spoof SSL servers via arbitrary S… CWE-295
Improper Certificate Validation  		CVE-2014-0104 2024-11-21 11:01 2020-01-3 Show GitHub Exploit DB Packet Storm
290995 9.8 CRITICAL
Network 		docker
apache 		docker
geode 		An issue was found in Docker before 1.6.0. Some programs and scripts in Docker are downloaded via HTTP and then executed or used in unsafe ways. CWE-20
 Improper Input Validation  		CVE-2014-0048 2024-11-21 11:01 2020-01-3 Show GitHub Exploit DB Packet Storm
290996 5.5 MEDIUM
Local 		theforeman
redhat 		hammer_cli
satellite 		rubygem-hammer_cli_foreman: File /etc/hammer/cli.modules.d/foreman.yml world readable CWE-522
 Insufficiently Protected Credentials 		CVE-2014-0241 2024-11-21 11:01 2019-12-13 Show GitHub Exploit DB Packet Storm
290997 7.5 HIGH
Network 		apache qpid-cpp qpid-cpp: ACL policies only loaded if the acl-file option specified enabling DoS by consuming all available file descriptors CWE-400
 Uncontrolled Resource Consumption 		CVE-2014-0212 2024-11-21 11:01 2019-12-13 Show GitHub Exploit DB Packet Storm
290998 8.8 HIGH
Network 		redhat cloudforms
cloudforms_management_engine 		CFME: CSRF protection vulnerability via permissive check of the referrer header CWE-352
 Origin Validation Error 		CVE-2014-0197 2024-11-21 11:01 2019-12-13 Show GitHub Exploit DB Packet Storm
290999 9.8 CRITICAL
Network 		puppet
redhat
debian 		marionette_collective
openshift
debian_linux 		mcollective has a default password set at install CWE-798
 Use of Hard-coded Credentials 		CVE-2014-0175 2024-11-21 11:01 2019-12-13 Show GitHub Exploit DB Packet Storm
291000 8.8 HIGH
Network 		redhat openshift Openshift has shell command injection flaws due to unsanitized data being passed into shell commands. CWE-78
OS Command  		CVE-2014-0163 2024-11-21 11:01 2019-12-12 Show GitHub Exploit DB Packet Storm