Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 14, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
250651 7.2 危険 マイクロソフト - Microsoft Windows のカーネルモードドライバ内の win32k.sys における権限昇格の脆弱性 CWE-20
不適切な入力確認 		CVE-2012-1866 2012-06-15 16:39 2012-06-12 Show GitHub Exploit DB Packet Storm
250652 4.3 警告 ヒューレット・パッカード - HP Web Jetadmin におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-2011 2012-06-15 16:36 2012-05-31 Show GitHub Exploit DB Packet Storm
250653 7.2 危険 マイクロソフト - Microsoft Windows のカーネルモードドライバ内の win32k.sys における整数オーバーフローの脆弱性 CWE-399
リソース管理の問題 		CVE-2012-1867 2012-06-15 16:36 2012-06-12 Show GitHub Exploit DB Packet Storm
250654 4.3 警告 シスコシステムズ - 複数の Cisco 製品の SIP の実装におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-2545 2012-06-15 16:35 2012-06-12 Show GitHub Exploit DB Packet Storm
250655 6.9 警告 マイクロソフト - Microsoft Windows の win32k.sys のスレッド生成の実装における権限昇格の脆弱性 CWE-362
競合状態 		CVE-2012-1868 2012-06-15 16:35 2012-06-12 Show GitHub Exploit DB Packet Storm
250656 4.3 警告 マイクロソフト - Microsoft Internet Explorer におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-1872 2012-06-15 16:33 2012-06-12 Show GitHub Exploit DB Packet Storm
250657 4.3 警告 マイクロソフト - Microsoft Internet Explorer におけるプロセスメモリから重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2012-1873 2012-06-15 16:33 2012-06-12 Show GitHub Exploit DB Packet Storm
250658 6 警告 EFS Technology - AutoFORM PDM Archive におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-3347 2012-06-15 16:26 2012-06-13 Show GitHub Exploit DB Packet Storm
250659 9.3 危険 マイクロソフト - Microsoft Internet Explorer における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2012-1874 2012-06-15 16:26 2012-06-12 Show GitHub Exploit DB Packet Storm
250660 9.3 危険 マイクロソフト - Microsoft Internet Explorer 8 における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2012-1875 2012-06-15 16:25 2012-06-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 14, 2026, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
310031 - linux
opensuse
suse 		linux_kernel
opensuse
linux_enterprise_real_time_extension 		The ACPI subsystem in the Linux kernel before 2.6.36.2 uses 0222 permissions for the debugfs custom_method file, which allows local users to gain privileges by placing a custom ACPI method in the ACP… CWE-269
 Improper Privilege Management 		CVE-2010-4347 2024-11-21 10:20 2010-12-23 Show GitHub Exploit DB Packet Storm
310032 - linux linux_kernel The install_special_mapping function in mm/mmap.c in the Linux kernel before 2.6.37-rc6 does not make an expected security_file_mmap function call, which allows local users to bypass intended mmap_mi… CWE-476
 NULL Pointer Dereference 		CVE-2010-4346 2024-11-21 10:20 2010-12-23 Show GitHub Exploit DB Packet Storm
310033 - jovelstefan embedded-video Cross-site scripting (XSS) vulnerability in lembedded-video.php in the Embedded Video plugin 4.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the content parameter… CWE-79
Cross-site Scripting 		CVE-2010-4277 2024-11-21 10:20 2010-12-23 Show GitHub Exploit DB Packet Storm
310034 - hp discovery\&dependency_mapping_inventory Cross-site scripting (XSS) vulnerability in HP Discovery & Dependency Mapping Inventory (DDMI) 2.5x, 7.5x, and 7.6x allows remote attackers to inject arbitrary web script or HTML via unspecified vect… CWE-79
Cross-site Scripting 		CVE-2010-4114 2024-11-21 10:20 2010-12-23 Show GitHub Exploit DB Packet Storm
310035 - hp power_manager Stack-based buffer overflow in HP Power Manager (HPPM) before 4.3.2 allows remote attackers to execute arbitrary code via a long Login variable to the management web server. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2010-4113 2024-11-21 10:20 2010-12-23 Show GitHub Exploit DB Packet Storm
310036 - hp insight_management_agents HP Insight Management Agents before 8.6 allows remote attackers to obtain sensitive information via an unspecified request that triggers disclosure of the full path. CWE-200
Information Exposure 		CVE-2010-4112 2024-11-21 10:20 2010-12-23 Show GitHub Exploit DB Packet Storm
310037 - hp insight_diagnostics Cross-site scripting (XSS) vulnerability in HP Insight Diagnostics Online Edition before 8.5.1.3712 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. CWE-79
Cross-site Scripting 		CVE-2010-4111 2024-11-21 10:20 2010-12-23 Show GitHub Exploit DB Packet Storm
310038 - hp openvms Unspecified vulnerability in HP OpenVMS 8.3, 8.3-1H1, and 8.4 on the Itanium platform on Integrity servers allows local users to gain privileges or cause a denial of service via unknown vectors. NVD-CWE-noinfo
CVE-2010-4110 2024-11-21 10:20 2010-12-23 Show GitHub Exploit DB Packet Storm
310039 - pangramsoft pointter_php_micro-blogging_social_network Pointter PHP Micro-Blogging Social Network 1.8 allows remote attackers to bypass authentication and obtain administrative privileges via arbitrary values of the auser and apass cookies. CWE-287
Improper Authentication 		CVE-2010-4333 2024-11-21 10:20 2010-12-22 Show GitHub Exploit DB Packet Storm
310040 - pangramsoft pointter_php_content_management_system Pointter PHP Content Management System 1.0 allows remote attackers to bypass authentication and obtain administrative privileges via arbitrary values of the auser and apass cookies. CWE-287
Improper Authentication 		CVE-2010-4332 2024-11-21 10:20 2010-12-22 Show GitHub Exploit DB Packet Storm