Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 30, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
251041 6.4 警告 infradead - OpenConnect における任意の AnyConnect SSL VPN サーバを偽装される脆弱性 CWE-20
不適切な入力確認
CVE-2010-3901 2012-03-27 18:42 2010-10-14 Show GitHub Exploit DB Packet Storm
251042 5.8 警告 christian dywan - Midori における任意の HTTPS Web サイトになりすまされる脆弱性 CWE-Other
その他
CVE-2010-3900 2012-03-27 18:42 2010-10-14 Show GitHub Exploit DB Packet Storm
251043 5 警告 IBM - IBM OmniFind におけるサービス運用妨害 (DoS) 状態となる脆弱性 CWE-399
リソース管理の問題
CVE-2010-3899 2012-03-27 18:42 2010-11-12 Show GitHub Exploit DB Packet Storm
251044 5 警告 IBM - IBM OmniFind における認証を回避する脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2010-3898 2012-03-27 18:42 2010-11-12 Show GitHub Exploit DB Packet Storm
251045 5 警告 IBM - IBM OmniFind の ESSearchApplication/palette.do における重要な情報を取得される脆弱性 CWE-255
証明書・パスワード管理
CVE-2010-3897 2012-03-27 18:42 2010-11-12 Show GitHub Exploit DB Packet Storm
251046 7.5 危険 IBM - IBM OmniFind の ESSearchApplication ディレクトリツリーにおけるサーバ設定を変更される脆弱性 CWE-287
不適切な認証
CVE-2010-3896 2012-03-27 18:42 2010-11-12 Show GitHub Exploit DB Packet Storm
251047 7.2 危険 IBM - IBM OmniFind の esRunCommand における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2010-3895 2012-03-27 18:42 2010-11-12 Show GitHub Exploit DB Packet Storm
251048 9.3 危険 IBM - IBM OmniFind の Java_com_ibm_es_oss_CryptionNative_ESEncrypt 関数におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2010-3894 2012-03-27 18:42 2010-11-12 Show GitHub Exploit DB Packet Storm
251049 7.5 危険 IBM - IBM OmniFind の管理インタフェースにおける任意の管理者操作を実行される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2010-3893 2012-03-27 18:42 2010-11-12 Show GitHub Exploit DB Packet Storm
251050 6.8 警告 IBM - IBM OmniFind のログインフォームにおけるセッションをハイジャックされる脆弱性 CWE-Other
その他
CVE-2010-3892 2012-03-27 18:42 2010-11-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 30, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
296891 - openx openx Cross-site scripting (XSS) vulnerability in admin/plugin-index.php in OpenX 2.8.10 before revision 81823 allows remote attackers to inject arbitrary web script or HTML via the parent parameter in an … CWE-79
Cross-site Scripting
CVE-2012-4989 2024-11-21 10:43 2012-10-23 Show GitHub Exploit DB Packet Storm
296892 - intelliants subrion_cms Multiple cross-site request forgery (CSRF) vulnerabilities in Subrion CMS before 2.2.3 allow remote attackers to hijack the authentication of administrators for requests that add, delete, or modify s… CWE-352
 Origin Validation Error
CVE-2012-4773 2024-11-21 10:43 2012-10-23 Show GitHub Exploit DB Packet Storm
296893 - intelliants subrion_cms SQL injection vulnerability in register/ in Subrion CMS before 2.2.3 allows remote attackers to execute arbitrary SQL commands via the plan_id parameter. CWE-89
SQL Injection
CVE-2012-4772 2024-11-21 10:43 2012-10-23 Show GitHub Exploit DB Packet Storm
296894 - intelliants subrion_cms Multiple cross-site scripting (XSS) vulnerabilities in Subrion CMS before 2.2.3 allow remote attackers to inject arbitrary web script or HTML via the id parameter to (1) admin/accounts/, (2) admin/ma… CWE-79
Cross-site Scripting
CVE-2012-4771 2024-11-21 10:43 2012-10-23 Show GitHub Exploit DB Packet Storm
296895 - openfabrics ibacm ibacm 1.0.7 creates files with world-writable permissions, which allows local users to overwrite the ib_acm daemon log or ibacm.port file. CWE-264
Permissions, Privileges, and Access Controls
CVE-2012-4518 2024-11-21 10:43 2012-10-23 Show GitHub Exploit DB Packet Storm
296896 - openfabrics ibacm ibacm before 1.0.6 does not properly manage reference counts for multicast connections, which allows remote attackers to cause a denial of service (ibacm service crash) via a crafted join response. CWE-399
 Resource Management Errors
CVE-2012-4517 2024-11-21 10:43 2012-10-23 Show GitHub Exploit DB Packet Storm
296897 - openfabrics librdmacm librdmacm 1.0.16, when ibacm.port is not specified, connects to port 6125, which allows remote attackers to specify the address resolution information for the application via a malicious ib_acm servi… NVD-CWE-Other
CVE-2012-4516 2024-11-21 10:43 2012-10-23 Show GitHub Exploit DB Packet Storm
296898 - gnome libsocialweb services/flickr/flickr.c in libsocialweb before 0.25.21 automatically connects to Flickr when no Flickr account is set, which might allow remote attackers to obtain sensitive information via a man-in… CWE-200
Information Exposure
CVE-2012-4511 2024-11-21 10:43 2012-10-23 Show GitHub Exploit DB Packet Storm
296899 - claws-mail claws-mail The strchr function in procmime.c in Claws Mail (aka claws-mail) 3.8.1 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted email. NVD-CWE-Other
CVE-2012-4507 2024-11-21 10:43 2012-10-23 Show GitHub Exploit DB Packet Storm
296900 - sitaram_chamarty
gitolite
gitolite Directory traversal vulnerability in gitolite 3.x before 3.1, when wild card repositories and a pattern matching "../" are enabled, allows remote authenticated users to create arbitrary repositories … CWE-22
Path Traversal
CVE-2012-4506 2024-11-21 10:43 2012-10-23 Show GitHub Exploit DB Packet Storm