Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 20, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
251381 6.8 警告 アップル - Apple Mac OS X の CoreUI における任意のコードを実行される脆弱性 CWE-399
リソース管理の問題 		CVE-2011-3450 2012-02-6 16:29 2012-02-2 Show GitHub Exploit DB Packet Storm
251382 6.8 警告 アップル - Apple Mac OS X の CoreText における任意のコードを実行される脆弱性 CWE-399
リソース管理の問題 		CVE-2011-3449 2012-02-6 16:28 2012-02-2 Show GitHub Exploit DB Packet Storm
251383 6.8 警告 アップル - Apple Mac OS X の CoreMedia におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2011-3448 2012-02-6 16:28 2012-02-2 Show GitHub Exploit DB Packet Storm
251384 4.3 警告 アップル - Apple Mac OS X の CFNetwork における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2011-3447 2012-02-6 16:27 2012-02-2 Show GitHub Exploit DB Packet Storm
251385 7.5 危険 アップル - Apple Mac OS X の Apple Type Services における任意のコードを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2011-3446 2012-02-6 16:26 2012-02-2 Show GitHub Exploit DB Packet Storm
251386 4.3 警告 アップル - Apple Mac OS X の Address Book における CardDAV データを読まれる脆弱性 CWE-310
暗号の問題 		CVE-2011-3444 2012-02-6 16:25 2012-02-2 Show GitHub Exploit DB Packet Storm
251387 9.3 危険 Invensys - Invensys Wonderware InBatch の ActiveX コントロールにおけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2011-3141 2012-02-3 16:59 2011-08-16 Show GitHub Exploit DB Packet Storm
251388 9.3 危険 Invensys - Invensys Wonderware Information Server におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2011-2962 2012-02-3 16:58 2011-07-29 Show GitHub Exploit DB Packet Storm
251389 9.3 危険 Schneider Electric - InduSoft Web Studio の CEServer.exe におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2011-4052 2012-02-3 16:58 2011-12-5 Show GitHub Exploit DB Packet Storm
251390 10 危険 Schneider Electric - InduSoft Web Studio の CEServer.exe における任意のコードを実行される脆弱性 CWE-287
不適切な認証 		CVE-2011-4051 2012-02-3 16:57 2011-12-5 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 20, 2026, 4:14 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
297071 9.8 CRITICAL
Network 		umbraco umbraco_cms The FeedProxy.aspx script in Umbraco 4.7.0 allows remote attackers to proxy requests on their behalf via the "url" parameter. CWE-20
 Improper Input Validation  		CVE-2012-1301 2024-11-21 10:36 2017-04-14 Show GitHub Exploit DB Packet Storm
297072 - dflabs ptk Cross-site request forgery (CSRF) vulnerability in lib/logout.php in DFLabs PTK 1.0.5 and earlier allows remote attackers to hijack the authentication of administrators or investigators for requests … CWE-352
 Origin Validation Error 		CVE-2012-1415 2024-11-21 10:36 2014-12-28 Show GitHub Exploit DB Packet Storm
297073 - amcharts flash Multiple cross-site scripting (XSS) vulnerabilities in amCharts Flash 1 allow remote attackers to inject arbitrary web script or HTML via the (1) data_file or (2) settings_file parameter to ampie.swf… CWE-79
Cross-site Scripting 		CVE-2012-1303 2024-11-21 10:36 2014-12-28 Show GitHub Exploit DB Packet Storm
297074 - ammap_project ammap Multiple cross-site scripting (XSS) vulnerabilities in amMap 2.6.3 allow remote attackers to inject arbitrary web script or HTML via the (1) data_file or (2) settings_file parameter to ammap.swf, or … CWE-79
Cross-site Scripting 		CVE-2012-1302 2024-11-21 10:36 2014-12-28 Show GitHub Exploit DB Packet Storm
297075 - syndeocms syndeocms Cross-site request forgery (CSRF) vulnerability in starnet/index.php in SyndeoCMS 3.0 and earlier allows remote attackers to hijack the authentication of administrators for requests that add user acc… CWE-352
 Origin Validation Error 		CVE-2012-1203 2024-11-21 10:36 2014-12-28 Show GitHub Exploit DB Packet Storm
297076 - robert_ancell lightdm lightdm before 1.0.9 does not properly close file descriptors before opening a child process, which allows local users to write to the lightdm log or have other unspecified impact. CWE-200
Information Exposure 		CVE-2012-1111 2024-11-21 10:36 2014-10-28 Show GitHub Exploit DB Packet Storm
297077 - yealink ip_phone_sip-t19p
ultra-elegant_ip_phone_sip-t41p
ultra-elegant_ip_phone_sip-t48g
gigabit_color_ip_phone_sip-t32g
ultra-elegant_ip_phone_sip-t46g
ip_video_phone_vp530
ip_phone_sip-t… 		Multiple cross-site scripting (XSS) vulnerabilities in Local Phone book and Blacklist form in Yealink VOIP Phones allow remote authenticated users to inject arbitrary web script or HTML via the user … CWE-79
Cross-site Scripting 		CVE-2012-1417 2024-11-21 10:36 2014-09-17 Show GitHub Exploit DB Packet Storm
297078 - siteseeker
episerver 		euroling_siteseeker
episerver 		Cross-site scripting (XSS) vulnerability in the Euroling SiteSeeker module 3.x before 3.4.5 for EPiServer allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE… CWE-79
Cross-site Scripting 		CVE-2012-1032 2024-11-21 10:36 2014-09-17 Show GitHub Exploit DB Packet Storm
297079 - xoops xoops Multiple cross-site scripting (XSS) vulnerabilities in XOOPS before 2.5.5 allow remote attackers to inject arbitrary web script or HTML via the (1) to_userid parameter to modules/pm/pmlite.php or the… CWE-79
Cross-site Scripting 		CVE-2012-0984 2024-11-21 10:36 2014-09-11 Show GitHub Exploit DB Packet Storm
297080 - testlink testlink Multiple SQL injection vulnerabilities in TestLink 1.8.5b and earlier allow remote authenticated users with the Requirement view permission to execute arbitrary SQL commands via the req_spec_id param… CWE-89
SQL Injection 		CVE-2012-0939 2024-11-21 10:36 2014-08-14 Show GitHub Exploit DB Packet Storm