Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 20, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
251531	4	警告	オラクル	-	Oracle MySQL の MySQL Server コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2012-0495	2012-01-23 16:11	2012-01-17	Show	GitHub Exploit DB Packet Storm

251532	4	警告	オラクル	-	Oracle MySQL の MySQL Server コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2012-0491	2012-01-23 16:01	2012-01-17	Show	GitHub Exploit DB Packet Storm

251533	4	警告	オラクル	-	Oracle MySQL の MySQL Server コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2012-0489	2012-01-23 15:58	2012-01-17	Show	GitHub Exploit DB Packet Storm

251534	4	警告	オラクル	-	Oracle MySQL の MySQL Server コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2012-0488	2012-01-23 15:57	2012-01-17	Show	GitHub Exploit DB Packet Storm

251535	4	警告	オラクル	-	Oracle MySQL の MySQL Server コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2012-0487	2012-01-23 15:55	2012-01-17	Show	GitHub Exploit DB Packet Storm

251536	5	警告	オラクル	-	Oracle MySQL の MySQL Server コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2012-0486	2012-01-23 15:54	2012-01-17	Show	GitHub Exploit DB Packet Storm

251537	4	警告	オラクル	-	Oracle MySQL の MySQL Server コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2012-0485	2012-01-23 15:52	2012-01-17	Show	GitHub Exploit DB Packet Storm

251538	4	警告	オラクル	-	Oracle MySQL の MySQL Server コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2012-0120	2012-01-23 15:50	2012-01-17	Show	GitHub Exploit DB Packet Storm

251539	4	警告	オラクル	-	Oracle MySQL の MySQL Server コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2012-0119	2012-01-23 15:48	2012-01-17	Show	GitHub Exploit DB Packet Storm

251540	4.3	警告	株式会社グルコース	-	glucose 2 において任意のスクリプトが実行される脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-0313	2012-01-23 12:41	2012-01-23	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 21, 2026, 4:10 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
296701	-	puppet puppetlabs	puppet puppet_enterprise puppet_enterprise_users	Unspecified vulnerability in Puppet 2.6.x before 2.6.15 and 2.7.x before 2.7.13, and Puppet Enterprise (PE) Users 1.0, 1.1, 1.2.x, 2.0.x, and 2.5.x before 2.5.1 allows remote authenticated users with…	NVD-CWE-noinfo	CVE-2012-1987	2024-11-21 10:38	2012-05-30	Show	GitHub Exploit DB Packet Storm

296702	-	sitracker	support_incident_tracker	Cross-site scripting (XSS) vulnerability in Support Incident Tracker (SiT!) 3.65 and earlier allows remote attackers to inject arbitrary web script or HTML via the id parameter to index.php, which is…	CWE-79 Cross-site Scripting	CVE-2012-2235	2024-11-21 10:38	2012-05-28	Show	GitHub Exploit DB Packet Storm

296703	-	ibm	lotus_quickr	Multiple stack-based buffer overflows in a certain ActiveX control in qp2.cab in IBM Lotus Quickr 8.2 before 8.2.0.27-002a for Domino allow remote attackers to execute arbitrary code via a long argum…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2012-2176	2024-11-21 10:38	2012-05-26	Show	GitHub Exploit DB Packet Storm

296704	-	adobe	illustrator illustrator_cs5.5	Adobe Illustrator before CS6 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-0780, CVE-201…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2012-2042	2024-11-21 10:38	2012-05-25	Show	GitHub Exploit DB Packet Storm

296705	-	tornadoweb	tornado	CRLF injection vulnerability in the tornado.web.RequestHandler.set_header function in Tornado before 2.2.1 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting…	CWE-20 Improper Input Validation	CVE-2012-2374	2024-11-21 10:38	2012-05-24	Show	GitHub Exploit DB Packet Storm

296706	-	cypherpunks	pidgin-otr	Format string vulnerability in the log_message_cb function in otr-plugin.c in the Off-the-Record Messaging (OTR) pidgin-otr plugin before 3.2.1 for Pidgin might allow remote attackers to execute arbi…	CWE-134 Use of Externally-Controlled Format String	CVE-2012-2369	2024-11-21 10:38	2012-05-24	Show	GitHub Exploit DB Packet Storm

296707	-	schneider-electric	kerweb kerwin	Multiple cross-site scripting (XSS) vulnerabilities in Schneider Electric Kerweb before 3.0.1 and Kerwin before 6.0.1 allow remote attackers to inject arbitrary web script or HTML via (1) the evtvari…	CWE-79 Cross-site Scripting	CVE-2012-1990	2024-11-21 10:38	2012-05-23	Show	GitHub Exploit DB Packet Storm

296708	-	geoff_davies	contact_forms	The Contact Forms module 7.x-1.x before 7.x-1.2 for Drupal does not specify sufficiently restrictive permissions, which allows remote authenticated users with the "access the site-wide contact form" …	CWE-264 Permissions, Privileges, and Access Controls	CVE-2012-2340	2024-11-21 10:38	2012-05-22	Show	GitHub Exploit DB Packet Storm

296709	-	nancy_wichmann drupal	glossary drupal	Cross-site scripting (XSS) vulnerability in the Glossary module 6.x-1.x before 6.x-1.8 for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to "ta…	CWE-79 Cross-site Scripting	CVE-2012-2339	2024-11-21 10:38	2012-05-22	Show	GitHub Exploit DB Packet Storm

296710	-	johan_cwiklinski	galette	SQL injection vulnerability in includes/picture.class.php in Galette 0.63, 0.63.1, 0.63.2, 0.63.3, and 0.64rc1 allows remote attackers to execute arbitrary SQL commands via the id_adh parameter to pi…	CWE-89 SQL Injection	CVE-2012-2338	2024-11-21 10:38	2012-05-22	Show	GitHub Exploit DB Packet Storm