Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 19, 2026, 2 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
251571 4.3 警告 The Tor Project - Tor におけるブリッジを列挙される脆弱性 CWE-200
情報漏えい 		CVE-2011-2769 2011-12-27 11:01 2011-10-27 Show GitHub Exploit DB Packet Storm
251572 5.8 警告 The Tor Project - Tor における匿名化のためのプロパティを無効にされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-2768 2011-12-27 10:54 2011-10-27 Show GitHub Exploit DB Packet Storm
251573 7.5 危険 PmWiki - PmWiki の PageListSort 関数における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2011-4453 2011-12-27 10:46 2011-11-11 Show GitHub Exploit DB Packet Storm
251574 - - The Support Incident Tracker Project - Support Incident Tracker に複数の脆弱性 - CVE-2011-3831
CVE-2011-3833
CVE-2011-5067
CVE-2011-5068
CVE-2011-5069
CVE-2011-5070 		2011-12-27 09:42 2011-12-5 Show GitHub Exploit DB Packet Storm
251575 9.3 危険 Sielco Sistemi - Sielco Sistemi Winlog PRO および Winlog Lite におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2011-4037 2011-12-26 16:32 2011-12-22 Show GitHub Exploit DB Packet Storm
251576 5 警告 Moodle - Moodle の calendar/set.php における CRLF インジェクションの脆弱性 CWE-94
コード・インジェクション 		CVE-2011-4203 2011-12-26 16:32 2011-12-22 Show GitHub Exploit DB Packet Storm
251577 4.3 警告 The phpMyAdmin Project - phpMyAdmin におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-4634 2011-12-26 16:31 2011-12-1 Show GitHub Exploit DB Packet Storm
251578 4.3 警告 The phpMyAdmin Project - phpMyAdmin の libraries/display_export.lib.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-4780 2011-12-26 16:30 2011-12-21 Show GitHub Exploit DB Packet Storm
251579 4.3 警告 The phpMyAdmin Project - phpMyAdmin の libraries/config/ConfigFile.class.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-4782 2011-12-26 16:29 2011-12-21 Show GitHub Exploit DB Packet Storm
251580 6.5 警告 WordPress.org - WordPress において任意の PHP コードが実行可能な脆弱性 CWE-94
コード・インジェクション 		- 2011-12-26 14:27 2011-12-26 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 19, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
297531 - tibco activematrix_service_grid
activematrix_service_bus
activematrix_businessworks_service_engine
silver_fabric_activematrix_service_grid_distribution
activematrix_bpm
businessevents
act… 		TIBCO ActiveMatrix Runtime Platform in Service Grid and Service Bus 2.x before 2.3.2 and BusinessWorks Service Engine before 5.8.2; TIBCO ActiveMatrix Platform in TIBCO Silver Fabric ActiveMatrix Ser… CWE-200
Information Exposure 		CVE-2012-0687 2024-11-21 10:35 2012-03-13 Show GitHub Exploit DB Packet Storm
297532 - openssl openssl The implementation of Cryptographic Message Syntax (CMS) and PKCS #7 in OpenSSL before 0.9.8u and 1.x before 1.0.0h does not properly restrict certain oracle behavior, which makes it easier for conte… CWE-310
Cryptographic Issues 		CVE-2012-0884 2024-11-21 10:35 2012-03-13 Show GitHub Exploit DB Packet Storm
297533 - apple safari WebKit in Apple Safari before 5.1.4 does not properly handle redirects in conjunction with HTTP authentication, which might allow remote web servers to capture credentials by logging the Authorizatio… CWE-200
Information Exposure 		CVE-2012-0647 2024-11-21 10:35 2012-03-13 Show GitHub Exploit DB Packet Storm
297534 - apple safari WebKit in Apple Safari before 5.1.4 does not properly implement "From third parties and advertisers" cookie blocking, which makes it easier for remote web servers to track users via a cookie. CWE-200
Information Exposure 		CVE-2012-0640 2024-11-21 10:35 2012-03-13 Show GitHub Exploit DB Packet Storm
297535 - apple safari The Internationalized Domain Name (IDN) feature in Apple Safari before 5.1.4 on Windows does not properly restrict the characters in URLs, which allows remote attackers to spoof a domain name via uns… CWE-20
 Improper Input Validation  		CVE-2012-0584 2024-11-21 10:35 2012-03-13 Show GitHub Exploit DB Packet Storm
297536 - apple itunes
webkit 		WebKit, as used in Apple iTunes before 10.6, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2012-0648 2024-11-21 10:35 2012-03-9 Show GitHub Exploit DB Packet Storm
297537 - apple iphone_os Format string vulnerability in VPN in Apple iOS before 5.1 allows remote attackers to execute arbitrary code via a crafted racoon configuration file. CWE-134
Use of Externally-Controlled Format String 		CVE-2012-0646 2024-11-21 10:35 2012-03-9 Show GitHub Exploit DB Packet Storm
297538 - apple iphone_os Siri in Apple iOS before 5.1 does not properly restrict the ability of Mail.app to handle voice commands, which allows physically proximate attackers to bypass the locked state via a command that for… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2012-0645 2024-11-21 10:35 2012-03-9 Show GitHub Exploit DB Packet Storm
297539 - apple iphone_os Race condition in the Passcode Lock feature in Apple iOS before 5.1 allows physically proximate attackers to bypass intended passcode requirements via a slide-to-dial gesture. CWE-362
Race Condition 		CVE-2012-0644 2024-11-21 10:35 2012-03-9 Show GitHub Exploit DB Packet Storm
297540 - apple iphone_os The kernel in Apple iOS before 5.1 does not properly handle debug system calls, which allows remote attackers to bypass sandbox restrictions and execute arbitrary code via a crafted program. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2012-0643 2024-11-21 10:35 2012-03-9 Show GitHub Exploit DB Packet Storm