Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 29, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
251811 5 警告 アップル - Apple iOS の CFNetwork における重要な情報を取得される脆弱性 CWE-20
不適切な入力確認 		CVE-2012-0641 2012-03-13 14:23 2012-03-8 Show GitHub Exploit DB Packet Storm
251812 4 警告 Redmine - Redmine におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-0327 2012-03-13 12:02 2012-03-13 Show GitHub Exploit DB Packet Storm
251813 2.6 注意 Tetsuya Aoyama - twicca におけるアクセス制限不備の脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-0326 2012-03-13 12:02 2012-03-13 Show GitHub Exploit DB Packet Storm
251814 7.6 危険 アップル - Apple iTunes で使用される WebKit における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2012-0634 2012-03-13 10:14 2012-03-8 Show GitHub Exploit DB Packet Storm
251815 7.5 危険 アップル - 複数の Apple 製品で使用される libresolv における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2011-3453 2012-03-12 14:14 2012-02-2 Show GitHub Exploit DB Packet Storm
251816 7.6 危険 アップル - Apple Safari における任意のコードを実行される脆弱性 CWE-399
リソース管理の問題 		CVE-2011-3845 2012-03-9 15:48 2012-03-8 Show GitHub Exploit DB Packet Storm
251817 4.3 警告 アップル - Apple Safari におけるアドレスバーを偽造される脆弱性 CWE-20
不適切な入力確認 		CVE-2011-3844 2012-03-9 15:43 2012-03-8 Show GitHub Exploit DB Packet Storm
251818 5 警告 シマンテック - Symantec pcAnywhere 製品の awhost32 サービスにおけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2012-0292 2012-03-9 15:06 2012-03-1 Show GitHub Exploit DB Packet Storm
251819 4 警告 CloudBees - Jenkins におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-0325 2012-03-9 12:03 2012-03-9 Show GitHub Exploit DB Packet Storm
251820 4.3 警告 CloudBees - Jenkins におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-0324 2012-03-9 12:02 2012-03-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 29, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
302491 - rubyonrails ruby_on_rails
rails 		Multiple SQL injection vulnerabilities in the quote_table_name method in the ActiveRecord adapters in activerecord/lib/active_record/connection_adapters/ in Ruby on Rails before 2.3.13, 3.0.x before … CWE-89
SQL Injection 		CVE-2011-2930 2024-11-21 10:29 2011-08-30 Show GitHub Exploit DB Packet Storm
302492 - rubyonrails ruby_on_rails
rails 		The template selection functionality in actionpack/lib/action_view/template/resolver.rb in Ruby on Rails 3.0.x before 3.0.10 and 3.1.x before 3.1.0.rc6 does not properly handle glob characters, which… CWE-20
 Improper Input Validation  		CVE-2011-2929 2024-11-21 10:29 2011-08-30 Show GitHub Exploit DB Packet Storm
302493 - pidgin pidgin gtkutils.c in Pidgin before 2.10.0 on Windows allows user-assisted remote attackers to execute arbitrary programs via a file: URL in a message. CWE-20
 Improper Input Validation  		CVE-2011-3185 2024-11-21 10:29 2011-08-30 Show GitHub Exploit DB Packet Storm
302494 - pidgin pidgin The msn_httpconn_parse_data function in httpconn.c in the MSN protocol plugin in libpurple in Pidgin before 2.10.0 does not properly handle HTTP 100 responses, which allows remote attackers to cause … CWE-399
 Resource Management Errors 		CVE-2011-3184 2024-11-21 10:29 2011-08-30 Show GitHub Exploit DB Packet Storm
302495 - phpmyadmin phpmyadmin Multiple cross-site scripting (XSS) vulnerabilities in the Tracking feature in phpMyAdmin 3.3.x before 3.3.10.4 and 3.4.x before 3.4.4 allow remote attackers to inject arbitrary web script or HTML vi… CWE-79
Cross-site Scripting 		CVE-2011-3181 2024-11-21 10:29 2011-08-30 Show GitHub Exploit DB Packet Storm
302496 - pidgin pidgin
libpurple 		The irc_msg_who function in msgs.c in the IRC protocol plugin in libpurple 2.8.0 through 2.9.0 in Pidgin before 2.10.0 does not properly validate characters in nicknames, which allows user-assisted r… NVD-CWE-Other
CVE-2011-2943 2024-11-21 10:29 2011-08-30 Show GitHub Exploit DB Packet Storm
302497 - linux linux_kernel The befs_follow_link function in fs/befs/linuxvfs.c in the Linux kernel before 3.1-rc3 does not validate the length attribute of long symlinks, which allows local users to cause a denial of service (… CWE-476
 NULL Pointer Dereference 		CVE-2011-2928 2024-11-21 10:29 2011-08-30 Show GitHub Exploit DB Packet Storm
302498 - apache
suse
opensuse
canonical 		http_server
linux_enterprise_server
opensuse
linux_enterprise_software_development_kit
ubuntu_linux 		The byterange filter in the Apache HTTP Server 1.3.x, 2.0.x through 2.0.64, and 2.2.x through 2.2.19 allows remote attackers to cause a denial of service (memory and CPU consumption) via a Range head… CWE-400
 Uncontrolled Resource Consumption 		CVE-2011-3192 2024-11-21 10:29 2011-08-30 Show GitHub Exploit DB Packet Storm
302499 - google chrome The PDF implementation in Google Chrome before 13.0.782.215 on Linux does not properly use the memset library function, which allows remote attackers to cause a denial of service or possibly have uns… CWE-20
 Improper Input Validation  		CVE-2011-2839 2024-11-21 10:29 2011-08-30 Show GitHub Exploit DB Packet Storm
302500 - google chrome Integer overflow in Google Chrome before 13.0.782.215 on 32-bit platforms allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving uniform … CWE-190
 Integer Overflow or Wraparound 		CVE-2011-2829 2024-11-21 10:29 2011-08-30 Show GitHub Exploit DB Packet Storm