Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 6, 2026, 2 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
252001 9.3 危険 サイバートラスト株式会社
Wireshark
レッドハット		 - Wireshark の sect_enttec_dmx_da 関数におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-4538 2011-01-28 15:46 2011-01-7 Show GitHub Exploit DB Packet Storm
252002 5.8 警告 Mozilla Foundation
オラクル		 - Mozilla Firefox の js_InitRandom 関数におけるシードの値を推測される脆弱性 CWE-310
暗号の問題 		CVE-2010-3399 2011-01-28 15:41 2010-09-15 Show GitHub Exploit DB Packet Storm
252003 10 危険 Google - Google Chrome の WebSockets の実装におけるサービス運用妨害 (DoS) の脆弱性 CWE-189
数値処理の問題 		CVE-2010-3254 2011-01-27 15:05 2010-09-2 Show GitHub Exploit DB Packet Storm
252004 10 危険 Google - Google Chrome の notification permissions の実装におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2010-3253 2011-01-27 15:04 2010-09-2 Show GitHub Exploit DB Packet Storm
252005 10 危険 Google - Google Chrome の Notifications presenter におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2010-3252 2011-01-27 15:02 2010-09-2 Show GitHub Exploit DB Packet Storm
252006 4.3 警告 Google - Google Chrome の WebSockets 実装におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2010-3251 2011-01-27 15:01 2010-09-2 Show GitHub Exploit DB Packet Storm
252007 5 警告 Google - Google Chrome におけるインストールされた拡張機能の設定を列挙される脆弱性 CWE-noinfo
情報不足 		CVE-2010-3250 2011-01-27 15:00 2010-09-2 Show GitHub Exploit DB Packet Storm
252008 9.3 危険 Google - Google Chrome におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2010-3249 2011-01-27 14:58 2010-09-2 Show GitHub Exploit DB Packet Storm
252009 5 警告 Google - Google Chrome における脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-3248 2011-01-27 14:56 2010-09-2 Show GitHub Exploit DB Packet Storm
252010 4.3 警告 Google - Google Chrome における URL バーの外観を偽造される脆弱性 CWE-20
不適切な入力確認 		CVE-2010-3247 2011-01-27 14:55 2010-09-2 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 6, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
292151 - moodle moodle Moodle 2.3.x before 2.3.1 uses only a client-side check for whether references are permitted in a file upload, which allows remote authenticated users to bypass intended alias (aka shortcut) restrict… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2012-3387 2024-11-21 10:40 2012-07-24 Show GitHub Exploit DB Packet Storm
292152 - symantec web_gateway The management console in Symantec Web Gateway 5.0.x before 5.0.3.18 allows remote attackers to change arbitrary passwords via crafted input to an application script. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2012-2977 2024-11-21 10:40 2012-07-24 Show GitHub Exploit DB Packet Storm
292153 - symantec web_gateway The management console in Symantec Web Gateway 5.0.x before 5.0.3.18 allows remote attackers to execute arbitrary shell commands via crafted input to application scripts, related to an "injection" is… CWE-78
OS Command  		CVE-2012-2976 2024-11-21 10:40 2012-07-24 Show GitHub Exploit DB Packet Storm
292154 - symantec web_gateway SQL injection vulnerability in the management console in Symantec Web Gateway 5.0.x before 5.0.3.18 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. CWE-89
SQL Injection 		CVE-2012-2961 2024-11-21 10:40 2012-07-24 Show GitHub Exploit DB Packet Storm
292155 - symantec web_gateway The management console in Symantec Web Gateway 5.0.x before 5.0.3.18 allows local users to gain privileges by modifying files, related to a "file inclusion" issue. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2012-2957 2024-11-21 10:40 2012-07-24 Show GitHub Exploit DB Packet Storm
292156 - symantec web_gateway The management console in Symantec Web Gateway 5.0.x before 5.0.3.18 allows remote attackers to execute arbitrary commands via crafted input to application scripts. CWE-78
OS Command  		CVE-2012-2953 2024-11-21 10:40 2012-07-24 Show GitHub Exploit DB Packet Storm
292157 - wordpress wordpress WordPress before 3.4.1 does not properly restrict access to post contents such as private or draft posts, which allows remote authors or contributors to obtain sensitive information via unknown vecto… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2012-3385 2024-11-21 10:40 2012-07-23 Show GitHub Exploit DB Packet Storm
292158 - wordpress wordpress Cross-site request forgery (CSRF) vulnerability in the customizer in WordPress before 3.4.1 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors. CWE-352
 Origin Validation Error 		CVE-2012-3384 2024-11-21 10:40 2012-07-23 Show GitHub Exploit DB Packet Storm
292159 - wordpress wordpress The map_meta_cap function in wp-includes/capabilities.php in WordPress 3.4.x before 3.4.2, when the multisite feature is enabled, does not properly assign the unfiltered_html capability, which allows… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2012-3383 2024-11-21 10:40 2012-07-23 Show GitHub Exploit DB Packet Storm
292160 - openstack essex
folsom
diablo 		virt/disk/api.py in OpenStack Compute (Nova) Folsom (2012.2), Essex (2012.1), and Diablo (2011.3) allows remote authenticated users to overwrite arbitrary files via a symlink attack on a file in an i… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2012-3361 2024-11-21 10:40 2012-07-23 Show GitHub Exploit DB Packet Storm