Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 4, 2026, 4 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
252551 7.5 危険 IBM
Apache Software Foundation
- Apache Axis2 における任意のファイルを読まれる脆弱性 CWE-20
不適切な入力確認
CVE-2010-1632 2010-11-9 15:29 2010-06-22 Show GitHub Exploit DB Packet Storm
252552 9.3 危険 リアルネットワークス - RealNetworks RealPlayer における QCP ファイルの処理に関するヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2010-2578 2010-11-9 14:51 2010-10-15 Show GitHub Exploit DB Packet Storm
252553 9.3 危険 リアルネットワークス - RealNetworks RealPlayer の rjrmrpln.dll における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認
CVE-2010-3750 2010-11-9 14:50 2010-10-15 Show GitHub Exploit DB Packet Storm
252554 9.3 危険 リアルネットワークス - RealNetworks RealPlayer の ActiveX コントロールにおける任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2010-3747 2010-11-9 14:50 2010-10-15 Show GitHub Exploit DB Packet Storm
252555 9.3 危険 リアルネットワークス - RealNetworks RealPlayer における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認
CVE-2010-2998 2010-11-9 14:50 2010-10-15 Show GitHub Exploit DB Packet Storm
252556 - - Artifex Software - Ghostscript にサービス運用妨害 (DoS) の脆弱性 - - 2010-11-9 14:46 2010-10-13 Show GitHub Exploit DB Packet Storm
252557 4 警告 IBM - IBM DB2 におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2010-3475 2010-11-8 16:09 2010-08-5 Show GitHub Exploit DB Packet Storm
252558 5 警告 IBM - IBM DB2 におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2010-3474 2010-11-8 16:08 2010-04-19 Show GitHub Exploit DB Packet Storm
252559 9.3 危険 ジャストシステム - 一太郎シリーズにおける任意のコードが実行される脆弱性 CWE-noinfo
情報不足
CVE-2010-3916 2010-11-5 15:02 2010-11-4 Show GitHub Exploit DB Packet Storm
252560 9.3 危険 ジャストシステム - 一太郎シリーズにおける任意のコードが実行される脆弱性 CWE-noinfo
情報不足
CVE-2010-3915 2010-11-5 15:01 2010-11-4 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 4, 2026, 4:06 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
289691 - google admob The developer-account sample code in Google AdMob does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, wh… CWE-20
 Improper Input Validation 
CVE-2012-5820 2024-11-21 10:45 2012-11-5 Show GitHub Exploit DB Packet Storm
289692 7.4 HIGH
Network
filesanywhere filesanywhere FilesAnywhere does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attacke… CWE-295
Improper Certificate Validation 
CVE-2012-5819 2024-11-21 10:45 2012-11-5 Show GitHub Exploit DB Packet Storm
289693 - elephantdrive elephantdrive ElephantDrive does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attacke… CWE-20
 Improper Input Validation 
CVE-2012-5818 2024-11-21 10:45 2012-11-5 Show GitHub Exploit DB Packet Storm
289694 7.4 HIGH
Network
amazon
codehaus
ec2_api_tools_java_library
xfire
Codehaus XFire 1.2.6 and earlier, as used in the Amazon EC2 API Tools Java library and other products, does not verify that the server hostname matches a domain name in the subject's Common Name (CN)… CWE-295
Improper Certificate Validation 
CVE-2012-5817 2024-11-21 10:45 2012-11-5 Show GitHub Exploit DB Packet Storm
289695 - aol aim AOL Instant Messenger (AIM) 1.0.1.2 does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man… CWE-20
 Improper Input Validation 
CVE-2012-5816 2024-11-21 10:45 2012-11-5 Show GitHub Exploit DB Packet Storm
289696 - rackspace rackspace The Rackspace app 2.1.5 for iOS does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-… CWE-20
 Improper Input Validation 
CVE-2012-5815 2024-11-21 10:45 2012-11-5 Show GitHub Exploit DB Packet Storm
289697 - github
roderick_baier
gaug.es
weberknecht
Weberknecht, as used in GitHub Gaug.es and other products, does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certif… CWE-20
 Improper Input Validation 
CVE-2012-5814 2024-11-21 10:45 2012-11-5 Show GitHub Exploit DB Packet Storm
289698 - emorym android_pusher The Android_Pusher library for Android does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows … CWE-20
 Improper Input Validation 
CVE-2012-5813 2024-11-21 10:45 2012-11-5 Show GitHub Exploit DB Packet Storm
289699 - acra acra_library The ACRA library for Android does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the… CWE-20
 Improper Input Validation 
CVE-2012-5812 2024-11-21 10:45 2012-11-5 Show GitHub Exploit DB Packet Storm
289700 - breezy breezy The Breezy application for Android does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-… CWE-310
Cryptographic Issues
CVE-2012-5811 2024-11-21 10:45 2012-11-5 Show GitHub Exploit DB Packet Storm