Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 3, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
252731 7.8 危険 シスコシステムズ - 複数の Cisco 製品におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2010-2834 2010-10-13 16:59 2010-09-22 Show GitHub Exploit DB Packet Storm
252732 6.4 警告 ジャストシステム
日立ソフトウェアエンジニアリング
富士通
ユミルリンク		 - Internet Explorer コンポーネントを使用するアプリケーションにおけるセキュリティゾーンの扱いに関する脆弱性 - - 2010-10-12 16:44 2005-07-12 Show GitHub Exploit DB Packet Storm
252733 7.8 危険 シスコシステムズ - Cisco IOS の H.225.0 実装の NAT におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2010-2833 2010-10-12 16:37 2010-09-22 Show GitHub Exploit DB Packet Storm
252734 7.8 危険 シスコシステムズ - Cisco IOS の H.323 実装の NAT におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2010-2832 2010-10-12 16:36 2010-09-22 Show GitHub Exploit DB Packet Storm
252735 7.8 危険 シスコシステムズ - Cisco IOS の SIP 実装の NAT におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2010-2831 2010-10-12 16:36 2010-09-22 Show GitHub Exploit DB Packet Storm
252736 7.1 危険 シスコシステムズ - Cisco IOS の IGMPv3 実装におけるサービス運用妨害 (DoS) の脆弱性 CWE-DesignError
CVE-2010-2830 2010-10-12 16:35 2010-09-22 Show GitHub Exploit DB Packet Storm
252737 7.8 危険 シスコシステムズ - Cisco IOS の H.323 実装におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2010-2829 2010-10-12 16:35 2010-09-22 Show GitHub Exploit DB Packet Storm
252738 7.8 危険 シスコシステムズ - Cisco IOS の H.323 実装におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2010-2828 2010-10-12 16:35 2010-09-22 Show GitHub Exploit DB Packet Storm
252739 6.8 警告 竹村喜人(たけちん) - Lhasa における実行ファイル読み込みに関する脆弱性 CWE-Other
その他 		CVE-2010-2369 2010-10-12 11:03 2010-10-12 Show GitHub Exploit DB Packet Storm
252740 6.8 警告 Schezo - Lhaplus における DLL 読み込みに関する脆弱性 CWE-Other
その他 		CVE-2010-2368 2010-10-12 11:02 2010-10-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 3, 2026, 4:06 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
290261 - polycom hdx_system_software Cross-site scripting (XSS) vulnerability in the web management interface on Polycom HDX Video End Points with UC APL software before 2.7.1.1_J, and commercial software before 3.0.5, allows remote att… CWE-79
Cross-site Scripting 		CVE-2012-4970 2024-11-21 10:43 2013-01-1 Show GitHub Exploit DB Packet Storm
290262 - i-gen oplynx The Central application in i-GEN opLYNX before 2.01.9 allows remote attackers to bypass authentication via vectors involving the disabling of browser JavaScript support. CWE-287
Improper Authentication 		CVE-2012-4688 2024-11-21 10:43 2012-12-31 Show GitHub Exploit DB Packet Storm
290263 - simple_invoices simple_invoices Multiple cross-site scripting (XSS) vulnerabilities in SimpleInvoices before stable-2012-1-CIS3000 allow remote attackers to inject arbitrary web script or HTML via (1) the having parameter in a mana… CWE-79
Cross-site Scripting 		CVE-2012-4932 2024-11-21 10:43 2012-12-28 Show GitHub Exploit DB Packet Storm
290264 - trustwave
opensuse
fedoraproject 		modsecurity
opensuse
fedora 		The mod_security2 module before 2.7.0 for the Apache HTTP Server allows remote attackers to bypass rules, and deliver arbitrary POST data to a PHP application, via a multipart request in which an inv… NVD-CWE-noinfo
CVE-2012-4528 2024-11-21 10:43 2012-12-28 Show GitHub Exploit DB Packet Storm
290265 - emc data_protection_advisor Directory traversal vulnerability in the Web UI in EMC Data Protection Advisor (DPA) 5.6 through SP1, 5.7 through SP1, and 5.8 through SP4 allows remote attackers to read arbitrary files via unspecif… CWE-22
Path Traversal 		CVE-2012-4616 2024-11-21 10:43 2012-12-27 Show GitHub Exploit DB Packet Storm
290266 - ibm rational_automation_framework IBM Rational Automation Framework (RAF) 3.x through 3.0.0.5 allows remote attackers to bypass intended Env Gen Wizard (aka Environment Generation Wizard) access restrictions by visiting context roots… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2012-4816 2024-11-21 10:43 2012-12-27 Show GitHub Exploit DB Packet Storm
290267 - siemens ros
rox_i_os
rox_ii_os
ruggedmax_os 		Siemens RuggedCom Rugged Operating System (ROS) before 3.12, ROX I OS through 1.14.5, ROX II OS through 2.3.0, and RuggedMax OS through 4.2.1.4621.22 use hardcoded private keys for SSL and SSH commun… CWE-200
Information Exposure 		CVE-2012-4698 2024-11-21 10:43 2012-12-24 Show GitHub Exploit DB Packet Storm
290268 - ibm tivoli_storage_manager_for_space_management Unspecified vulnerability in IBM Tivoli Storage Manager for Space Management (aka TSM HSM) before 6.2.5.0 and 6.3.x before 6.3.1.0 allows local users to read or modify file system objects via unknown… NVD-CWE-noinfo
CVE-2012-4859 2024-11-21 10:43 2012-12-21 Show GitHub Exploit DB Packet Storm
290269 - linux linux_kernel The tcp_illinois_info function in net/ipv4/tcp_illinois.c in the Linux kernel before 3.4.19, when the net.ipv4.tcp_congestion_control illinois setting is enabled, allows local users to cause a denial… CWE-189
Numeric Errors 		CVE-2012-4565 2024-11-21 10:43 2012-12-21 Show GitHub Exploit DB Packet Storm
290270 - linux linux_kernel Race condition in fs/ext4/extents.c in the Linux kernel before 3.4.16 allows local users to obtain sensitive information from a deleted file by reading an extent that was not properly marked as unini… CWE-362
Race Condition 		CVE-2012-4508 2024-11-21 10:43 2012-12-21 Show GitHub Exploit DB Packet Storm