Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":April 30, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
252781 9.3 危険 シマンテック
IBM		 - Lotus 1-2-3 reader (wkssr.dll) の SpreadSheet におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-0131 2010-08-24 18:40 2010-08-4 Show GitHub Exploit DB Packet Storm
252782 4.3 警告 サイバートラスト株式会社
LibTIFF
レッドハット		 - x86_64 プラットフォーム上で稼動する RHEL の LibTIFF におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2010-2598 2010-08-24 13:44 2010-07-8 Show GitHub Exploit DB Packet Storm
252783 6.8 警告 アップル
サイバートラスト株式会社
LibTIFF
レッドハット		 - LibTIFF の FAX3 デコーダの Fax3SetupState 関数における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2010-1411 2010-08-24 13:44 2010-06-10 Show GitHub Exploit DB Packet Storm
252784 2.6 注意 アップル - Apple Safari の AutoFill 機能におけるアドレスブックカードの情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2010-1796 2010-08-20 18:24 2010-07-30 Show GitHub Exploit DB Packet Storm
252785 4.3 警告 アップル - Apple Safari におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-1778 2010-08-20 18:24 2010-07-30 Show GitHub Exploit DB Packet Storm
252786 7.5 危険 金子 勇 - Winny におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-2360 2010-08-20 12:02 2010-08-20 Show GitHub Exploit DB Packet Storm
252787 7.5 危険 金子 勇 - Winny におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-2360 2010-08-20 12:02 2010-08-20 Show GitHub Exploit DB Packet Storm
252788 5 警告 金子 勇 - Winny におけるノード情報の処理に関する脆弱性 CWE-Other
その他 		CVE-2010-2362 2010-08-20 12:01 2010-08-20 Show GitHub Exploit DB Packet Storm
252789 5 警告 金子 勇 - Winny における BBS 情報の処理に関する脆弱性 CWE-Other
その他 		CVE-2010-2361 2010-08-20 12:01 2010-08-20 Show GitHub Exploit DB Packet Storm
252790 10 危険 シマンテック
IBM		 - Autonomy KeyView Filter SDK の kvolefio.dll における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2009-3032 2010-08-19 18:22 2010-03-5 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 30, 2026, 4:58 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
292661 - canonical
sebastian_heinlein 		ubuntu_linux
aptdaemon 		Aptdaemon 0.43 in Ubuntu 11.10 and 12.04 LTS uses short IDs when importing PPA GPG keys from a keyserver, which allows remote attackers to install arbitrary package repository GPG keys via a man-in-t… NVD-CWE-noinfo
CVE-2012-0962 2024-11-21 10:36 2012-12-27 Show GitHub Exploit DB Packet Storm
292662 - debian apt
advanced_package_tool 		Apt 0.8.16~exp5ubuntu13.x before 0.8.16~exp5ubuntu13.6, 0.8.16~exp12ubuntu10.x before 0.8.16~exp12ubuntu10.7, and 0.9.7.5ubuntu5.x before 0.9.7.5ubuntu5.2, as used in Ubuntu, uses world-readable perm… CWE-200
Information Exposure 		CVE-2012-0961 2024-11-21 10:36 2012-12-27 Show GitHub Exploit DB Packet Storm
292663 - ps_project_management_team unity-firefox-extension content/unity-api.js in the unity-firefox-extension extension 2.4.1 for Firefox exposes the toDataURL function in an API call, which allows remote attackers to bypass the Same Origin Policy and obtai… NVD-CWE-Other
CVE-2012-0958 2024-11-21 10:36 2012-12-27 Show GitHub Exploit DB Packet Storm
292664 - linux linux_kernel The override_release function in kernel/sys.c in the Linux kernel before 3.4.16 allows local users to obtain sensitive information from kernel stack memory via a uname system call in conjunction with… CWE-16
Configuration 		CVE-2012-0957 2024-11-21 10:36 2012-12-21 Show GitHub Exploit DB Packet Storm
292665 - ps_project_management_team unity-firefox-extension Unity integration extension (unity-firefox-extension) before 2.4.1 for Firefox does not properly handle callbacks, which allows remote attackers to cause a denial of service (Firefox crash) and possi… CWE-20
 Improper Input Validation  		CVE-2012-0960 2024-11-21 10:36 2012-11-25 Show GitHub Exploit DB Packet Storm
292666 - remote_login_service_hackers remote_login_service Remote Login Service (RLS) 1.0.0 does not properly clear account information when switching users, which might allow physically proximate users to obtain login credentials. CWE-200
Information Exposure 		CVE-2012-0959 2024-11-21 10:36 2012-11-25 Show GitHub Exploit DB Packet Storm
292667 - redhat jboss_enterprise_application_platform
jboss_enterprise_soa_platform
jboss_enterprise_web_platform
jboss_enterprise_brms_platform 		The JBoss Server in JBoss Enterprise Application Platform 5.1.x before 5.1.2 and 5.2.x before 5.2.2, Web Platform before 5.1.2, BRMS Platform before 5.3.0, and SOA Platform before 5.3.0, when the ser… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2012-1167 2024-11-21 10:36 2012-11-24 Show GitHub Exploit DB Packet Storm
292668 - redhat mod_cluster
jboss_enterprise_application_platform 		mod_cluster 1.0.10 before 1.0.10 CP03 and 1.1.x before 1.1.4, as used in JBoss Enterprise Application Platform 5.1.2, when "ROOT" is set to excludedContexts, exposes the root context of the server, w… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2012-1154 2024-11-21 10:36 2012-10-23 Show GitHub Exploit DB Packet Storm
292669 - socialcms socialcms Multiple cross-site request forgery (CSRF) vulnerabilities in SocialCMS 1.0.2 allow remote attackers to hijack the authentication of administrators for requests that (1) add administrator accounts vi… CWE-352
 Origin Validation Error 		CVE-2012-1416 2024-11-21 10:36 2012-10-9 Show GitHub Exploit DB Packet Storm
292670 - dlink dsl-2640b_firmware
dsl-2640b 		Cross-site request forgery (CSRF) vulnerability in redpass.cgi in D-Link DSL-2640B Firmware EU_4.00 allows remote attackers to hijack the authentication of administrators for requests that change the… CWE-352
 Origin Validation Error 		CVE-2012-1308 2024-11-21 10:36 2012-10-9 Show GitHub Exploit DB Packet Storm