Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 1, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
252851 5 警告 Opera Software ASA - Opera におけるクロスドメインの脆弱性 CWE-200
情報漏えい 		CVE-2008-2715 2010-09-27 16:00 2008-06-16 Show GitHub Exploit DB Packet Storm
252852 5 警告 Opera Software ASA - Opera における Web ページのアドレスを偽装される脆弱性 CWE-DesignError
CVE-2008-2714 2010-09-27 15:59 2008-06-16 Show GitHub Exploit DB Packet Storm
252853 9.3 危険 Opera Software ASA - Opera におけるパスワード入力時のキーボードハンドリングの処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2008-1764 2010-09-27 15:59 2008-04-12 Show GitHub Exploit DB Packet Storm
252854 9.3 危険 Opera Software ASA - Opera における任意のコードを実行される脆弱性 CWE-399
リソース管理の問題 		CVE-2008-1762 2010-09-27 15:58 2008-04-12 Show GitHub Exploit DB Packet Storm
252855 9.3 危険 Opera Software ASA - Opera における任意のコードを実行される脆弱性 CWE-399
リソース管理の問題 		CVE-2008-1761 2010-09-27 15:58 2008-04-12 Show GitHub Exploit DB Packet Storm
252856 4.3 警告 Opera Software ASA - Opera におけるクロスサイトスクリプティングを誘導される脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-1082 2010-09-27 15:57 2008-02-29 Show GitHub Exploit DB Packet Storm
252857 6.8 警告 Opera Software ASA - Opera における任意のスクリプトを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2008-1081 2010-09-27 15:57 2008-02-29 Show GitHub Exploit DB Packet Storm
252858 6.8 警告 Opera Software ASA - Opera における任意のファイルを読まれる脆弱性 CWE-20
不適切な入力確認 		CVE-2008-1080 2010-09-27 15:55 2008-02-29 Show GitHub Exploit DB Packet Storm
252859 9.3 危険 リアルネットワークス - RealNetworks RealPlayer におけるファイルのアクセス制限を回避される脆弱性 CWE-noinfo
情報不足 		CVE-2010-3002 2010-09-21 14:11 2010-08-26 Show GitHub Exploit DB Packet Storm
252860 9.3 危険 リアルネットワークス - Windows 上で稼働する RealNetworks RealPlayer の ParseKnownType 関数における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2010-3000 2010-09-21 14:11 2010-08-26 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 2, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
289311 - omniauth-oauth2_project omniauth-oauth2 Cross-site request forgery (CSRF) vulnerability in the omniauth-oauth2 gem 1.1.1 and earlier for Ruby allows remote attackers to hijack the authentication of users for requests that modify session st… CWE-352
 Origin Validation Error 		CVE-2012-6134 2024-11-21 10:45 2013-04-10 Show GitHub Exploit DB Packet Storm
289312 - fedorahosted cronie File descriptor leak in cronie 1.4.8, when running in certain environments, might allow local users to read restricted files, as demonstrated by reading /etc/crontab. CWE-200
Information Exposure 		CVE-2012-6097 2024-11-21 10:45 2013-04-10 Show GitHub Exploit DB Packet Storm
289313 - redhat
gluster 		storage_native_client
storage_server
storage_management_console
glusterfs 		The GlusterFS functionality in Red Hat Storage Management Console 2.0, Native Client, and Server 2.0 allows local users to overwrite arbitrary files via a symlink attack on multiple temporary files c… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2012-5635 2024-11-21 10:45 2013-04-10 Show GitHub Exploit DB Packet Storm
289314 - transmissionbt
fedoraproject
canonical 		transmission
fedora
ubuntu_linux 		Stack-based buffer overflow in utp.cpp in libutp, as used in Transmission before 2.74 and possibly other products, allows remote attackers to cause a denial of service (crash) and possibly execute ar… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2012-6129 2024-11-21 10:45 2013-04-3 Show GitHub Exploit DB Packet Storm
289315 - redhat
candlepinproject 		subscription_asset_manager
candlepin 		Candlepin before 0.7.24, as used in Red Hat Subscription Asset Manager before 1.2.1, does not properly check manifest signatures, which allows local users to modify manifests. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2012-6119 2024-11-21 10:45 2013-04-3 Show GitHub Exploit DB Packet Storm
289316 - mcafee mcafee_virtual_technician
epo_mcafee_virtual_technician 		An ActiveX control in McHealthCheck.dll in McAfee Virtual Technician (MVT) and ePO-MVT 6.5.0.2101 and earlier allows remote attackers to modify or create arbitrary files via a full pathname argument … CWE-264
Permissions, Privileges, and Access Controls 		CVE-2012-5879 2024-11-21 10:45 2013-03-29 Show GitHub Exploit DB Packet Storm
289317 - ibm lotus_inotes Cross-site scripting (XSS) vulnerability in IBM iNotes 8.5.x before 8.5.3 FP4 allows user-assisted remote attackers to inject arbitrary web script or HTML via vectors involving mail, aka SPR JDOE8ZZS… CWE-79
Cross-site Scripting 		CVE-2012-5943 2024-11-21 10:45 2013-03-27 Show GitHub Exploit DB Packet Storm
289318 - ibm rational_clearquest Cross-site scripting (XSS) vulnerability in the Web Client in IBM Rational ClearQuest 7.1.x before 7.1.2.10 and 8.x before 8.0.0.6 allows remote attackers to inject arbitrary web script or HTML via a… CWE-79
Cross-site Scripting 		CVE-2012-5757 2024-11-21 10:45 2013-03-22 Show GitHub Exploit DB Packet Storm
289319 - ibm infosphere_information_server The installation process in IBM InfoSphere Information Server 8.1, 8.5, 8.7, and 9.1 on UNIX and Linux sets incorrect permissions and ownerships for unspecified files, which allows local users to byp… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2012-5938 2024-11-21 10:45 2013-03-20 Show GitHub Exploit DB Packet Storm
289320 - redhat enterprise_virtualization_manager The domain management tool (rhevm-manage-domains) in Red Hat Enterprise Virtualization Manager (RHEV-M) 3.1 and earlier, when the validate action is enabled, logs the administrative password to a wor… CWE-255
Credentials Management 		CVE-2012-6115 2024-11-21 10:45 2013-03-13 Show GitHub Exploit DB Packet Storm