Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 2, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
253361 9.3 危険 アドビシステムズ - Adobe Shockwave Player における整数オーバーフローの脆弱性 CWE-189
数値処理の問題
CVE-2010-0129 2010-05-28 18:43 2010-05-11 Show GitHub Exploit DB Packet Storm
253362 9.3 危険 アドビシステムズ - Adobe Shockwave Player および Adobe Director における任意のコードを実行される脆弱性 CWE-189
数値処理の問題
CVE-2010-0128 2010-05-28 18:43 2010-05-11 Show GitHub Exploit DB Packet Storm
253363 9.3 危険 アドビシステムズ - Adobe Shockwave Player における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2010-0127 2010-05-28 18:43 2010-05-11 Show GitHub Exploit DB Packet Storm
253364 9.3 危険 マイクロソフト - 複数の Microsoft 製品の VBE6.DLL における整数オーバーフローの脆弱性 CWE-94
コード・インジェクション
CVE-2010-0815 2010-05-28 18:43 2010-05-11 Show GitHub Exploit DB Packet Storm
253365 9.3 危険 マイクロソフト - 複数の Microsoft 製品の inetcomm.dll における整数オーバーフローの脆弱性 CWE-189
数値処理の問題
CVE-2010-0816 2010-05-28 18:43 2010-05-11 Show GitHub Exploit DB Packet Storm
253366 9.3 危険 日立 - 複数の日立製品におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2009-4776 2010-05-28 18:42 2009-07-21 Show GitHub Exploit DB Packet Storm
253367 6.8 警告 サイバートラスト株式会社
レッドハット
- TeX Live 2009 および teTeX の dvips における整数オーバーフローの脆弱性 CWE-189
数値処理の問題
CVE-2010-0827 2010-05-27 17:40 2010-05-6 Show GitHub Exploit DB Packet Storm
253368 6.8 警告 サイバートラスト株式会社
レッドハット
- teTeX および TeXlive 2007 の hpc.c における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2007-5935 2010-05-27 17:40 2007-11-13 Show GitHub Exploit DB Packet Storm
253369 4.3 警告 サイバートラスト株式会社
レッドハット
- dvipng および teTeX の set.c における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2010-0829 2010-05-27 17:40 2010-05-6 Show GitHub Exploit DB Packet Storm
253370 1.9 注意 IBM - IBM WebSphere Application Server における KeyRingPassword のパスワード情報が漏えいする脆弱性 CWE-255
証明書・パスワード管理
CVE-2010-0769 2010-05-27 17:25 2010-04-1 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 3, 2026, 4:06 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
290261 - polycom hdx_system_software Cross-site scripting (XSS) vulnerability in the web management interface on Polycom HDX Video End Points with UC APL software before 2.7.1.1_J, and commercial software before 3.0.5, allows remote att… CWE-79
Cross-site Scripting
CVE-2012-4970 2024-11-21 10:43 2013-01-1 Show GitHub Exploit DB Packet Storm
290262 - i-gen oplynx The Central application in i-GEN opLYNX before 2.01.9 allows remote attackers to bypass authentication via vectors involving the disabling of browser JavaScript support. CWE-287
Improper Authentication
CVE-2012-4688 2024-11-21 10:43 2012-12-31 Show GitHub Exploit DB Packet Storm
290263 - simple_invoices simple_invoices Multiple cross-site scripting (XSS) vulnerabilities in SimpleInvoices before stable-2012-1-CIS3000 allow remote attackers to inject arbitrary web script or HTML via (1) the having parameter in a mana… CWE-79
Cross-site Scripting
CVE-2012-4932 2024-11-21 10:43 2012-12-28 Show GitHub Exploit DB Packet Storm
290264 - trustwave
opensuse
fedoraproject
modsecurity
opensuse
fedora
The mod_security2 module before 2.7.0 for the Apache HTTP Server allows remote attackers to bypass rules, and deliver arbitrary POST data to a PHP application, via a multipart request in which an inv… NVD-CWE-noinfo
CVE-2012-4528 2024-11-21 10:43 2012-12-28 Show GitHub Exploit DB Packet Storm
290265 - emc data_protection_advisor Directory traversal vulnerability in the Web UI in EMC Data Protection Advisor (DPA) 5.6 through SP1, 5.7 through SP1, and 5.8 through SP4 allows remote attackers to read arbitrary files via unspecif… CWE-22
Path Traversal
CVE-2012-4616 2024-11-21 10:43 2012-12-27 Show GitHub Exploit DB Packet Storm
290266 - ibm rational_automation_framework IBM Rational Automation Framework (RAF) 3.x through 3.0.0.5 allows remote attackers to bypass intended Env Gen Wizard (aka Environment Generation Wizard) access restrictions by visiting context roots… CWE-264
Permissions, Privileges, and Access Controls
CVE-2012-4816 2024-11-21 10:43 2012-12-27 Show GitHub Exploit DB Packet Storm
290267 - siemens ros
rox_i_os
rox_ii_os
ruggedmax_os
Siemens RuggedCom Rugged Operating System (ROS) before 3.12, ROX I OS through 1.14.5, ROX II OS through 2.3.0, and RuggedMax OS through 4.2.1.4621.22 use hardcoded private keys for SSL and SSH commun… CWE-200
Information Exposure
CVE-2012-4698 2024-11-21 10:43 2012-12-24 Show GitHub Exploit DB Packet Storm
290268 - ibm tivoli_storage_manager_for_space_management Unspecified vulnerability in IBM Tivoli Storage Manager for Space Management (aka TSM HSM) before 6.2.5.0 and 6.3.x before 6.3.1.0 allows local users to read or modify file system objects via unknown… NVD-CWE-noinfo
CVE-2012-4859 2024-11-21 10:43 2012-12-21 Show GitHub Exploit DB Packet Storm
290269 - linux linux_kernel The tcp_illinois_info function in net/ipv4/tcp_illinois.c in the Linux kernel before 3.4.19, when the net.ipv4.tcp_congestion_control illinois setting is enabled, allows local users to cause a denial… CWE-189
Numeric Errors
CVE-2012-4565 2024-11-21 10:43 2012-12-21 Show GitHub Exploit DB Packet Storm
290270 - linux linux_kernel Race condition in fs/ext4/extents.c in the Linux kernel before 3.4.16 allows local users to obtain sensitive information from a deleted file by reading an extent that was not properly marked as unini… CWE-362
Race Condition
CVE-2012-4508 2024-11-21 10:43 2012-12-21 Show GitHub Exploit DB Packet Storm