Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 15, 2026, 12:10 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
254931 5 警告 日立 - HiRDB におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		- 2010-08-4 16:23 2010-06-30 Show GitHub Exploit DB Packet Storm
254932 9.3 危険 サイバートラスト株式会社
Mozilla Foundation
レッドハット		 - Mozilla Firefox/SeaMonkey における任意のコードを実行される脆弱性 CWE-399
リソース管理の問題 		CVE-2010-0177 2010-08-4 15:25 2010-03-30 Show GitHub Exploit DB Packet Storm
254933 4.7 警告 オラクル - Oracle Solaris における TCP/IP の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2010-2394 2010-08-3 19:20 2010-07-13 Show GitHub Exploit DB Packet Storm
254934 4.9 警告 オラクル - Oracle Solaris における GigaSwift Ethernet ドライバの処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2010-2386 2010-08-3 19:20 2010-07-13 Show GitHub Exploit DB Packet Storm
254935 5.6 警告 オラクル - Oracle Solaris における ZFS の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2010-2392 2010-08-3 19:20 2010-07-13 Show GitHub Exploit DB Packet Storm
254936 6.2 警告 オラクル - Oracle Solaris における rdist の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2010-0916 2010-08-3 19:20 2010-07-13 Show GitHub Exploit DB Packet Storm
254937 7.5 危険 OpenBSD
FreeBSD
オラクル
NetBSD		 - 複数の製品の ftpd におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2008-4247 2010-08-3 19:19 2008-09-25 Show GitHub Exploit DB Packet Storm
254938 7.5 危険 ターボリナックス
MySQL AB		 - MySQL で使用される yaSSL における複数のスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-4484 2010-08-3 18:59 2009-12-30 Show GitHub Exploit DB Packet Storm
254939 2.1 注意 オラクル - Oracle Database Server の Export コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-0901 2010-08-2 19:32 2010-07-13 Show GitHub Exploit DB Packet Storm
254940 2.6 注意 オラクル - Windows 上で稼働する Oracle Database Server の Network Layer コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-0900 2010-08-2 19:32 2010-07-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 15, 2026, 4:28 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
296721 5.5 MEDIUM
Local 		suckless
debian 		surf
debian_linux 		surf: cookie jar has read access from other local user CWE-200
Information Exposure 		CVE-2012-0842 2024-11-21 10:35 2019-11-20 Show GitHub Exploit DB Packet Storm
296722 9.8 CRITICAL
Network 		sugarcrm sugarcrm SugarCRM CE <= 6.3.1 contains scripts that use "unserialize()" with user controlled input which allows remote attackers to execute arbitrary PHP code. CWE-20
 Improper Input Validation  		CVE-2012-0694 2024-11-21 10:35 2019-10-30 Show GitHub Exploit DB Packet Storm
296723 8.8 HIGH
Network 		adobe shockwave_player Adobe Shockwave Player before 11.6.4.634 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-0… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2012-0771 2024-11-21 10:35 2018-02-20 Show GitHub Exploit DB Packet Storm
296724 8.8 HIGH
Network 		haudenschilt family_connections_cms Multiple cross-site request forgery (CSRF) vulnerabilities in Family Connections CMS (aka FCMS) 2.9 and earlier allow remote attackers to hijack the authentication of arbitrary users for requests tha… CWE-352
 Origin Validation Error 		CVE-2012-0699 2024-11-21 10:35 2018-01-12 Show GitHub Exploit DB Packet Storm
296725 7.5 HIGH
Network 		apache xerces2_java Apache Xerces2 Java Parser before 2.12.0 allows remote attackers to cause a denial of service (CPU consumption) via a crafted message to an XML service, which triggers hash table collisions. CWE-399
 Resource Management Errors 		CVE-2012-0881 2024-11-21 10:35 2017-10-31 Show GitHub Exploit DB Packet Storm
296726 7.5 HIGH
Network 		apache xerces-c\+\+ Apache Xerces-C++ allows remote attackers to cause a denial of service (CPU consumption) via a crafted message sent to an XML service that causes hash table collisions. CWE-399
 Resource Management Errors 		CVE-2012-0880 2024-11-21 10:35 2017-08-9 Show GitHub Exploit DB Packet Storm
296727 9.8 CRITICAL
Network 		apache cxf The WS-SP UsernameToken policy in Apache CXF 2.4.5 and 2.5.1 allows remote attackers to bypass authentication by sending an empty UsernameToken as part of a SOAP request. CWE-287
Improper Authentication 		CVE-2012-0803 2024-11-21 10:35 2017-08-9 Show GitHub Exploit DB Packet Storm
296728 - postfix postfix Multiple SQL injection vulnerabilities in Postfix Admin (aka postfixadmin) before 2.3.5 allow remote authenticated users to execute arbitrary SQL commands via (1) the pw parameter to the pacrypt func… CWE-89
SQL Injection 		CVE-2012-0811 2024-11-21 10:35 2014-10-1 Show GitHub Exploit DB Packet Storm
296729 - opensuse
systemd_project 		opensuse
systemd 		The session_link_x11_socket function in login/logind-session.c in systemd-logind in systemd, possibly 37 and earlier, allows local users to create or overwrite arbitrary files via a symlink attack on… CWE-59
Link Following 		CVE-2012-0871 2024-11-21 10:35 2014-04-18 Show GitHub Exploit DB Packet Storm
296730 - puppet puppet_enterprise
puppet_dashboard 		Multiple cross-site scripting (XSS) vulnerabilities in Puppet Dashboard 1.0 before 1.2.5 and Enterprise 1.0 before 1.2.5 and 2.x before 2.0.1 allow remote attackers to inject arbitrary web script or … CWE-79
Cross-site Scripting 		CVE-2012-0891 2024-11-21 10:35 2014-03-15 Show GitHub Exploit DB Packet Storm