Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 13, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
255341 2.6 注意 オラクル - Oracle Application Server におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		- 2010-01-14 15:01 2010-01-14 Show GitHub Exploit DB Packet Storm
255342 9.3 危険 マイクロソフト - Microsoft Internet Explorer に脆弱性 CWE-94
コード・インジェクション 		CVE-2009-3672 2010-01-14 12:08 2009-11-25 Show GitHub Exploit DB Packet Storm
255343 9.3 危険 サン・マイクロシステムズ
VMware		 - Sun Java SE の java.lang パッケージにおける脆弱性 CWE-362
競合状態 		CVE-2009-2724 2010-01-14 12:08 2009-08-10 Show GitHub Exploit DB Packet Storm
255344 10 危険 サン・マイクロシステムズ
VMware		 - Sun Java SE の Provider クラスにおける脆弱性 CWE-noinfo
情報不足 		CVE-2009-2721 2010-01-14 12:08 2009-08-10 Show GitHub Exploit DB Packet Storm
255345 5 警告 有限会社シースリー - WebCalenderC3 におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2010-0348 2010-01-12 15:01 2010-01-12 Show GitHub Exploit DB Packet Storm
255346 4.3 警告 有限会社シースリー - WebCalenderC3 におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-0349 2010-01-12 15:00 2010-01-12 Show GitHub Exploit DB Packet Storm
255347 10 危険 サイバートラスト株式会社
XEmacs		 - XEmacs の glyphs-eimage.c における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2009-2688 2010-01-12 14:48 2009-08-5 Show GitHub Exploit DB Packet Storm
255348 6.8 警告 IBM - IBM WebSphere Application Server (WAS) におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2009-2746 2010-01-12 14:48 2009-11-13 Show GitHub Exploit DB Packet Storm
255349 5 警告 アップル - Apple Safari におけるローカル HTML ファイルを読まれる脆弱性 CWE-Other
その他 		CVE-2009-2842 2010-01-7 12:09 2009-11-11 Show GitHub Exploit DB Packet Storm
255350 5.5 警告 シックス・アパート株式会社 - Movable Type におけるアクセス制限回避の脆弱性 CWE-264
認可・権限・アクセス制御 		- 2010-01-6 15:01 2010-01-6 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 13, 2026, 5:05 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
295511 - oracle industry_applications Unspecified vulnerability in the Siebel Clinical component in Oracle Industry Applications 7.7, 7.8, 8.0.0.x, 8.1.1.x, and 8.2.2.x allows remote authenticated users to affect integrity via unknown ve… NVD-CWE-noinfo
CVE-2012-1674 2024-11-21 10:37 2012-05-4 Show GitHub Exploit DB Packet Storm
295512 - wellintech kingview Untrusted search path vulnerability in WellinTech KingView 6.53 allows local users to gain privileges via a Trojan horse DLL in the current working directory. NVD-CWE-Other
CVE-2012-1819 2024-11-21 10:37 2012-05-3 Show GitHub Exploit DB Packet Storm
295513 - google
apple 		chrome
itunes
safari
iphone_os 		Use-after-free vulnerability in the XML parser in Google Chrome before 18.0.1025.168 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors. CWE-416
 Use After Free 		CVE-2012-1521 2024-11-21 10:37 2012-05-1 Show GitHub Exploit DB Packet Storm
295514 - siemens ruggedcom_rugged_operating_system RuggedCom Rugged Operating System (ROS) 3.10.x and earlier has a factory account with a password derived from the MAC Address field in the banner, which makes it easier for remote attackers to obtain… CWE-310
Cryptographic Issues 		CVE-2012-1803 2024-11-21 10:37 2012-04-28 Show GitHub Exploit DB Packet Storm
295515 - trevor_mckay cumin Multiple cross-site scripting (XSS) vulnerabilities in Cumin before r5238 allow remote attackers to inject arbitrary web script or HTML via vectors involving (1) widgets or (2) pages. CWE-79
Cross-site Scripting 		CVE-2012-1575 2024-11-21 10:37 2012-04-23 Show GitHub Exploit DB Packet Storm
295516 - siemens scalance_x414-3e_firmware
scalance_x414-3e
scalance_x308-2m_firmware
scalance_x308-2m
scalance_x-300eec_firmware
scalance_x-300eec
scalance_xr-300_firmware
scalance_xr-300
sca… 		Buffer overflow in the embedded web server on the Siemens Scalance X Industrial Ethernet switch X414-3E before 3.7.1, X308-2M before 3.7.2, X-300EEC before 3.7.2, XR-300 before 3.7.2, and X-300 befor… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2012-1802 2024-11-21 10:37 2012-04-18 Show GitHub Exploit DB Packet Storm
295517 - abb interlink_module
webware_sdk
s4_opc_server
quickteach
robotstudio_lite
robotstudio_s4
webware_server 		Multiple stack-based buffer overflows in (1) COM and (2) ActiveX controls in ABB WebWare Server, WebWare SDK, Interlink Module, S4 OPC Server, QuickTeach, RobotStudio S4, and RobotStudio Lite allow r… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2012-1801 2024-11-21 10:37 2012-04-18 Show GitHub Exploit DB Packet Storm
295518 - siemens scalance_s_firmware
scalance_s602
scalance_s612
scalance_s613 		Stack-based buffer overflow in the Profinet DCP protocol implementation on the Siemens Scalance S Security Module firewall S602 V2, S612 V2, and S613 V2 with firmware before 2.3.0.3 allows remote att… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2012-1800 2024-11-21 10:37 2012-04-18 Show GitHub Exploit DB Packet Storm
295519 - siemens scalance_s_firmware
scalance_s602
scalance_s612
scalance_s613 		The web server on the Siemens Scalance S Security Module firewall S602 V2, S612 V2, and S613 V2 with firmware before 2.3.0.3 does not limit the rate of authentication attempts, which makes it easier … CWE-287
Improper Authentication 		CVE-2012-1799 2024-11-21 10:37 2012-04-18 Show GitHub Exploit DB Packet Storm
295520 - vmware workstation
player
fusion
esxi
esx 		VMware Workstation 8.x before 8.0.2, VMware Player 4.x before 4.0.2, VMware Fusion 4.x before 4.1.2, VMware ESXi 3.5 through 5.0, and VMware ESX 3.5 through 4.1 use an incorrect ACL for the VMware To… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2012-1518 2024-11-21 10:37 2012-04-18 Show GitHub Exploit DB Packet Storm