Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Nov. 15, 2024, 6:02 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
196531 7.1 危険 アップル - Mac OS X の GPU サポート機能におけるサービス運用妨害 (DoS) の脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-2601 2012-03-27 18:43 2011-06-30 Show GitHub Exploit DB Packet Storm
196532 4.3 警告 Mozilla Foundation - Mozilla Firefox の WebGL 実装における任意のデスクトップアプリケ-ションのウィンドウのスクリーンショットを取得される脆弱性 CWE-200
情報漏えい 		CVE-2011-2598 2012-03-27 18:43 2011-06-30 Show GitHub Exploit DB Packet Storm
196533 4.3 警告 Wireshark - Wireshark の Lucent/Ascend ファイルパーサーにおけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2011-2597 2012-03-27 18:43 2011-05-31 Show GitHub Exploit DB Packet Storm
196534 10 危険 ACD Systems - ACDSee FotoSlate におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2011-2595 2012-03-27 18:43 2011-09-14 Show GitHub Exploit DB Packet Storm
196535 9.3 危険 KMPlayer's Forums - KMPlayer におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2011-2594 2012-03-27 18:43 2011-09-2 Show GitHub Exploit DB Packet Storm
196536 9.3 危険 provideo - Provideo ActiveX コントロールにおけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2011-2591 2012-03-27 18:43 2011-08-5 Show GitHub Exploit DB Packet Storm
196537 9.3 危険 uusee - UUSee の UUPlayer ActiveX コントロールにおける任意のプログラムを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2011-2590 2012-03-27 18:43 2011-08-9 Show GitHub Exploit DB Packet Storm
196538 9.3 危険 uusee - UUSee の UUPlayer ActiveX コントロールにおけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2011-2589 2012-03-27 18:43 2011-08-9 Show GitHub Exploit DB Packet Storm
196539 6.8 警告 VideoLAN - VideoLAN VLC media player の AVI_ChunkRead_strf 関数におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2011-2588 2012-03-27 18:43 2011-07-15 Show GitHub Exploit DB Packet Storm
196540 6.8 警告 VideoLAN - VideoLAN VLC media player の DemuxAudioSipr 関数におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2011-2587 2012-03-27 18:43 2011-07-15 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Nov. 15, 2024, 4:16 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
261201 - jboss ironjacamar The IronJacamar container before 1.0.12.Final for JBoss Application Server, when allow-multiple-users is enabled in conjunction with a security domain, does not use the credentials supplied in a getC… CWE-255
Credentials Management 		CVE-2012-3428 2013-01-8 14:04 2012-12-20 Show GitHub Exploit DB Packet Storm
261202 - hp color_laserjet_cm3530
color_laserjet_cm60xx
color_laserjet_cp3525
color_laserjet_cp4xxx
color_laserjet_cp6015
laserjet_p3015
laserjet_p4xxx 		Cross-site scripting (XSS) vulnerability on the HP Color LaserJet CM3530 with firmware before 53.190.9, Color LaserJet CM60xx with firmware before 52.210.9, Color LaserJet CP3525 with firmware before… CWE-79
Cross-site Scripting 		CVE-2012-3272 2013-01-8 14:03 2012-12-6 Show GitHub Exploit DB Packet Storm
261203 - novell iprint Unspecified vulnerability in Novell iPrint Client before 5.82 allows remote attackers to execute arbitrary code via an op-client-interface-version action. NVD-CWE-noinfo
CVE-2012-0411 2013-01-8 14:00 2012-12-25 Show GitHub Exploit DB Packet Storm
261204 - oracle hyperion_financial_management Unspecified vulnerability in a TList 6 ActiveX control in Oracle Hyperion Financial Management 11.1.1.4 and 11.1.2.1.104 allows remote attackers to execute arbitrary code via unknown vectors. NVD-CWE-noinfo
CVE-2012-1714 2013-01-8 14:00 2012-12-21 Show GitHub Exploit DB Packet Storm
261205 - oracle hyperion_interactive_reporting
essbase_server
hyperion_production_reporting_server
integration_services_server 		Buffer overflow in the DataDirect ODBC driver, as used in Oracle Hyperion Interactive Reporting 11.1.2.1 and 11.1.2.2, Essbase Server 11.1.2.1 and 11.1.2.2, Production Reporting Server 11.1.2.1 and 1… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2012-3133 2013-01-8 14:00 2012-12-21 Show GitHub Exploit DB Packet Storm
261206 - opera opera_mini
opera_mobile 		The Opera Mobile application before 12.1 and Opera Mini application before 7.5 for Android do not properly implement the WebView class, which allows attackers to obtain sensitive information via a cr… CWE-200
Information Exposure 		CVE-2012-5180 2013-01-8 14:00 2012-12-27 Show GitHub Exploit DB Packet Storm
261207 - naver loctouch The Loctouch application 3.4.6 and earlier for Android does not properly handle implicit intents, which allows attackers to obtain sensitive information about logged locations via a crafted applicati… CWE-200
Information Exposure 		CVE-2012-5182 2013-01-8 14:00 2012-12-27 Show GitHub Exploit DB Packet Storm
261208 - naver loctouch The Loctouch application 3.4.6 and earlier for Android allows attackers to obtain sensitive information about logged locations via a crafted application that leverages read permission for system log … CWE-200
Information Exposure 		CVE-2012-5183 2013-01-8 14:00 2012-12-27 Show GitHub Exploit DB Packet Storm
261209 - m2osw tableofcontents The Table of Contents module 6.x-3.x before 6.x-3.8 for Drupal does not properly check node permissions, which allows remote attackers to read a node's headers by accessing a table of contents block. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2012-5584 2013-01-8 14:00 2012-12-27 Show GitHub Exploit DB Packet Storm
261210 - epiqo email Cross-site scripting (XSS) vulnerability in the Email Field module 6.x-1.x before 6.x-1.3 for Drupal allows remote attackers to inject arbitrary web script or HTML via the mailto link. CWE-79
Cross-site Scripting 		CVE-2012-5587 2013-01-8 14:00 2012-12-27 Show GitHub Exploit DB Packet Storm