Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 21, 2026, 6:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
225001 10 危険 Mozilla Foundation - 複数の Mozilla 製品の gfxTextRun::GetUserData 関数における任意のコードを実行される脆弱性 CWE-399
リソース管理の問題 		CVE-2012-3964 2013-06-11 15:18 2012-08-28 Show GitHub Exploit DB Packet Storm
225002 10 危険 Mozilla Foundation - 複数の Mozilla 製品の js::gc::MapAllocToTraceKind 関数における任意のコードを実行される脆弱性 CWE-399
リソース管理の問題 		CVE-2012-3963 2013-06-11 15:11 2012-08-28 Show GitHub Exploit DB Packet Storm
225003 9.3 危険 Mozilla Foundation - 複数の Mozilla 製品における任意のコードを実行される脆弱性 CWE-DesignError
CVE-2012-3962 2013-06-11 15:04 2012-08-28 Show GitHub Exploit DB Packet Storm
225004 10 危険 Mozilla Foundation - 複数の Mozilla 製品の RangeData の実装における任意のコードを実行される脆弱性 CWE-399
リソース管理の問題 		CVE-2012-3961 2013-06-11 15:01 2012-08-28 Show GitHub Exploit DB Packet Storm
225005 10 危険 Mozilla Foundation - 複数の Mozilla 製品の mozSpellChecker::SetCurrentDictionary 関数における任意のコードを実行される脆弱性 CWE-399
リソース管理の問題 		CVE-2012-3960 2013-06-11 14:57 2012-08-28 Show GitHub Exploit DB Packet Storm
225006 10 危険 Mozilla Foundation - 複数の Mozilla 製品の nsRangeUpdater::SelAdjDeleteNode 関数における任意のコードを実行される脆弱性 CWE-399
リソース管理の問題 		CVE-2012-3959 2013-06-11 14:54 2012-08-28 Show GitHub Exploit DB Packet Storm
225007 10 危険 Mozilla Foundation - 複数の Mozilla 製品の nsHTMLEditRules::DeleteNonTableElements 関数における任意のコードを実行される脆弱性 CWE-399
リソース管理の問題 		CVE-2012-3958 2013-06-11 14:50 2012-08-28 Show GitHub Exploit DB Packet Storm
225008 10 危険 Mozilla Foundation - 複数の Mozilla 製品の nsBlockFrame::MarkLineDirty 関数におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2012-3957 2013-06-11 14:45 2012-08-28 Show GitHub Exploit DB Packet Storm
225009 10 危険 Mozilla Foundation - 複数の Mozilla 製品の MediaStreamGraphThreadRunnable::Run 関数における任意のコードを実行される脆弱性 CWE-399
リソース管理の問題 		CVE-2012-3956 2013-06-11 14:42 2012-08-28 Show GitHub Exploit DB Packet Storm
225010 6.8 警告 LibTIFF - LibTIFF の tiff2pdf におけるサービス運用妨害 (クラッシュ) の脆弱性 CWE-119
バッファエラー 		CVE-2012-3401 2013-06-11 14:34 2012-08-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 21, 2026, 4:10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1361 3.0 LOW
Adjacent 		- - HCL AION is affected by a vulnerability where basic authorization tokens are used for authentication. Use of basic authorization mechanisms may expose credentials to potential interception or misuse,… CWE-522
 Insufficiently Protected Credentials 		CVE-2025-62312 2026-05-15 02:22 2026-05-15 Show GitHub Exploit DB Packet Storm
1362 5.4 MEDIUM
Adjacent 		- - HCL AION is affected by a vulnerability where adequate protections against brute-force attempts are not enforced. This may allow repeated authentication attempts, potentially leading to unauthorized … CWE-307
mproper Restriction of Excessive Authentication Attempts 		CVE-2025-62313 2026-05-15 02:22 2026-05-15 Show GitHub Exploit DB Packet Storm
1363 2.3 LOW
Adjacent 		- - HCL AION is affected by a vulnerability where certain security-related HTTP response headers are not properly configured. Absence of these headers may reduce the effectiveness of browser-based securi… CWE-1021
 Improper Restriction of Rendered UI Layers or Frames 		CVE-2025-62316 2026-05-15 02:22 2026-05-15 Show GitHub Exploit DB Packet Storm
1364 2.6 LOW
Adjacent 		- - HCL AION is affected by a vulnerability where sensitive information may be included in URL parameters. Passing sensitive data in URLs may expose it through browser history, logs, or intermediary syst… CWE-598
Information Exposure Through Query Strings in GET Request  		CVE-2025-62317 2026-05-15 02:22 2026-05-15 Show GitHub Exploit DB Packet Storm
1365 7.5 HIGH
Network 		libexpat_project libexpat In libexpat before 2.8.1, the computational complexity of attribute name collision checks allows a denial of service via moderately sized crafted XML input. CWE-407
 Inefficient Algorithmic Complexity 		CVE-2026-45186 2026-05-15 02:20 2026-05-10 Show GitHub Exploit DB Packet Storm
1366 5.4 MEDIUM
Network 		- - A vulnerability in the web UI of Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, could allow an authenticated, remote attacker with read-only permissions to elevate their privileges from low … CWE-779
 Logging of Excessive Data 		CVE-2026-20209 2026-05-15 02:19 2026-05-15 Show GitHub Exploit DB Packet Storm
1367 5.4 MEDIUM
Network 		- - A vulnerability in the web UI of Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, could allow an authenticated, remote attacker with read-only permissions to modify configurations and perform … CWE-779
 Logging of Excessive Data 		CVE-2026-20210 2026-05-15 02:19 2026-05-15 Show GitHub Exploit DB Packet Storm
1368 8.6 HIGH
Network 		- - A vulnerability in the web UI of Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, could allow an unauthenticated, remote attacker to read arbitrary files that are stored in an affected system.… CWE-20
 Improper Input Validation  		CVE-2026-20224 2026-05-15 02:19 2026-05-15 Show GitHub Exploit DB Packet Storm
1369 5.3 MEDIUM
Network 		- - Exposed Keycloak management service in the Arqit Symmetric Key Agreement Platform enables unauthorized access to sensitive debug information such as metrics and health data. This issue affects Sym… CWE-749
 Exposed Dangerous Method or Function 		CVE-2026-33584 2026-05-15 02:19 2026-05-14 Show GitHub Exploit DB Packet Storm
1370 3.8 LOW
Physics 		- - Improper management of the idle timeout parameter in the Keycloak interface of the Arqit SKA-Platform enables an attacker to impersonate an authenticated tenant user via an unexpired browser session.… CWE-233
 Improper Handling of Parameters 		CVE-2026-33585 2026-05-15 02:19 2026-05-14 Show GitHub Exploit DB Packet Storm