Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
228171	7.6	危険	サン・マイクロシステムズ VMware レッドハット	-	複数の Oracle 製品の Java Runtime Environment における脆弱性	CWE-noinfo 情報不足	CVE-2010-4451	2012-12-18 12:13	2011-02-15	Show	GitHub Exploit DB Packet Storm

228172	5	警告	サイバートラスト株式会社 VMware Python Software Foundation レッドハット	-	Python の audioop モジュールにおけるサービス運用妨害 (DoS) の脆弱性	CWE-119 バッファエラー	CVE-2010-2089	2012-12-18 12:05	2010-01-11	Show	GitHub Exploit DB Packet Storm

228173	5	警告	サイバートラスト株式会社 VMware Python Software Foundation レッドハット	-	Python の audioop モジュール内にある audioop.c における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2010-1634	2012-12-18 12:04	2010-05-27	Show	GitHub Exploit DB Packet Storm

228174	5	警告	Expat IBM Apache Software Foundation サイバートラスト株式会社サン・マイクロシステムズヒューレット・パッカード VMware レッドハット	-	Expat の big2_toUtf8 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-119 バッファエラー	CVE-2009-3560	2012-12-18 12:01	2009-12-4	Show	GitHub Exploit DB Packet Storm

228175	6.4	警告	サイバートラスト株式会社 VMware Python Software Foundation レッドハット	-	Python の urllib および urllib2 モジュールにおける重要な情報を取得される脆弱性	CWE-399 リソース管理の問題	CVE-2011-1521	2012-12-18 11:37	2011-05-15	Show	GitHub Exploit DB Packet Storm

228176	10	危険	アドビシステムズ	-	Adobe Photoshop Camera Raw におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2012-5680	2012-12-18 10:41	2012-12-12	Show	GitHub Exploit DB Packet Storm

228177	2.1	注意	ヒューレット・パッカード	-	Itanium および Alpha プラットフォーム上の HP OpenVMS におけるサービス運用妨害 (DoS) の脆弱性	CWE-16 環境設定	CVE-2012-3276	2012-12-18 10:39	2012-12-10	Show	GitHub Exploit DB Packet Storm

228178	5	警告	GNU Project VMware	-	GnuTLS におけるサービス運用妨害 (ヒープメモリ破損およびアプリケーションクラッシュ) の脆弱性	CWE-310 暗号の問題	CVE-2012-1573	2012-12-17 18:09	2012-03-21	Show	GitHub Exploit DB Packet Storm

228179	5	警告	GNU Project VMware	-	GnuTLS で使用される GNU Libtasn1 におけるサービス運用妨害 (DoS) の脆弱性	CWE-189 数値処理の問題	CVE-2012-1569	2012-12-17 18:08	2012-03-21	Show	GitHub Exploit DB Packet Storm

228180	4.3	警告	GNU Project VMware	-	GnuTLS の gnutls_session_get_data 関数におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2011-4128	2012-12-17 18:07	2011-11-8	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:April 24, 2026, 4 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
212951	7.5	HIGH Network	powerplay_gallery_project	powerplay_gallery	upload.php in the Powerplay Gallery plugin 3.3 for WordPress allows remote attackers to create arbitrary directories via vectors related to the targetDir variable.	CWE-264 Permissions, Privileges, and Access Controls	CVE-2015-5682	2024-11-21 11:33	2017-05-23	Show	GitHub Exploit DB Packet Storm

212952	9.1	CRITICAL Network	image-export_project	image-export	Absolute path traversal vulnerability in the Image Export plugin 1.1 for WordPress allows remote attackers to read and delete arbitrary files via a full pathname in the file parameter to download.php.	CWE-22 Path Traversal	CVE-2015-5609	2024-11-21 11:33	2017-05-23	Show	GitHub Exploit DB Packet Storm

212953	7.5	HIGH Network	mdc_youtube_downloader_project	mdc_youtube_downloader	Absolute path traversal vulnerability in the MDC YouTube Downloader plugin 2.1.0 for WordPress allows remote attackers to read arbitrary files via a full pathname in the file parameter to includes/do…	CWE-22 Path Traversal	CVE-2015-5469	2024-11-21 11:33	2017-05-23	Show	GitHub Exploit DB Packet Storm

212954	7.5	HIGH Network	wpshopstyling	wp_e-commerce_shop_styling	Directory traversal vulnerability in the WP e-Commerce Shop Styling plugin before 2.6 for WordPress allows remote attackers to read arbitrary files via a .. (dot dot) in the filename parameter to inc…	CWE-22 Path Traversal	CVE-2015-5468	2024-11-21 11:33	2017-05-23	Show	GitHub Exploit DB Packet Storm

212955	7.5	HIGH Network	hp	integrated_lights-out_firmware	A potential security vulnerability has been identified with HP Integrated Lights-Out 4 (iLO 4) firmware version 2.11 and later, but prior to version 2.30. The vulnerability could be exploited remotel…	NVD-CWE-noinfo	CVE-2015-5436	2024-11-21 11:33	2017-05-11	Show	GitHub Exploit DB Packet Storm

212956	9.8	CRITICAL Network	samsung	nt14u_firmware x14j_firmware x14h_firmware x12_firmware x10p_firmware m288ofw_firmware	The Soft Access Point (AP) feature in Samsung Smart TVs X10P, X12, X14H, X14J, and NT14U and Xpress M288OFW printers generate weak WPA2 PSK keys, which makes it easier for remote attackers to obtain …	CWE-200 Information Exposure	CVE-2015-5729	2024-11-21 11:33	2017-03-24	Show	GitHub Exploit DB Packet Storm

212957	5.5	MEDIUM Local	freebsd	freebsd	bsnmpd, as used in FreeBSD 9.3, 10.1, and 10.2, uses world-readable permissions on the snmpd.config file, which allows local users to obtain the secret key for USM authentication by reading the file.	CWE-200 Information Exposure	CVE-2015-5677	2024-11-21 11:33	2017-02-8	Show	GitHub Exploit DB Packet Storm

212958	9.8	CRITICAL Network	misp-project	malware_information_sharing_platform	Malware Information Sharing Platform (MISP) before 2.3.90 allows remote attackers to conduct PHP object injection attacks via crafted serialized data, related to TemplatesController.php and populate_…	CWE-94 Code Injection	CVE-2015-5721	2024-11-21 11:33	2016-09-4	Show	GitHub Exploit DB Packet Storm

212959	6.1	MEDIUM Network	misp-project	malware_information_sharing_platform	Multiple cross-site scripting (XSS) vulnerabilities in the template-creation feature in Malware Information Sharing Platform (MISP) before 2.3.90 allow remote attackers to inject arbitrary web script…	CWE-79 Cross-site Scripting	CVE-2015-5720	2024-11-21 11:33	2016-09-4	Show	GitHub Exploit DB Packet Storm

212960	9.8	CRITICAL Network	misp-project	malware_information_sharing_platform	app/Controller/TemplatesController.php in Malware Information Sharing Platform (MISP) before 2.3.92 does not properly restrict filenames under the tmp/files/ directory, which has unspecified impact a…	NVD-CWE-noinfo	CVE-2015-5719	2024-11-21 11:33	2016-09-4	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed