Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
228211	9.3	危険	マイクロソフト	-	複数の Microsoft Windows 製品におけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2012-1537	2012-12-17 10:56	2012-12-11	Show	GitHub Exploit DB Packet Storm

228212	9.3	危険	マイクロソフト	-	複数の Microsoft 製品における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2012-2539	2012-12-17 10:55	2012-12-11	Show	GitHub Exploit DB Packet Storm

228213	6.8	警告	Netsweeper, Inc.	-	Netsweeper の WebAdmin Portal におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2012-2447	2012-12-17 10:53	2012-07-9	Show	GitHub Exploit DB Packet Storm

228214	9.3	危険	マイクロソフト	-	Microsoft Internet Explorer 6 から 10 における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2012-4781	2012-12-17 10:52	2012-12-11	Show	GitHub Exploit DB Packet Storm

228215	10	危険	マイクロソフト	-	複数の Microsoft Windows 製品のカーネルモードドライバにおける任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2012-4786	2012-12-17 10:50	2012-12-11	Show	GitHub Exploit DB Packet Storm

228216	10	危険	マイクロソフト	-	Microsoft Internet Explorer 9 および 10 における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2012-4787	2012-12-17 10:49	2012-12-11	Show	GitHub Exploit DB Packet Storm

228217	3.5	注意	マイクロソフト	-	Microsoft Exchange Server 2007 および 2010 におけるサービス運用妨害 (DoS) の脆弱性	CWE-94 コード・インジェクション	CVE-2012-4791	2012-12-17 10:47	2012-12-11	Show	GitHub Exploit DB Packet Storm

228218	10	危険	マイクロソフトアドビシステムズ Google	-	Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2012-5678	2012-12-17 10:45	2012-12-11	Show	GitHub Exploit DB Packet Storm

228219	10	危険	マイクロソフトアドビシステムズ Google	-	Adobe Flash Player および Adobe AIR における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2012-5677	2012-12-17 10:44	2012-12-11	Show	GitHub Exploit DB Packet Storm

228220	10	危険	マイクロソフトアドビシステムズ Google	-	Adobe Flash Player および Adobe AIR におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2012-5676	2012-12-17 10:43	2012-12-11	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:April 21, 2026, 4:10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
211741	6.6	MEDIUM Local	apple	quicktime	Apple QuickTime before 7.7.9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted movie file, a different vulnerabili…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2015-7085	2024-11-21 11:36	2016-01-9	Show	GitHub Exploit DB Packet Storm

211742	10.0	CRITICAL Network	colorscore_project	colorscore	The initialize method in the Histogram class in lib/colorscore/histogram.rb in the colorscore gem before 0.0.5 for Ruby allows context-dependent attackers to execute arbitrary code via shell metachar…	CWE-77 Command Injection	CVE-2015-7541	2024-11-21 11:36	2016-01-9	Show	GitHub Exploit DB Packet Storm

211743	9.0	CRITICAL Network	qemu redhat debian oracle	qemu enterprise_linux_eus enterprise_linux_desktop enterprise_linux_server enterprise_linux_workstation openstack virtualization debian_linux linux	Buffer overflow in the pcnet_receive function in hw/net/pcnet.c in QEMU, when a guest NIC has a larger MTU, allows remote attackers to cause a denial of service (guest OS crash) or execute arbitrary …	CWE-120 Classic Buffer Overflow	CVE-2015-7512	2024-11-21 11:36	2016-01-9	Show	GitHub Exploit DB Packet Storm

211744	9.8	CRITICAL Network	libtiff	libtiff	The _TIFFVGetField function in tif_dir.c in libtiff 4.0.6 allows attackers to cause a denial of service (invalid memory write and crash) or possibly have unspecified other impact via crafted field da…	CWE-254 7PK - Security Features	CVE-2015-7554	2024-11-21 11:36	2016-01-9	Show	GitHub Exploit DB Packet Storm

211745	3.7	LOW Network	phusionpassenger	phusion_passenger	agent/Core/Controller/SendRequest.cpp in Phusion Passenger before 4.0.60 and 5.0.x before 5.0.22, when used in Apache integration mode or in standalone mode without a filtering proxy, allows remote a…	CWE-20 Improper Input Validation	CVE-2015-7519	2024-11-21 11:36	2016-01-9	Show	GitHub Exploit DB Packet Storm

211746	7.8	HIGH Local	fortinet	forticlient	Fortinet FortiClient Linux SSLVPN before build 2313, when installed on Linux in a home directory that is world readable and executable, allows local users to gain privileges via the helper/subroc set…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2015-7362	2024-11-21 11:36	2016-01-9	Show	GitHub Exploit DB Packet Storm

211747	4.7	MEDIUM Local	puppet	puppet_enterprise	Puppet Server in Puppet Enterprise before 3.8.x before 3.8.3 and 2015.2.x before 2015.2.3 uses world-readable permissions for the private key of the Certification Authority (CA) certificate during th…	CWE-200 Information Exposure	CVE-2015-7328	2024-11-21 11:36	2016-01-9	Show	GitHub Exploit DB Packet Storm

211748	4.7	MEDIUM Local	ibm	sterling_b2b_integrator	IBM Sterling B2B Integrator 5.2 allows local users to obtain sensitive cleartext web-services information by leveraging database access.	CWE-200 Information Exposure	CVE-2015-7438	2024-11-21 11:36	2016-01-3	Show	GitHub Exploit DB Packet Storm

211749	4.3	MEDIUM Network	ibm	maximo_for_transportation maximo_for_utilities maximo_asset_management smartcloud_control_desk maximo_for_life_sciences maximo_asset_management_essentials maximo_for_nuclear_power	IBM Maximo Asset Management 7.5 before 7.5.0.9 FP9 and 7.6 before 7.6.0.3 FP3 and Maximo Asset Management 7.5 before 7.5.0.9 FP9, 7.5.1, and 7.6 before 7.6.0.3 FP3 for SmartCloud Control Desk allow r…	CWE-200 Information Exposure	CVE-2015-7452	2024-11-21 11:36	2016-01-3	Show	GitHub Exploit DB Packet Storm

211750	9.8	CRITICAL Network	ibm	sterling_integrator tivoli_common_reporting sterling_b2b_integrator websphere_application_server watson_content_analytics watson_explorer_analytical_components watson_explorer_annot…	Serialized-object interfaces in certain IBM analytics, business solutions, cognitive, IT infrastructure, and mobile and social products allow remote attackers to execute arbitrary commands via a craf…	NVD-CWE-noinfo	CVE-2015-7450	2024-11-21 11:36	2016-01-3	Show	GitHub Exploit DB Packet Storm