Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
228271	5	警告	コルネ株式会社	-	Welcart におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-5177	2012-12-14 12:02	2012-12-14	Show	GitHub Exploit DB Packet Storm

228272	4.3	警告	Zoho Corporation	-	ManageEngine AssetExplorer にクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-5956	2012-12-13 18:21	2012-12-7	Show	GitHub Exploit DB Packet Storm

228273	5	警告	Layton Technology	-	Layton Helpbox におけるログインページの平文の認証情報を漏えいする脆弱性	CWE-310 暗号の問題	CVE-2012-4977	2012-12-13 15:30	2012-12-12	Show	GitHub Exploit DB Packet Storm

228274	5	警告	Layton Technology	-	Layton Helpbox における ODBC データベースの認証情報を漏えいする脆弱性	CWE-200 情報漏えい	CVE-2012-4976	2012-12-13 15:29	2012-12-12	Show	GitHub Exploit DB Packet Storm

228275	4	警告	Layton Technology	-	Layton Helpbox における任意のサポートチケットのデータを変更される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-4975	2012-12-13 15:26	2012-12-12	Show	GitHub Exploit DB Packet Storm

228276	6.5	警告	Layton Technology	-	Layton Helpbox における権限を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-4974	2012-12-13 15:25	2012-12-12	Show	GitHub Exploit DB Packet Storm

228277	4.3	警告	Layton Technology	-	Layton Helpbox におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-4972	2012-12-13 15:25	2012-12-12	Show	GitHub Exploit DB Packet Storm

228278	9.4	危険	Layton Technology	-	Layton Helpbox における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2012-4971	2012-12-13 15:23	2012-12-12	Show	GitHub Exploit DB Packet Storm

228279	10	危険	Google	-	Google Chrome におけるサービス運用妨害 (スタックメモリ破損) の脆弱性	CWE-119 バッファエラー	CVE-2012-5144	2012-12-13 15:21	2012-12-11	Show	GitHub Exploit DB Packet Storm

228280	10	危険	Google	-	Google Chrome における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2012-5143	2012-12-13 15:20	2012-12-11	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:April 24, 2026, 4 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
211281	3.7	LOW Network	netapp	data_ontap	NetApp Data ONTAP before 8.2.4P1, when 7-Mode and HTTP access are enabled, allows remote attackers to obtain sensitive volume information via unspecified vectors.	CWE-200 Information Exposure	CVE-2015-7886	2024-11-21 11:37	2016-01-18	Show	GitHub Exploit DB Packet Storm

211282	3.7	LOW Network	f5	big-ip_analytics big-ip_application_acceleration_manager big-ip_link_controller big-ip_advanced_firewall_manager big-ip_policy_enforcement_manager big-ip_local_traffic_manager big-i…	BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, Link Controller, and PEM 12.0.0 before HF1, when the TCP profile for a virtual server is configured with Congestion Metrics Cache enabled, allow remote atta…	CWE-20 Improper Input Validation	CVE-2015-7759	2024-11-21 11:37	2016-01-13	Show	GitHub Exploit DB Packet Storm

211283	7.8	HIGH Local	huawei	p8_firmware mate_7_firmware	Heap-based buffer overflow in the HIFI driver in Huawei Mate 7 phones with software MT7-UL00 before MT7-UL00C17B354, MT7-TL10 before MT7-TL10C00B354, MT7-TL00 before MT7-TL00C01B354, and MT7-CL00 bef…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2015-8088	2024-11-21 11:37	2016-01-13	Show	GitHub Exploit DB Packet Storm

211284	6.1	MEDIUM Network	ssp-europe	secure_data_space	Multiple cross-site scripting (XSS) vulnerabilities in Secure Data Space SDS-API before 3.5.7 allow remote attackers to inject arbitrary web script or HTML via the (1) PATH_INFO to api/v3/public/shar…	CWE-79 Cross-site Scripting	CVE-2015-7706	2024-11-21 11:37	2016-01-12	Show	GitHub Exploit DB Packet Storm

211285	9.6	CRITICAL Network	unitronics	visilogic_oplc_ide	Heap-based buffer overflow in Unitronics VisiLogic OPLC IDE before 9.8.09 allows remote attackers to execute arbitrary code via a long vlp filename.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2015-7939	2024-11-21 11:37	2016-01-9	Show	GitHub Exploit DB Packet Storm

211286	9.8	CRITICAL Network	advantech	eki-1321_series_firmware eki-1322_series_firmware	Advantech EKI-132x devices with firmware before 2015-12-31 allow remote attackers to bypass authentication via unspecified vectors.	CWE-287 Improper Authentication	CVE-2015-7938	2024-11-21 11:37	2016-01-9	Show	GitHub Exploit DB Packet Storm

211287	5.9	MEDIUM Network	mozilla opensuse canonical	network_security_services leap opensuse firefox ubuntu_linux	Mozilla Network Security Services (NSS) before 3.20.2, as used in Mozilla Firefox before 43.0.2 and Firefox ESR 38.x before 38.5.2, does not reject MD5 signatures in Server Key Exchange messages in T…	CWE-19 Data Processing Errors	CVE-2015-7575	2024-11-21 11:37	2016-01-9	Show	GitHub Exploit DB Packet Storm

211288	3.3	LOW Local	opensuse gummi_project	leap opensuse gummi	Gummi 0.6.5 allows local users to write to arbitrary files via a symlink attack on a temporary dot file that uses the name of an existing file and a (1) .aux, (2) .log, (3) .out, (4) .pdf, or (5) .to…	CWE-59 Link Following	CVE-2015-7758	2024-11-21 11:37	2016-01-9	Show	GitHub Exploit DB Packet Storm

211289	8.1	HIGH Network	juniper	screenos	Juniper ScreenOS before 6.3.0r21, when ssh-pka is configured and enabled, allows remote attackers to cause a denial of service (system crash) or execute arbitrary code via crafted SSH negotiation.	CWE-20 Improper Input Validation	CVE-2015-7754	2024-11-21 11:37	2016-01-9	Show	GitHub Exploit DB Packet Storm

211290	7.5	HIGH Network	nodejs	node.js	Node.js 0.12.x before 0.12.9, 4.x before 4.2.3, and 5.x before 5.1.1 does not ensure the availability of a parser for each HTTP socket, which allows remote attackers to cause a denial of service (unc…	CWE-17 Code	CVE-2015-8027	2024-11-21 11:37	2016-01-3	Show	GitHub Exploit DB Packet Storm