Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228281 10 危険 Google - Google Chrome における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2012-5142 2012-12-13 15:20 2012-12-11 Show GitHub Exploit DB Packet Storm
228282 10 危険 Google - Google Chrome における脆弱性 CWE-noinfo
情報不足 		CVE-2012-5141 2012-12-13 15:17 2012-12-11 Show GitHub Exploit DB Packet Storm
228283 10 危険 Google - Google Chrome におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2012-5140 2012-12-13 15:17 2012-12-11 Show GitHub Exploit DB Packet Storm
228284 10 危険 Google - Google Chrome におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2012-5139 2012-12-13 15:04 2012-12-11 Show GitHub Exploit DB Packet Storm
228285 4.4 警告 アドビシステムズ - Adobe ColdFusion における共有ホスティングでのサンドボックスのパーミッションを回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-5675 2012-12-13 14:59 2012-12-11 Show GitHub Exploit DB Packet Storm
228286 5 警告 VICTOR JONSSON - WordPress 用 Simple Gmail Login プラグインにおける重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2012-6313 2012-12-13 11:33 2012-12-11 Show GitHub Exploit DB Packet Storm
228287 4.3 警告 Video Lead Form - WordPress 用 Video Lead Form プラグインにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-6312 2012-12-13 11:29 2012-12-11 Show GitHub Exploit DB Packet Storm
228288 7.2 危険 シマンテック - Symantec Network Access Control における権限を取得される脆弱性 CWE-noinfo
情報不足 		CVE-2012-4349 2012-12-13 10:58 2012-12-10 Show GitHub Exploit DB Packet Storm
228289 5 警告 Google - Android のブラウザアプリにおけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2012-6301 2012-12-13 10:57 2012-12-10 Show GitHub Exploit DB Packet Storm
228290 10 危険 CA Technologies - Unix および Linux 上で稼働する CA XCOM Data Transport における任意のコマンドを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2012-5973 2012-12-13 10:56 2012-12-5 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 25, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
211131 7.5 HIGH
Network 		axioma_premium_responsive_project axioma_premium_responsive The ThemeMakers Axioma Premium Responsive theme through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information (such as user_login, user_pass, and user_email values) via a d… CWE-200
Information Exposure 		CVE-2015-9486 2024-11-21 11:40 2019-10-12 Show GitHub Exploit DB Packet Storm
211132 7.5 HIGH
Network 		accio_responsive_onepage_parallax_site_template_project accio_responsive_onepage_parallax_site_template The ThemeMakers Accio Responsive Parallax One Page Site Template component through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information (such as user_login, user_pass, and… CWE-200
Information Exposure 		CVE-2015-9485 2024-11-21 11:40 2019-10-12 Show GitHub Exploit DB Packet Storm
211133 7.5 HIGH
Network 		accio_one_page_parallax_responsive_theme_project accio_one_page_parallax_responsive_theme The ThemeMakers Accio One Page Parallax Responsive theme through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information (such as user_login, user_pass, and user_email values… CWE-200
Information Exposure 		CVE-2015-9484 2024-11-21 11:40 2019-10-12 Show GitHub Exploit DB Packet Storm
211134 7.5 HIGH
Network 		invento_\/_architecture_building_agency_template_project invento_\/_architecture_building_agency_template The ThemeMakers Invento Responsive Gallery/Architecture Template component through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information (such as user_login, user_pass, and… CWE-200
Information Exposure 		CVE-2015-9483 2024-11-21 11:40 2019-10-12 Show GitHub Exploit DB Packet Storm
211135 7.5 HIGH
Network 		car_dealer_\/_auto_dealer_responsive_project car_dealer_\/_auto_dealer_responsive The ThemeMakers Car Dealer / Auto Dealer Responsive theme through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information (such as user_login, user_pass, and user_email value… CWE-200
Information Exposure 		CVE-2015-9482 2024-11-21 11:40 2019-10-12 Show GitHub Exploit DB Packet Storm
211136 7.5 HIGH
Network 		diplomat_\|_political_project diplomat_\|_political The ThemeMakers Diplomat | Political theme through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information (such as user_login, user_pass, and user_email values) via a direct… CWE-200
Information Exposure 		CVE-2015-9481 2024-11-21 11:40 2019-10-12 Show GitHub Exploit DB Packet Storm
211137 7.5 HIGH
Network 		robot-cpa robotcpa The RobotCPA plugin 5 for WordPress has directory traversal via the f.php l parameter. CWE-22
Path Traversal 		CVE-2015-9480 2024-11-21 11:40 2019-10-11 Show GitHub Exploit DB Packet Storm
211138 9.8 CRITICAL
Network 		advancedcustomfields acf_fronted_display The ACF-Frontend-Display plugin through 2015-07-03 for WordPress has arbitrary file upload via an action=upload request to js/blueimp-jQuery-File-Upload-d45deb1/server/php/index.php. CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2015-9479 2024-11-21 11:40 2019-10-11 Show GitHub Exploit DB Packet Storm
211139 6.1 MEDIUM
Network 		no-margin-for-error prettyphoto prettyPhoto before 3.1.6 has js/jquery.prettyPhoto.js XSS. CWE-79
Cross-site Scripting 		CVE-2015-9478 2024-11-21 11:40 2019-10-11 Show GitHub Exploit DB Packet Storm
211140 8.8 HIGH
Network 		vernissage_project vernissage The Vernissage theme 1.2.8 for WordPress has insufficient restrictions on option updates. CWE-276
Incorrect Default Permissions  		CVE-2015-9477 2024-11-21 11:40 2019-10-11 Show GitHub Exploit DB Packet Storm