Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228291 9 危険 IBM - IBM Informix におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2012-4857 2012-12-12 20:39 2012-12-5 Show GitHub Exploit DB Packet Storm
228292 1.9 注意 IBM - IBM Flex System CMM および IMM2 における重要な情報を取得される脆弱性 CWE-DesignError
CVE-2012-4838 2012-12-12 20:39 2012-12-7 Show GitHub Exploit DB Packet Storm
228293 7.1 危険 Rockwell Automation - 複数の Rockwell Automation 製品におけるサービス運用妨害 (DoS) の脆弱性 CWE-16
環境設定 		CVE-2012-4690 2012-12-12 16:50 2011-12-7 Show GitHub Exploit DB Packet Storm
228294 4.3 警告 IBM - IBM Tivoli Monitoring におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-3297 2012-12-12 15:11 2012-11-26 Show GitHub Exploit DB Packet Storm
228295 10 危険 マイクロソフト
アドビシステムズ
Google		 - Adobe Flash Player におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2012-5280 2012-12-7 16:17 2012-11-6 Show GitHub Exploit DB Packet Storm
228296 10 危険 マイクロソフト
アドビシステムズ
Google		 - Adobe Flash Player における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2012-5279 2012-12-7 16:14 2012-11-6 Show GitHub Exploit DB Packet Storm
228297 10 危険 マイクロソフト
アドビシステムズ
Google		 - Adobe Flash Player におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-5278 2012-12-7 16:10 2012-11-6 Show GitHub Exploit DB Packet Storm
228298 10 危険 マイクロソフト
アドビシステムズ
Google		 - Adobe Flash Player におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2012-5277 2012-12-7 16:08 2012-11-6 Show GitHub Exploit DB Packet Storm
228299 10 危険 マイクロソフト
アドビシステムズ
Google		 - Adobe Flash Player におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2012-5276 2012-12-7 16:06 2012-11-6 Show GitHub Exploit DB Packet Storm
228300 10 危険 マイクロソフト
アドビシステムズ
Google		 - Adobe Flash Player におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2012-5275 2012-12-7 16:03 2012-11-6 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 24, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
212981 - hp archsight_management_center
arcsight_logger 		Multiple cross-site scripting (XSS) vulnerabilities in HP ArcSight Management Center before 2.1 and ArcSight Logger before 6.1 allow remote attackers to inject arbitrary web script or HTML via unspec… CWE-79
Cross-site Scripting 		CVE-2015-5441 2024-11-21 11:33 2015-11-12 Show GitHub Exploit DB Packet Storm
212982 - adways party_track_sdk The Adways Party Track SDK before 1.6.6 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a c… CWE-310
Cryptographic Issues 		CVE-2015-5655 2024-11-21 11:33 2015-11-10 Show GitHub Exploit DB Packet Storm
212983 - wordpress wordpress Cross-site scripting (XSS) vulnerability in the legacy theme preview implementation in wp-includes/theme.php in WordPress before 4.2.4 allows remote attackers to inject arbitrary web script or HTML v… CWE-79
Cross-site Scripting 		CVE-2015-5734 2024-11-21 11:33 2015-11-9 Show GitHub Exploit DB Packet Storm
212984 - wordpress wordpress Cross-site scripting (XSS) vulnerability in the refreshAdvancedAccessibilityOfItem function in wp-admin/js/nav-menu.js in WordPress before 4.2.4 allows remote attackers to inject arbitrary web script… CWE-79
Cross-site Scripting 		CVE-2015-5733 2024-11-21 11:33 2015-11-9 Show GitHub Exploit DB Packet Storm
212985 - wordpress wordpress Cross-site scripting (XSS) vulnerability in the form function in the WP_Nav_Menu_Widget class in wp-includes/default-widgets.php in WordPress before 4.2.4 allows remote attackers to inject arbitrary … CWE-79
Cross-site Scripting 		CVE-2015-5732 2024-11-21 11:33 2015-11-9 Show GitHub Exploit DB Packet Storm
212986 - wordpress wordpress Cross-site request forgery (CSRF) vulnerability in wp-admin/post.php in WordPress before 4.2.4 allows remote attackers to hijack the authentication of administrators for requests that lock a post, an… CWE-352
 Origin Validation Error 		CVE-2015-5731 2024-11-21 11:33 2015-11-9 Show GitHub Exploit DB Packet Storm
212987 - wordpress wordpress The sanitize_widget_instance function in wp-includes/class-wp-customize-widgets.php in WordPress before 4.2.4 does not use a constant-time comparison for widgets, which allows remote attackers to con… CWE-200
Information Exposure 		CVE-2015-5730 2024-11-21 11:33 2015-11-9 Show GitHub Exploit DB Packet Storm
212988 - typemoon witch_on_the_holy_night
fate\/stay_night
fate\/stay_night_\+_hollow_ataraxia_set
fate\/hollow_ataraxia 		TYPE-MOON Fate/stay night, Fate/hollow ataraxia, Witch on the Holy Night, and Fate/stay night + hollow ataraxia set allow remote attackers to execute arbitrary OS commands via crafted saved data. CWE-78
OS Command  		CVE-2015-5672 2024-11-21 11:33 2015-11-6 Show GitHub Exploit DB Packet Storm
212989 - isucon isucon_5_qualifier_eventapp eventapp/lib/gcloud.rb in the ISUCON5 qualifier portal (aka eventapp) web application before 2015-10-30 makes improper popen calls, which allows remote attackers to execute arbitrary commands via an … CWE-78
OS Command  		CVE-2015-5673 2024-11-21 11:33 2015-11-4 Show GitHub Exploit DB Packet Storm
212990 - oxwall oxwall Multiple cross-site request forgery (CSRF) vulnerabilities in Oxwall before 1.8 allow remote attackers to hijack the authentication of administrators for requests that (1) put the website under maint… CWE-352
 Origin Validation Error 		CVE-2015-5534 2024-11-21 11:33 2015-11-3 Show GitHub Exploit DB Packet Storm