Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228301 10 危険 マイクロソフト
アドビシステムズ
Google		 - Adobe Flash Player におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2012-5274 2012-12-7 16:01 2012-11-6 Show GitHub Exploit DB Packet Storm
228302 4.9 警告 シトリックス・システムズ - Xen におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2012-3433 2012-12-7 15:56 2012-08-9 Show GitHub Exploit DB Packet Storm
228303 6 警告 Lars Hjemli - cgit の syntax-highlighting.sh における任意のコマンドを実行される脆弱性 CWE-Other
その他 		CVE-2012-4548 2012-12-7 15:52 2012-10-28 Show GitHub Exploit DB Packet Storm
228304 4.3 警告 The phpMyAdmin Project - phpMyAdmin におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-5368 2012-12-7 15:42 2012-10-12 Show GitHub Exploit DB Packet Storm
228305 3.5 注意 The phpMyAdmin Project - phpMyAdmin におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-5339 2012-12-7 15:41 2012-10-12 Show GitHub Exploit DB Packet Storm
228306 6.8 警告 レッドハット - IcedTea-Web の IcedTeaScriptablePluginObject.cc における重要な情報を取得される脆弱性 CWE-189
数値処理の問題 		CVE-2012-4540 2012-12-7 15:40 2012-11-7 Show GitHub Exploit DB Packet Storm
228307 5.6 警告 シトリックス・システムズ - Xen および Citrix XenServer におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2012-3498 2012-12-7 15:38 2012-09-5 Show GitHub Exploit DB Packet Storm
228308 6.1 警告 シトリックス・システムズ - Xen および Citrix XenServer におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2012-3495 2012-12-7 15:37 2012-09-5 Show GitHub Exploit DB Packet Storm
228309 4.7 警告 シトリックス・システムズ - Xen および Citrix XenServer におけるサービス運用妨害 (DoS) の脆弱性 CWE-16
環境設定 		CVE-2012-3496 2012-12-7 15:34 2012-09-5 Show GitHub Exploit DB Packet Storm
228310 2.1 注意 シトリックス・システムズ - Xen および Citrix XenServer におけるサービス運用妨害 (ホストクラッシュ) の脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-3494 2012-12-7 15:32 2012-09-5 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 25, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
211121 8.8 HIGH
Network 		freshmail freshmail-newsletter The freshmail-newsletter plugin before 1.6 for WordPress has shortcode.php SQL Injection via the 'FM_form id=' substring. CWE-89
SQL Injection 		CVE-2015-9496 2024-11-21 11:40 2019-10-23 Show GitHub Exploit DB Packet Storm
211122 6.1 MEDIUM
Network 		syndication_links_project syndication_links The syndication-links plugin before 1.0.3 for WordPress has XSS via the genericons/example.html anchor identifier. CWE-79
Cross-site Scripting 		CVE-2015-9495 2024-11-21 11:40 2019-10-23 Show GitHub Exploit DB Packet Storm
211123 6.1 MEDIUM
Network 		indieweb_post_kinds_project indieweb_post_kinds The indieweb-post-kinds plugin before 1.3.1.1 for WordPress has XSS via the genericons/example.html anchor identifier. CWE-79
Cross-site Scripting 		CVE-2015-9494 2024-11-21 11:40 2019-10-23 Show GitHub Exploit DB Packet Storm
211124 6.1 MEDIUM
Network 		nlb-creationst my_wish_list The my-wish-list plugin before 1.4.2 for WordPress has multiple XSS issues. CWE-79
Cross-site Scripting 		CVE-2015-9493 2024-11-21 11:40 2019-10-23 Show GitHub Exploit DB Packet Storm
211125 7.5 HIGH
Network 		smartit_premium_responsive_project smartit_premium_responsive The ThemeMakers SmartIT Premium Responsive theme through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information (such as user_login, user_pass, and user_email values) via a … CWE-200
Information Exposure 		CVE-2015-9492 2024-11-21 11:40 2019-10-12 Show GitHub Exploit DB Packet Storm
211126 7.5 HIGH
Network 		blessing_premium_responsive_project blessing_premium_responsive The ThemeMakers Blessing Premium Responsive theme through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information (such as user_login, user_pass, and user_email values) via a… CWE-200
Information Exposure 		CVE-2015-9491 2024-11-21 11:40 2019-10-12 Show GitHub Exploit DB Packet Storm
211127 7.5 HIGH
Network 		gamestheme_premium_project gamestheme_premium The ThemeMakers GamesTheme Premium theme through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information (such as user_login, user_pass, and user_email values) via a direct r… CWE-200
Information Exposure 		CVE-2015-9490 2024-11-21 11:40 2019-10-12 Show GitHub Exploit DB Packet Storm
211128 7.5 HIGH
Network 		goodnex_premium_responsive_project goodnex_premium_responsive The ThemeMakers Goodnex Premium Responsive theme through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information (such as user_login, user_pass, and user_email values) via a … CWE-200
Information Exposure 		CVE-2015-9489 2024-11-21 11:40 2019-10-12 Show GitHub Exploit DB Packet Storm
211129 7.5 HIGH
Network 		almera_responsive_portfolio_site_template_project almera_responsive_portfolio_site_template The ThemeMakers Almera Responsive Portfolio Site Template component through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information (such as user_login, user_pass, and user_e… CWE-200
Information Exposure 		CVE-2015-9488 2024-11-21 11:40 2019-10-12 Show GitHub Exploit DB Packet Storm
211130 7.5 HIGH
Network 		almera_responsive_portfolio_project almera_responsive_portfolio The ThemeMakers Almera Responsive Portfolio theme through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information (such as user_login, user_pass, and user_email values) via a… CWE-200
Information Exposure 		CVE-2015-9487 2024-11-21 11:40 2019-10-12 Show GitHub Exploit DB Packet Storm