Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
228361	5	警告	サムスン	-	Samsung Kies Air におけるサービス運用妨害 (クラッシュ) の脆弱性	CWE-noinfo 情報不足	CVE-2012-5859	2012-12-5 15:59	2012-12-3	Show	GitHub Exploit DB Packet Storm

228362	4.3	警告	サムスン	-	Samsung Kies Air における端末内の任意のコンテンツを読み取られる脆弱性	CWE-287 不適切な認証	CVE-2012-5858	2012-12-5 15:57	2012-12-3	Show	GitHub Exploit DB Packet Storm

228363	7.5	危険	FlashTux	-	WeeChat 用プラグイン API における任意のコマンドを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2012-5534	2012-12-5 15:48	2012-11-18	Show	GitHub Exploit DB Packet Storm

228364	6.8	警告	CMS Made Simple	-	CMS Made Simple におけるクロスサイトリクエストフォージェリ脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2012-5450	2012-12-5 14:30	2012-10-17	Show	GitHub Exploit DB Packet Storm

228365	6	警告	OrangeHRM	-	OrangeHRM における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2012-5367	2012-12-5 14:26	2012-12-3	Show	GitHub Exploit DB Packet Storm

228366	1.9	注意	シトリックス・システムズ	-	Xen におけるサービス運用妨害 (ホストハング) の脆弱性	CWE-noinfo 情報不足	CVE-2012-2934	2012-12-5 13:21	2012-06-12	Show	GitHub Exploit DB Packet Storm

228367	1.9	注意	シトリックス・システムズ	-	Xen 用 MMIO オペレーションエミュレータにおけるサービス運用妨害 (DoS) の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-3432	2012-12-5 13:05	2012-07-26	Show	GitHub Exploit DB Packet Storm

228368	1.9	注意	シトリックス・システムズ	-	Xen におけるサービス運用妨害 (ゲストクラッシュ) の脆弱性	CWE-DesignError	CVE-2012-0218	2012-12-5 12:22	2012-06-12	Show	GitHub Exploit DB Packet Storm

228369	5	警告	Joomla!	-	Joomla! における重要な情報を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-1599	2012-12-5 11:58	2012-03-27	Show	GitHub Exploit DB Packet Storm

228370	7.5	危険	Joomla!	-	Joomla! における脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-1598	2012-12-5 11:55	2012-03-27	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:April 24, 2026, 4 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
211321	-		schneider-electric	bmxnoe0110h bmxpra0100 bmxnoc0401 bmxnor0200h bmxnoe0100 bmxnor0200 bmxnoe0110 bmxnoe0100h modicon_m340_bmxp342020 modicon_m340_bmxp342030 modicon_m340_bmxp3420302 mo…	Stack-based buffer overflow in the GoAhead Web Server on Schneider Electric Modicon M340 PLC BMXNOx and BMXPx devices allows remote attackers to execute arbitrary code via a long password in HTTP Bas…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2015-7937	2024-11-21 11:37	2015-12-21	Show	GitHub Exploit DB Packet Storm

211322	10.0	CRITICAL Network	searchblox	searchblox	SearchBlox 8.3 before 8.3.1 allows remote attackers to write to the config file, and consequently cause a denial of service (application crash), via unspecified vectors.	CWE-264 Permissions, Privileges, and Access Controls	CVE-2015-7919	2024-11-21 11:37	2015-12-21	Show	GitHub Exploit DB Packet Storm

211323	-		honeywell	midas_firmware midas_black_firmware	Honeywell Midas gas detectors before 1.13b3 and Midas Black gas detectors before 2.13b3 allow remote attackers to discover cleartext passwords by sniffing the network.	CWE-200 Information Exposure	CVE-2015-7908	2024-11-21 11:37	2015-12-21	Show	GitHub Exploit DB Packet Storm

211324	8.6	HIGH Network	honeywell	midas_black_firmware midas_firmware	Directory traversal vulnerability in the web server on Honeywell Midas gas detectors before 1.13b3 and Midas Black gas detectors before 2.13b3 allows remote attackers to bypass authentication, and wr…	CWE-22 Path Traversal	CVE-2015-7907	2024-11-21 11:37	2015-12-21	Show	GitHub Exploit DB Packet Storm

211325	-		loytec	l-switch_and_l-ip_firmware	LOYTEC LIP-3ECTB 6.0.1, LINX-100, LVIS-3E100, and LIP-ME201 devices allow remote attackers to read a password-hash backup file via unspecified vectors.	CWE-255 Credentials Management	CVE-2015-7906	2024-11-21 11:37	2015-12-21	Show	GitHub Exploit DB Packet Storm

211326	-		juniper	screenos	The encryption implementation in Juniper ScreenOS 6.2.0r15 through 6.2.0r18, 6.3.0r12 before 6.3.0r12b, 6.3.0r13 before 6.3.0r13b, 6.3.0r14 before 6.3.0r14b, 6.3.0r15 before 6.3.0r15b, 6.3.0r16 befor…	CWE-310 Cryptographic Issues	CVE-2015-7756	2024-11-21 11:37	2015-12-19	Show	GitHub Exploit DB Packet Storm

211327	-		juniper	screenos	Juniper ScreenOS 6.2.0r15 through 6.2.0r18, 6.3.0r12 before 6.3.0r12b, 6.3.0r13 before 6.3.0r13b, 6.3.0r14 before 6.3.0r14b, 6.3.0r15 before 6.3.0r15b, 6.3.0r16 before 6.3.0r16b, 6.3.0r17 before 6.3.…	CWE-287 Improper Authentication	CVE-2015-7755	2024-11-21 11:37	2015-12-19	Show	GitHub Exploit DB Packet Storm

211328	-		oracle isc	linux solaris vm_server bind	db.c in named in ISC BIND 9.x before 9.9.8-P2 and 9.10.x before 9.10.3-P2 allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) via a malformed class attrib…	CWE-20 Improper Input Validation	CVE-2015-8000	2024-11-21 11:37	2015-12-17	Show	GitHub Exploit DB Packet Storm

211329	-		schneider-electric	proclima	Multiple buffer overflows in the F1BookView ActiveX control in F1 Bookview in Schneider Electric ProClima before 6.2 allow remote attackers to execute arbitrary code via the (1) Attach, (2) DefinedNa…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2015-7918	2024-11-21 11:37	2015-12-15	Show	GitHub Exploit DB Packet Storm

211330	-		apple php	mac_os_x php	Off-by-one error in the phar_parse_zipfile function in ext/phar/zip.c in PHP before 5.5.30 and 5.6.x before 5.6.14 allows remote attackers to cause a denial of service (uninitialized pointer derefere…	CWE-189 Numeric Errors	CVE-2015-7804	2024-11-21 11:37	2015-12-11	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed