Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
228361	5	警告	サムスン	-	Samsung Kies Air におけるサービス運用妨害 (クラッシュ) の脆弱性	CWE-noinfo 情報不足	CVE-2012-5859	2012-12-5 15:59	2012-12-3	Show	GitHub Exploit DB Packet Storm

228362	4.3	警告	サムスン	-	Samsung Kies Air における端末内の任意のコンテンツを読み取られる脆弱性	CWE-287 不適切な認証	CVE-2012-5858	2012-12-5 15:57	2012-12-3	Show	GitHub Exploit DB Packet Storm

228363	7.5	危険	FlashTux	-	WeeChat 用プラグイン API における任意のコマンドを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2012-5534	2012-12-5 15:48	2012-11-18	Show	GitHub Exploit DB Packet Storm

228364	6.8	警告	CMS Made Simple	-	CMS Made Simple におけるクロスサイトリクエストフォージェリ脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2012-5450	2012-12-5 14:30	2012-10-17	Show	GitHub Exploit DB Packet Storm

228365	6	警告	OrangeHRM	-	OrangeHRM における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2012-5367	2012-12-5 14:26	2012-12-3	Show	GitHub Exploit DB Packet Storm

228366	1.9	注意	シトリックス・システムズ	-	Xen におけるサービス運用妨害 (ホストハング) の脆弱性	CWE-noinfo 情報不足	CVE-2012-2934	2012-12-5 13:21	2012-06-12	Show	GitHub Exploit DB Packet Storm

228367	1.9	注意	シトリックス・システムズ	-	Xen 用 MMIO オペレーションエミュレータにおけるサービス運用妨害 (DoS) の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-3432	2012-12-5 13:05	2012-07-26	Show	GitHub Exploit DB Packet Storm

228368	1.9	注意	シトリックス・システムズ	-	Xen におけるサービス運用妨害 (ゲストクラッシュ) の脆弱性	CWE-DesignError	CVE-2012-0218	2012-12-5 12:22	2012-06-12	Show	GitHub Exploit DB Packet Storm

228369	5	警告	Joomla!	-	Joomla! における重要な情報を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-1599	2012-12-5 11:58	2012-03-27	Show	GitHub Exploit DB Packet Storm

228370	7.5	危険	Joomla!	-	Joomla! における脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-1598	2012-12-5 11:55	2012-03-27	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:April 21, 2026, 4:10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
211661	7.8	HIGH Local	vertiv	liebert_multilink_automated_shutdown	Liebert MultiLink Automated Shutdown v4.2.4 allows local users to gain privileges by replacing the LiebertM executable file.	CWE-264 Permissions, Privileges, and Access Controls	CVE-2015-7260	2024-11-21 11:36	2017-04-10	Show	GitHub Exploit DB Packet Storm

211662	5.5	MEDIUM Local	libtiff	libtiff	LibTIFF allows remote attackers to cause a denial of service (memory consumption and crash) via a crafted tiff file.	CWE-399 Resource Management Errors	CVE-2015-7313	2024-11-21 11:36	2017-03-17	Show	GitHub Exploit DB Packet Storm

211663	2.8	LOW Local	ibm	cloud_orchestrator smartcloud_orchestrator	A vulnerability has been identified in IBM Cloud Orchestrator services/[action]/launch API. An authenticated domain admin user might modify cross domain resources via a /services/[action]/launch API …	CWE-284 Improper Access Control	CVE-2015-7494	2024-11-21 11:36	2017-02-9	Show	GitHub Exploit DB Packet Storm

211664	4.7	MEDIUM Local	ibm	infosphere_information_server	IBM InfoSphere Information Server could allow a local user under special circumstances to execute commands during installation processes that could expose sensitive information.	CWE-200 Information Exposure	CVE-2015-7493	2024-11-21 11:36	2017-02-9	Show	GitHub Exploit DB Packet Storm

211665	4.4	MEDIUM Local	ibm	websphere_extreme_scale	IBM WebSphere eXtreme Scale and the WebSphere DataPower XC10 Appliance allow some sensitive data to linger in memory instead of being overwritten which could allow a local user with administrator pri…	CWE-200 Information Exposure	CVE-2015-7418	2024-11-21 11:36	2017-02-9	Show	GitHub Exploit DB Packet Storm

211666	6.6	MEDIUM Network	puppetlabs	mcollective-puppet-agent	The mcollective-puppet-agent plugin before 1.11.1 for Puppet allows remote attackers to execute arbitrary code via vectors involving the --server argument.	CWE-254 7PK - Security Features	CVE-2015-7331	2024-11-21 11:36	2017-01-31	Show	GitHub Exploit DB Packet Storm

211667	5.4	MEDIUM Network	fortinet	fortimanager_firmware fortianalyzer_firmware	Cross-site scripting (XSS) vulnerability in the advanced settings page in Fortinet FortiManager 5.x before 5.0.12 and 5.2.x before 5.2.3, in hardware models with a hard disk, and FortiAnalyzer 5.x be…	CWE-79 Cross-site Scripting	CVE-2015-7363	2024-11-21 11:36	2016-10-7	Show	GitHub Exploit DB Packet Storm

211668	9.8	CRITICAL Network	apple	airport_base_station_firmware	Apple AirPort Base Station Firmware before 7.6.7 and 7.7.x before 7.7.7 misparses DNS data, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) vi…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2015-7029	2024-11-21 11:36	2016-07-3	Show	GitHub Exploit DB Packet Storm

211669	2.5	LOW Local	ibm	websphere_mq	runmqsc in IBM WebSphere MQ 8.x before 8.0.0.5 allows local users to bypass intended queue-manager command access restrictions by leveraging authority for +connect and +dsp.	CWE-284 Improper Access Control	CVE-2015-7473	2024-11-21 11:36	2016-06-26	Show	GitHub Exploit DB Packet Storm

211670	4.4	MEDIUM Local	ibm	websphere_mq	IBM WebSphere MQ 8.0.0.4 on IBM i platforms allows local users to discover cleartext certificate-keystore passwords within MQ trace output by leveraging administrator privileges to execute the mqcert…	CWE-255 CWE-200 Credentials Management Information Exposure	CVE-2015-7462	2024-11-21 11:36	2016-06-20	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed