Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228371 10 危険 Google - Google Chrome における脆弱性 CWE-noinfo
情報不足 		CVE-2012-5138 2012-12-5 11:48 2012-11-29 Show GitHub Exploit DB Packet Storm
228372 10 危険 Google - Google Chrome におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2012-5137 2012-12-5 11:46 2012-11-29 Show GitHub Exploit DB Packet Storm
228373 7.5 危険 Google - Google Chrome OS の WebGL サブシステムにおけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2012-5129 2012-12-5 11:39 2012-11-30 Show GitHub Exploit DB Packet Storm
228374 7.5 危険 David Alkire - Drupal 用 Drag & Drop Gallery モジュールにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2012-4479 2012-12-4 16:28 2012-07-11 Show GitHub Exploit DB Packet Storm
228375 6.8 警告 David Alkire - Drupal 用 Drag & Drop Gallery モジュールにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2012-4478 2012-12-4 16:27 2012-07-11 Show GitHub Exploit DB Packet Storm
228376 5 警告 David Alkire - Drupal 用 Drag & Drop Gallery モジュールにおけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-4477 2012-12-4 16:27 2012-07-11 Show GitHub Exploit DB Packet Storm
228377 4.3 警告 David Alkire - Drupal 用 Drag & Drop Gallery モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-4476 2012-12-4 16:26 2012-07-11 Show GitHub Exploit DB Packet Storm
228378 5 警告 Chris Hertzog - Drupal 用 Security Questions モジュールにおける任意のユーザの質問および回答を編集される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-4475 2012-12-4 16:26 2012-07-11 Show GitHub Exploit DB Packet Storm
228379 4.3 警告 Dennis Blake - Drupal 用 Colorbox Node モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-4474 2012-12-4 16:24 2012-07-11 Show GitHub Exploit DB Packet Storm
228380 3.5 注意 Christian Johansson - Drupal 用 Restrict node page view モジュールにおける未公開のノードにアクセスされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-4473 2012-12-4 16:21 2012-07-11 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 18, 2026, 4:11 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
212051 - nibbleblog nibbleblog Multiple cross-site request forgery (CSRF) vulnerabilities in Nibbleblog before 4.0.5 allow remote attackers to hijack the authentication of administrators for requests that (1) create a post via a n… CWE-352
 Origin Validation Error 		CVE-2015-6966 2024-11-21 11:35 2015-09-16 Show GitHub Exploit DB Packet Storm
212052 - creative-solutions contact_form_generator Multiple cross-site request forgery (CSRF) vulnerabilities in the Contact Form Generator plugin 2.0.1 and earlier for WordPress allow remote attackers to hijack the authentication of administrators f… CWE-352
 Origin Validation Error 		CVE-2015-6965 2024-11-21 11:35 2015-09-16 Show GitHub Exploit DB Packet Storm
212053 - ciphercoin wp_limit_login_attempts Multiple SQL injection vulnerabilities in the getip function in wp-limit-login-attempts.php in the WP Limit Login Attempts plugin before 2.0.1 for WordPress allow remote attackers to execute arbitrar… CWE-89
SQL Injection 		CVE-2015-6829 2024-11-21 11:35 2015-09-16 Show GitHub Exploit DB Packet Storm
212054 - securemoz security_audit The tweet_info function in class/__functions.php in the SecureMoz Security Audit plugin 1.0.5 and earlier for WordPress does not use an HTTPS session for downloading serialized data, which allows man… CWE-20
 Improper Input Validation  		CVE-2015-6828 2024-11-21 11:35 2015-09-16 Show GitHub Exploit DB Packet Storm
212055 - asus tm-1900 Stack-based buffer overflow in the ASUS TM-AC1900 router allows remote attackers to execute arbitrary code via crafted HTTP header values. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2015-6949 2024-11-21 11:35 2015-09-16 Show GitHub Exploit DB Packet Storm
212056 - corel wordperfect Heap-based buffer overflow in the Microsoft Word document conversion feature in Corel WordPerfect allows remote attackers to execute arbitrary code via a crafted document. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2015-6948 2024-11-21 11:35 2015-09-16 Show GitHub Exploit DB Packet Storm
212057 - microfocus accurev Multiple stack-based buffer overflows in the Reprise License Manager service in Borland AccuRev allow remote attackers to execute arbitrary code via the (1) akey or (2) actserver parameter to the act… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2015-6946 2024-11-21 11:35 2015-09-16 Show GitHub Exploit DB Packet Storm
212058 - jsp\/mysql_administrador_web_project jsp\/mysql_administrador_web Cross-site scripting (XSS) vulnerability in JSP/MySQL Administrador Web 1 allows remote attackers to inject arbitrary web script or HTML via the bd parameter to sys/sys/listaBD2.jsp. CWE-79
Cross-site Scripting 		CVE-2015-6945 2024-11-21 11:35 2015-09-16 Show GitHub Exploit DB Packet Storm
212059 - jsp\/mysql_administrador_web_project jsp\/mysql_administrador_web Cross-site request forgery (CSRF) vulnerability in JSP/MySQL Administrador Web 1 allows remote attackers to hijack the authentication of users for requests that execute arbitrary SQL commands via the… CWE-352
 Origin Validation Error 		CVE-2015-6944 2024-11-21 11:35 2015-09-16 Show GitHub Exploit DB Packet Storm
212060 - s9y serendipity SQL injection vulnerability in the serendipity_checkCommentToken function in include/functions_comments.inc.php in Serendipity before 2.0.2, when "Use Tokens for Comment Moderation" is enabled, allow… CWE-89
SQL Injection 		CVE-2015-6943 2024-11-21 11:35 2015-09-16 Show GitHub Exploit DB Packet Storm