Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
228401	7.5	危険	Google	-	Android 用 QuIC Diagnostics カーネルモードドライバにおける任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2012-4220	2012-12-3 15:21	2012-11-15	Show	GitHub Exploit DB Packet Storm

228402	6.4	警告	Django Software Foundation	-	Django における任意の URL が表示される脆弱性	CWE-20 不適切な入力確認	CVE-2012-4520	2012-11-30 18:16	2012-10-17	Show	GitHub Exploit DB Packet Storm

228403	4.3	警告	ViewVC	-	ViewVC の lib/viewvc.py におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-4533	2012-11-30 18:09	2012-10-24	Show	GitHub Exploit DB Packet Storm

228404	5.4	警告	（複数のベンダ）	-	Android OS を搭載した複数の端末におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	-	2012-11-30 17:59	2012-11-14	Show	GitHub Exploit DB Packet Storm

228405	10	危険	Autonomy	-	Autonomy Keyview IDOL ライブラリに複数の脆弱性	-	-	2012-11-30 17:52	2012-11-21	Show	GitHub Exploit DB Packet Storm

228406	1.2	注意	Munin	-	Munin 用 qmailscan プラグインにおける任意のファイルを上書きされる脆弱性	CWE-59 リンク解釈の問題	CVE-2012-2103	2012-11-30 17:50	2012-08-26	Show	GitHub Exploit DB Packet Storm

228407	5	警告	Apache Software Foundation	-	Apache POI におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2012-0213	2012-11-30 15:09	2012-08-7	Show	GitHub Exploit DB Packet Storm

228408	5	警告	日本電気アップルサイバートラスト株式会社サン・マイクロシステムズヒューレット・パッカード VMware 日立レッドハット	-	Sun JRE で使用している Apache Xerces2 Java におけるサービス運用妨害 (DoS) の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2009-2625	2012-11-30 14:55	2009-08-5	Show	GitHub Exploit DB Packet Storm

228409	4.3	警告	オラクル	-	Oracle OpenSSO における認証の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2012-0079	2012-11-30 14:51	2012-01-17	Show	GitHub Exploit DB Packet Storm

228410	6.5	警告	Esri	-	ArcGIS Server に SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2012-4949	2012-11-30 13:41	2012-11-12	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:April 24, 2026, 4 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
212971	7.3	HIGH Network	php	php	Stack-based buffer overflow in the phar_fix_filepath function in ext/phar/phar.c in PHP before 5.4.43, 5.5.x before 5.5.27, and 5.6.x before 5.6.11 allows remote attackers to cause a denial of servic…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2015-5590	2024-11-21 11:33	2016-01-19	Show	GitHub Exploit DB Packet Storm

212972	5.3	MEDIUM Network	swim_team_project	swim_team	Absolute path traversal vulnerability in include/user/download.php in the Swim Team plugin 1.44.10777 for WordPress allows remote attackers to read arbitrary files via a full pathname in the file par…	CWE-22 Path Traversal	CVE-2015-5471	2024-11-21 11:33	2016-01-13	Show	GitHub Exploit DB Packet Storm

212973	5.4	MEDIUM Network	hp	storeonce_backup_system_software	Cross-site scripting (XSS) vulnerability in HP StoreOnce Backup system software before 3.13.1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.	CWE-79 Cross-site Scripting	CVE-2015-5447	2024-11-21 11:33	2016-01-5	Show	GitHub Exploit DB Packet Storm

212974	7.5	HIGH Adjacent	hp	storeonce_backup_system_software	HP StoreOnce Backup system software before 3.13.1 allows remote attackers to execute arbitrary code via unspecified vectors.	NVD-CWE-noinfo	CVE-2015-5446	2024-11-21 11:33	2016-01-5	Show	GitHub Exploit DB Packet Storm

212975	8.8	HIGH Network	hp	storeonce_backup_system_software	Cross-site request forgery (CSRF) vulnerability in HP StoreOnce Backup system software before 3.13.1 allows remote authenticated users to hijack the authentication of unspecified victims via unknown …	CWE-352 Origin Validation Error	CVE-2015-5445	2024-11-21 11:33	2016-01-5	Show	GitHub Exploit DB Packet Storm

212976	6.5	MEDIUM Network	hp	jc653a_hp_12518_dc_switch_chassis jh179a_hp_flexfabric_5930_4-slot_switch jg362b_hp_hsr6804_router_chassis jg834a_hp_flexfabric_12508e_ac_switch_taa-compliant_chassis jg802a_hp_ff_12500e_…	HPE Networking Products, originally branded as Comware 5, Comware 7, H3C, or HP, allow remote attackers to bypass intended access restrictions or cause a denial of service via "Virtual routing and fo…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2015-5434	2024-11-21 11:33	2016-01-5	Show	GitHub Exploit DB Packet Storm

212977	7.4	HIGH Local	rarlab	winrar	The file-execution functionality in WinRAR before 5.30 beta 5 allows local users to gain privileges via a Trojan horse file with a name similar to an extensionless filename that was selected by the u…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2015-5663	2024-11-21 11:33	2015-12-30	Show	GitHub Exploit DB Packet Storm

212978	-		hp	operations_orchestration	Cross-site request forgery (CSRF) vulnerability in HP Operations Orchestration Central 10.x before 10.22.001 allows remote attackers to hijack the authentication of unspecified victims via unknown ve…	CWE-352 Origin Validation Error	CVE-2015-5451	2024-11-21 11:33	2015-11-23	Show	GitHub Exploit DB Packet Storm

212979	-		apple	iphone_os	The kernel in Apple iOS before 8.4.1 does not properly restrict debugging features, which allows attackers to bypass background-execution limitations via a crafted app.	CWE-264 Permissions, Privileges, and Access Controls	CVE-2015-5787	2024-11-21 11:33	2015-11-22	Show	GitHub Exploit DB Packet Storm

212980	-		sudo_project	sudo	sudoedit in Sudo before 1.8.15 allows local users to gain privileges via a symlink attack on a file whose full path is defined using multiple wildcards in /etc/sudoers, as demonstrated by "/home///…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2015-5602	2024-11-21 11:33	2015-11-18	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed