Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228481 5 警告 Ruby-lang.org - Ruby の file.c におけるファイルを作成される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-4522 2012-11-27 16:56 2012-10-12 Show GitHub Exploit DB Packet Storm
228482 4.3 警告 Mahara - Mahara におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-6037 2012-11-27 16:55 2012-10-10 Show GitHub Exploit DB Packet Storm
228483 4.3 警告 Mahara - Mahara の group/members.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-2253 2012-11-27 16:54 2012-11-23 Show GitHub Exploit DB Packet Storm
228484 4.3 警告 Mahara - Mahara におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-2247 2012-11-27 16:53 2012-10-10 Show GitHub Exploit DB Packet Storm
228485 6.8 警告 Mahara - Mahara における任意のユーザを削除されるおよび CSRF 保護を回避される脆弱性 CWE-20
不適切な入力確認 		CVE-2012-2246 2012-11-27 16:53 2012-10-10 Show GitHub Exploit DB Packet Storm
228486 6 警告 Mahara - Mahara における任意のプログラムを実行される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-2244 2012-11-27 16:52 2012-10-9 Show GitHub Exploit DB Packet Storm
228487 4.3 警告 Mahara - Mahara におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-2243 2012-11-27 16:52 2012-10-9 Show GitHub Exploit DB Packet Storm
228488 6.4 警告 Mahara - Mahara おける任意のファイルを読まれる脆弱性 CWE-94
コード・インジェクション 		CVE-2012-2239 2012-11-27 16:51 2012-09-13 Show GitHub Exploit DB Packet Storm
228489 7.5 危険 PS Project Management Team - Firefox 用 Unity integration 拡張機能におけるサービス運用妨害 (Firefox クラッシュ) の脆弱性 CWE-20
不適切な入力確認 		CVE-2012-0960 2012-11-27 16:50 2012-11-8 Show GitHub Exploit DB Packet Storm
228490 2.1 注意 Remote Login Service Hackers - Remote Login Service におけるログイン認証を取得される脆弱性 CWE-200
情報漏えい 		CVE-2012-0959 2012-11-27 16:50 2012-10-24 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 20, 2026, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
211931 8.8 HIGH
Network 		wolfcms wolf_cms Wolf CMS before 0.8.3.1 allows unrestricted file rename and PHP Code Execution because admin/plugin/file_manager/browse/ (aka the filemanager) does not prevent a change of a file extension to ".php" … CWE-20
 Improper Input Validation  		CVE-2015-6568 2024-11-21 11:35 2017-04-15 Show GitHub Exploit DB Packet Storm
211932 8.8 HIGH
Network 		wolfcms wolf_cms Wolf CMS before 0.8.3.1 allows unrestricted file upload and PHP Code Execution because admin/plugin/file_manager/browse/ (aka the filemanager) does not validate the parameter "filename" properly. Exp… CWE-20
 Improper Input Validation  		CVE-2015-6567 2024-11-21 11:35 2017-04-15 Show GitHub Exploit DB Packet Storm
211933 9.8 CRITICAL
Network 		inspircd
debian 		inspircd
debian_linux 		Buffer underflow vulnerability in the Debian inspircd package before 2.0.5-1+deb7u1 for wheezy and before 2.0.16-1 for jessie and sid. NOTE: This issue exists as an additional issue from an incomplet… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2015-6674 2024-11-21 11:35 2017-04-13 Show GitHub Exploit DB Packet Storm
211934 5.9 MEDIUM
Network 		edx edx-platform Open edX edx-platform before 2015-08-25 requires use of the database for storage of SAML SSO secrets, which makes it easier for context-dependent attackers to obtain sensitive information by leveragi… CWE-200
Information Exposure 		CVE-2015-6671 2024-11-21 11:35 2017-03-13 Show GitHub Exploit DB Packet Storm
211935 6.1 MEDIUM
Network 		puppet puppet_enterprise Open redirect vulnerability in the Console in Puppet Enterprise before 2015.2.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the string parameter. CWE-601
Open Redirect 		CVE-2015-6501 2024-11-21 11:35 2017-01-13 Show GitHub Exploit DB Packet Storm
211936 7.5 HIGH
Network 		sisco mms-ease_firmware
ax-s4_iccp_firmware 		The SNAP Lite component in certain SISCO MMS-EASE and AX-S4 ICCP products allows remote attackers to cause a denial of service (CPU consumption) via a crafted packet. CWE-399
 Resource Management Errors 		CVE-2015-6574 2024-11-21 11:35 2016-12-16 Show GitHub Exploit DB Packet Storm
211937 6.1 MEDIUM
Network 		vmware vcenter_server Cross-site scripting (XSS) vulnerability in the vSphere Web Client in VMware vCenter Server 5.0 before U3g, 5.1 before U3d, and 5.5 before U2d allows remote attackers to inject arbitrary web script o… CWE-79
Cross-site Scripting 		CVE-2015-6931 2024-11-21 11:35 2016-07-3 Show GitHub Exploit DB Packet Storm
211938 7.5 HIGH
Network 		php
xmlsoft 		php
libxml2 		The xsl_ext_function_php function in ext/xsl/xsltprocessor.c in PHP before 5.4.45, 5.5.x before 5.5.29, and 5.6.x before 5.6.13, when libxml2 before 2.9.2 is used, does not consider the possibility o… NVD-CWE-Other
CVE-2015-6838 2024-11-21 11:35 2016-05-16 Show GitHub Exploit DB Packet Storm
211939 7.5 HIGH
Network 		php
xmlsoft 		php
libxml2 		The xsl_ext_function_php function in ext/xsl/xsltprocessor.c in PHP before 5.4.45, 5.5.x before 5.5.29, and 5.6.x before 5.6.13, when libxml2 before 2.9.2 is used, does not consider the possibility o… NVD-CWE-Other
CVE-2015-6837 2024-11-21 11:35 2016-05-16 Show GitHub Exploit DB Packet Storm
211940 9.8 CRITICAL
Network 		php php The session deserializer in PHP before 5.4.45, 5.5.x before 5.5.29, and 5.6.x before 5.6.13 mishandles multiple php_var_unserialize calls, which allow remote attackers to execute arbitrary code or ca… NVD-CWE-Other
CVE-2015-6835 2024-11-21 11:35 2016-05-16 Show GitHub Exploit DB Packet Storm