Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228541 3.5 注意 Firebird Project - Firebird の TraceManager におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2012-5529 2012-11-21 15:36 2012-07-5 Show GitHub Exploit DB Packet Storm
228542 4.3 警告 Google - Google Web Toolkit におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-4563 2012-11-21 15:32 2012-11-20 Show GitHub Exploit DB Packet Storm
228543 6.4 警告 UNINETT - radsecproxy におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-4566 2012-11-21 15:28 2012-11-20 Show GitHub Exploit DB Packet Storm
228544 6.4 警告 UNINETT - radsecproxy におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-4523 2012-11-21 15:18 2012-11-20 Show GitHub Exploit DB Packet Storm
228545 5.8 警告 Belkin International - 複数の Belkin Wireless Router 製品におけるネットワークにアクセスされる脆弱性 CWE-255
証明書・パスワード管理 		CVE-2012-4366 2012-11-21 14:17 2012-11-20 Show GitHub Exploit DB Packet Storm
228546 4.3 警告 Andreas Gohr
Fedora Project		 - Fedora で使用される DokuWiki における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2012-3354 2012-11-21 14:14 2012-11-20 Show GitHub Exploit DB Packet Storm
228547 6.4 警告 Icecast - icecast における制御文字を挿入される脆弱性 CWE-noinfo
情報不足 		CVE-2011-4612 2012-11-21 14:05 2012-06-11 Show GitHub Exploit DB Packet Storm
228548 5.8 警告 BIGACE - BIGACE におけるセッション固定の脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-5173 2012-11-21 14:01 2012-11-21 Show GitHub Exploit DB Packet Storm
228549 4.3 警告 Havalite - Havalite におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-5919 2012-11-20 18:17 2012-11-19 Show GitHub Exploit DB Packet Storm
228550 4 警告 razorCMS - razorCMS における管理者ディレクトリおよびファイルへアクセスされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-5918 2012-11-20 18:16 2012-11-19 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 24, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
212901 - cisco asr_5000_series_software Cisco ASR 5000 devices with software 19.0.M0.60828 allow remote attackers to cause a denial of service (OSPF process restart) via crafted length fields in headers of OSPF packets, aka Bug ID CSCuv628… CWE-20
 Improper Input Validation  		CVE-2015-6256 2024-11-21 11:34 2015-08-23 Show GitHub Exploit DB Packet Storm
212902 - cisco unified_web_and_e-mail_interaction_manager Cross-site scripting (XSS) vulnerability in Cisco Unified Web and E-Mail Interaction Manager 9.0(2) allows remote attackers to inject arbitrary web script or HTML via a crafted chat message, aka Bug … CWE-79
Cross-site Scripting 		CVE-2015-6255 2024-11-21 11:34 2015-08-20 Show GitHub Exploit DB Packet Storm
212903 - picketlink picketlink The (1) Service Provider (SP) and (2) Identity Provider (IdP) in PicketLink before 2.7.0 does not ensure that the Destination attribute in a Response element in a SAML assertion matches the location … CWE-17
Code 		CVE-2015-6254 2024-11-21 11:34 2015-08-18 Show GitHub Exploit DB Packet Storm
212904 - fortinet fortios The SSL-VPN feature in Fortinet FortiOS before 4.3.13 only checks the first byte of the TLS MAC in finished messages, which makes it easier for remote attackers to spoof encrypted content via a craft… CWE-20
 Improper Input Validation  		CVE-2015-5965 2024-11-21 11:34 2015-08-11 Show GitHub Exploit DB Packet Storm
212905 - mozilla firefox_os Integer signedness error in the SharedBufferManagerParent::RecvAllocateGrallocBuffer function in the buffer-management implementation in the graphics layer in Mozilla Firefox OS before 2.2 might allo… CWE-189
Numeric Errors 		CVE-2015-5962 2024-11-21 11:34 2015-08-8 Show GitHub Exploit DB Packet Storm
212906 - mozilla firefox_os The COPPA error page in the Accounts setup dialog in Mozilla Firefox OS before 2.2 embeds content from an external web server URL into the System process, which allows man-in-the-middle attackers to … CWE-264
Permissions, Privileges, and Access Controls 		CVE-2015-5961 2024-11-21 11:34 2015-08-8 Show GitHub Exploit DB Packet Storm
212907 - mozilla firefox_os Mozilla Firefox OS before 2.2 allows physically proximate attackers to bypass the pass-code protection mechanism and access USB Mass Storage (UMS) media volumes by using the USB interface for a mount… CWE-284
Improper Access Control 		CVE-2015-5960 2024-11-21 11:34 2015-08-8 Show GitHub Exploit DB Packet Storm
212908 9.8 CRITICAL
Network 		yiiframework yii web\ViewAction in Yii (aka Yii2) 2.x before 2.0.5 allows attackers to execute any local .php file via a relative path in the view parameeter. CWE-22
Path Traversal 		CVE-2015-5467 2024-11-21 11:33 2023-09-21 Show GitHub Exploit DB Packet Storm
212909 9.8 CRITICAL
Network 		google android An issue was discovered on Samsung mobile devices with KK(4.4) and later software through 2015-05-13. There is a buffer overflow in datablock_write because the amount of received data is not validate… CWE-120
Classic Buffer Overflow 		CVE-2015-5524 2024-11-21 11:33 2020-04-11 Show GitHub Exploit DB Packet Storm
212910 9.8 CRITICAL
Network 		lenovo b50-10_firmware
flex_2_pro-15_firmware
edge_15_firmware
flex_3-1470_firmware
flex_3-1570_firmware
flex_3-1120_firmware
g40-80_firmware
g50-80_firmware
g50-80_touch_firmware 		MITRE is populating this ID because it was assigned prior to Lenovo becoming a CNA. A buffer overflow vulnerability was reported, (fixed and publicly disclosed in 2015) in the Lenovo Service Engine (… CWE-120
Classic Buffer Overflow 		CVE-2015-5684 2024-11-21 11:33 2020-03-28 Show GitHub Exploit DB Packet Storm