Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
228571 6.8 警告 Pattern Insight - Pattern Insight の Web インタフェースにおける Web セッションをハイジャックされる脆弱性 CWE-Other
その他
CVE-2012-4937 2012-11-20 15:14 2012-11-18 Show GitHub Exploit DB Packet Storm
228572 6.8 警告 Pattern Insight - Pattern Insight の Web インタフェースにおけるクリックジャッキング攻撃を実行される脆弱性 CWE-Other
その他
CVE-2012-4936 2012-11-20 15:12 2012-11-18 Show GitHub Exploit DB Packet Storm
228573 6.8 警告 Pattern Insight - Pattern Insight の Web インタフェースにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2012-4935 2012-11-20 15:10 2012-11-18 Show GitHub Exploit DB Packet Storm
228574 5 警告 Marko Kreen - PostgreSQL 用 PgBouncer pooler におけるサービス運用妨害 (デーモンの停止) の脆弱性 CWE-119
バッファエラー
CVE-2012-4575 2012-11-20 15:00 2012-11-18 Show GitHub Exploit DB Packet Storm
228575 4.3 警告 Tom Wilkason - SnackAmp におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2012-5917 2012-11-20 14:59 2012-11-17 Show GitHub Exploit DB Packet Storm
228576 5 警告 Neocrome - Neocrome Seditio における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2012-5916 2012-11-20 14:59 2012-11-17 Show GitHub Exploit DB Packet Storm
228577 5 警告 Neocrome - Neocrome Seditio における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2012-5915 2012-11-20 14:58 2012-11-17 Show GitHub Exploit DB Packet Storm
228578 2.6 注意 Neocrome - Neocrome Seditio の system/functions.php 内の sed_import 関数におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-5914 2012-11-20 14:57 2012-11-17 Show GitHub Exploit DB Packet Storm
228579 4.3 警告 WordPress Integrator Project - WordPress 用 WordPress Integrator モジュールの wp-integrator.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-5913 2012-11-20 14:56 2012-11-17 Show GitHub Exploit DB Packet Storm
228580 7.5 危険 Pico - PicoPublisher における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2012-5912 2012-11-20 14:55 2012-11-17 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 20, 2026, 4:09 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
212161 - pentaho data_integration
business_analytics
The GetResource servlet in Pentaho Business Analytics (BA) Suite 4.5.x, 4.8.x, and 5.0.x through 5.2.x and Pentaho Data Integration (PDI) Suite 4.3.x, 4.4.x, and 5.0.x through 5.2.x does not restrict… CWE-200
Information Exposure
CVE-2015-6940 2024-11-21 11:35 2015-09-23 Show GitHub Exploit DB Packet Storm
212162 - adobe
google
flash_player
air
android
air_sdk
air_sdk_\&_compiler
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.241 and 19.x before 19.0.0.185 on Windows and OS X and before 11.2.202.521 on Linux, Adobe AIR before 19.0.0.190, Adobe AIR SDK before… NVD-CWE-Other
CVE-2015-6682 2024-11-21 11:35 2015-09-22 Show GitHub Exploit DB Packet Storm
212163 - adobe air
flash_player
air_sdk
air_sdk_\&_compiler
Adobe Flash Player before 18.0.0.241 and 19.x before 19.0.0.185 on Windows and OS X and before 11.2.202.521 on Linux, Adobe AIR before 19.0.0.190, Adobe AIR SDK before 19.0.0.190, and Adobe AIR SDK &… CWE-200
Information Exposure
CVE-2015-6679 2024-11-21 11:35 2015-09-22 Show GitHub Exploit DB Packet Storm
212164 - adobe
google
flash_player
air
air_sdk
air_sdk_\&_compiler
android
Buffer overflow in Adobe Flash Player before 18.0.0.241 and 19.x before 19.0.0.185 on Windows and OS X and before 11.2.202.521 on Linux, Adobe AIR before 19.0.0.190, Adobe AIR SDK before 19.0.0.190, … CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2015-6678 2024-11-21 11:35 2015-09-22 Show GitHub Exploit DB Packet Storm
212165 - adobe
google
flash_player
air
air_sdk
air_sdk_\&_compiler
android
Adobe Flash Player before 18.0.0.241 and 19.x before 19.0.0.185 on Windows and OS X and before 11.2.202.521 on Linux, Adobe AIR before 19.0.0.190, Adobe AIR SDK before 19.0.0.190, and Adobe AIR SDK &… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2015-6677 2024-11-21 11:35 2015-09-22 Show GitHub Exploit DB Packet Storm
212166 - adobe
google
air
air_sdk
air_sdk_\&_compiler
flash_player
android
Buffer overflow in Adobe Flash Player before 18.0.0.241 and 19.x before 19.0.0.185 on Windows and OS X and before 11.2.202.521 on Linux, Adobe AIR before 19.0.0.190, Adobe AIR SDK before 19.0.0.190, … CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2015-6676 2024-11-21 11:35 2015-09-22 Show GitHub Exploit DB Packet Storm
212167 - jupyter
fedoraproject
opensuse
ipython
notebook
fedora
opensuse
Cross-site scripting (XSS) vulnerability in the file browser in notebook/notebookapp.py in IPython Notebook before 3.2.2 and Jupyter Notebook 4.0.x before 4.0.5 allows remote attackers to inject arbi… CWE-79
Cross-site Scripting
CVE-2015-6938 2024-11-21 11:35 2015-09-22 Show GitHub Exploit DB Packet Storm
212168 - vboxcomm satellite_express_protocol The ndvbs module in VBox Communications Satellite Express Protocol 2.3.17.3 allows local users to write to arbitrary physical memory locations and gain privileges via a 0x00000ffd ioctl call. NVD-CWE-Other
CVE-2015-6923 2024-11-21 11:35 2015-09-22 Show GitHub Exploit DB Packet Storm
212169 - xiph vorbis-tools Buffer overflow in the aiff_open function in oggenc/audio.c in vorbis-tools 1.4.0 and earlier allows remote attackers to cause a denial of service (crash) via a crafted AIFF file. CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2015-6749 2024-11-21 11:35 2015-09-22 Show GitHub Exploit DB Packet Storm
212170 - symantec web_gateway Multiple SQL injection vulnerabilities in a PHP script in the management console on Symantec Web Gateway (SWG) appliances with software before 5.2.2 DB 5.0.0.1277 allow remote authenticated users to … CWE-89
SQL Injection
CVE-2015-6548 2024-11-21 11:35 2015-09-21 Show GitHub Exploit DB Packet Storm