Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
228801	5.8	警告	ACRA	-	Android 用 ACRA ライブラリにおける SSL サーバを偽装される脆弱性	CWE-20 不適切な入力確認	CVE-2012-5812	2012-11-7 17:38	2012-11-4	Show	GitHub Exploit DB Packet Storm

228802	5.8	警告	Zen Cart First Data	-	Zen Cart の LinkPoint モジュールにおける SSL サーバを偽装される脆弱性	CWE-20 不適切な入力確認	CVE-2012-5808	2012-11-7 16:40	2012-11-4	Show	GitHub Exploit DB Packet Storm

228803	5.8	警告	Zen Cart Authorize.Net	-	Zen Cart の Authorize.Net eCheck モジュールにおける SSL サーバを偽装される脆弱性	CWE-20 不適切な入力確認	CVE-2012-5807	2012-11-7 16:39	2012-11-4	Show	GitHub Exploit DB Packet Storm

228804	5.8	警告	Zen Cart PayPal	-	Zen Cart の PayPal Payments Pro モジュールにおける SSL サーバを偽装される脆弱性	CWE-20 不適切な入力確認	CVE-2012-5806	2012-11-7 16:37	2012-11-4	Show	GitHub Exploit DB Packet Storm

228805	5.8	警告	Zen Cart PayPal	-	Zen Cart の PayPal IPN 機能における SSL サーバを偽装される脆弱性	CWE-20 不適切な入力確認	CVE-2012-5805	2012-11-7 16:36	2012-11-4	Show	GitHub Exploit DB Packet Storm

228806	5.8	警告	CyberSource Corporation Ubercart	-	Ubercart の CyberSource モジュールにおける SSL サーバを偽装される脆弱性	CWE-20 不適切な入力確認	CVE-2012-5804	2012-11-7 16:35	2012-11-4	Show	GitHub Exploit DB Packet Storm

228807	5.8	警告	Hassan Consulting Ubercart	-	Ubercart の Authorize.Net モジュールにおける SSL サーバを偽装される脆弱性	CWE-20 不適切な入力確認	CVE-2012-5803	2012-11-7 16:34	2012-11-4	Show	GitHub Exploit DB Packet Storm

228808	5.8	警告	Ubercart	-	Ubercart の PayPal モジュールにおける SSL サーバを偽装される脆弱性	CWE-20 不適切な入力確認	CVE-2012-5802	2012-11-7 16:34	2012-11-4	Show	GitHub Exploit DB Packet Storm

228809	5.8	警告	PrestaShop	-	PrestaShop の PayPal モジュールにおける SSL サーバを偽装される脆弱性	CWE-20 不適切な入力確認	CVE-2012-5801	2012-11-7 16:33	2012-11-4	Show	GitHub Exploit DB Packet Storm

228810	5.8	警告	PrestaShop	-	PrestaShop の eBay モジュールにおける SSL サーバを偽装される脆弱性	CWE-20 不適切な入力確認	CVE-2012-5800	2012-11-7 16:32	2012-11-4	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:April 22, 2026, 4 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
212011	-	mcafee	enterprise_security_manager\/log_manager enterprise_security_manager\/receiver enterprise_security_manager	McAfee Enterprise Security Manager (ESM), Enterprise Security Manager/Log Manager (ESMLM), and Enterprise Security Manager/Receiver (ESMREC) before 9.3.2MR18, 9.4.x before 9.4.2MR8, and 9.5.x before …	CWE-78 OS Command	CVE-2015-7310	2024-11-21 11:36	2015-09-23	Show	GitHub Exploit DB Packet Storm

212012	-	boltcms	bolt	The theme editor in Bolt before 2.2.5 does not check the file extension when renaming files, which allows remote authenticated users to execute arbitrary code by renaming a crafted file and then dire…	CWE-74 Injection	CVE-2015-7309	2024-11-21 11:36	2015-09-23	Show	GitHub Exploit DB Packet Storm

212013	-	drupaldise	cms_updater	Cross-site scripting (XSS) vulnerability in the CMS Updater module 7.x-1.x before 7.x-1.3 for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving t…	CWE-79 Cross-site Scripting	CVE-2015-7307	2024-11-21 11:36	2015-09-22	Show	GitHub Exploit DB Packet Storm

212014	-	drupaldise	cms_updater	The CMS Updater module 7.x-1.x before 7.x-1.3 for Drupal does not properly check access permissions, which allows remote authenticated users to access and change settings by leveraging the "access ad…	CWE-284 Improper Access Control	CVE-2015-7306	2024-11-21 11:36	2015-09-22	Show	GitHub Exploit DB Packet Storm

212015	-	ows	scald	The Scald module 7.x-1.x before 7.x-1.5 for Drupal does not properly restrict access to fields, which allows remote attackers to obtain sensitive atom property information via vectors involving a "de…	CWE-200 Information Exposure	CVE-2015-7305	2024-11-21 11:36	2015-09-22	Show	GitHub Exploit DB Packet Storm

212016	-	drupaljedi	amocrm	Cross-site scripting (XSS) vulnerability in the amoCRM module 7.x-1.x before 7.x-1.2 for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified HTTP POST data.	CWE-79 Cross-site Scripting	CVE-2015-7304	2024-11-21 11:36	2015-09-22	Show	GitHub Exploit DB Packet Storm

212017	-	avira	management_console	Use-after-free vulnerability in the Update Manager service in Avira Management Console allows remote attackers to execute arbitrary code via a large header.	NVD-CWE-Other	CVE-2015-7303	2024-11-21 11:36	2015-09-22	Show	GitHub Exploit DB Packet Storm

212018	-	securifi	almond_firmware almond-2015_firmware	Securifi Almond devices with firmware before AL1-R201EXP10-L304-W34 and Almond-2015 devices with firmware before AL2-R088M use a linear algorithm for selecting the ID value in the header of a DNS que…	NVD-CWE-Other	CVE-2015-7296	2024-11-21 11:36	2015-09-21	Show	GitHub Exploit DB Packet Storm

212019	-	boxoft	boxoft_wav_to_mp3_converter	Buffer overflow in Boxoft WAV to MP3 Converter allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted WAV file.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2015-7243	2024-11-21 11:36	2015-09-19	Show	GitHub Exploit DB Packet Storm

212020	-	sap	netweaver_j2ee_engine	SQL injection vulnerability in the BP_FIND_JOBS_WITH_PROGRAM function module in SAP NetWeaver J2EE Engine 7.40 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.	CWE-89 SQL Injection	CVE-2015-7239	2024-11-21 11:36	2015-09-18	Show	GitHub Exploit DB Packet Storm