Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
228861	6.4	警告	Gecad Technologies	-	Axigen Free Mail Server にディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2012-4940	2012-11-2 16:48	2012-10-31	Show	GitHub Exploit DB Packet Storm

228862	4.3	警告	SolarWinds	-	Orion IPAM にクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-4939	2012-11-2 16:48	2012-10-31	Show	GitHub Exploit DB Packet Storm

228863	3.5	注意	Justin Dodge	-	Drupal 用 Hotblocks モジュールの設定ページにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-5705	2012-11-2 16:16	2012-08-15	Show	GitHub Exploit DB Packet Storm

228864	3.5	注意	Justin Dodge	-	Drupal 用 Hotblocks モジュールにおけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2012-5704	2012-11-2 16:15	2012-08-15	Show	GitHub Exploit DB Packet Storm

228865	7.8	危険	TP-LINK Technologies	-	TP-LINK TL-WR841N ルータ上で稼働する Web ベースの管理機能におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2012-5687	2012-11-2 16:13	2012-11-1	Show	GitHub Exploit DB Packet Storm

228866	10	危険	シーメンス	-	Siemens SiPass integrated のサーバにおける任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2012-5409	2012-11-2 16:03	2012-10-8	Show	GitHub Exploit DB Packet Storm

228867	3.5	注意	Nancy Wichmann	-	Drupal 用 Announcements モジュールにおけるノードのアクセス制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-4500	2012-11-2 15:06	2012-08-28	Show	GitHub Exploit DB Packet Storm

228868	5	警告	Matthias Hutterer	-	Drupal 用 Email Field モジュールにおけるエンティティに格納されたアドレスに電子メールを送信される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-4499	2012-11-2 15:04	2012-08-29	Show	GitHub Exploit DB Packet Storm

228869	2.1	注意	inclind	-	Drupal 用 Custom Publishing Options モジュールにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-4496	2012-11-2 15:04	2012-08-14	Show	GitHub Exploit DB Packet Storm

228870	4	警告	Mime Mail Module Project	-	Drupal 用 Mime Mail モジュールにおける任意のファイルを添付ファイルとして送信される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-4495	2012-11-2 15:01	2012-08-8	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:April 24, 2026, 4 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
211741	6.6	MEDIUM Local	apple	quicktime	Apple QuickTime before 7.7.9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted movie file, a different vulnerabili…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2015-7085	2024-11-21 11:36	2016-01-9	Show	GitHub Exploit DB Packet Storm

211742	10.0	CRITICAL Network	colorscore_project	colorscore	The initialize method in the Histogram class in lib/colorscore/histogram.rb in the colorscore gem before 0.0.5 for Ruby allows context-dependent attackers to execute arbitrary code via shell metachar…	CWE-77 Command Injection	CVE-2015-7541	2024-11-21 11:36	2016-01-9	Show	GitHub Exploit DB Packet Storm

211743	9.0	CRITICAL Network	qemu redhat debian oracle	qemu enterprise_linux_eus enterprise_linux_desktop enterprise_linux_server enterprise_linux_workstation openstack virtualization debian_linux linux	Buffer overflow in the pcnet_receive function in hw/net/pcnet.c in QEMU, when a guest NIC has a larger MTU, allows remote attackers to cause a denial of service (guest OS crash) or execute arbitrary …	CWE-120 Classic Buffer Overflow	CVE-2015-7512	2024-11-21 11:36	2016-01-9	Show	GitHub Exploit DB Packet Storm

211744	9.8	CRITICAL Network	libtiff	libtiff	The _TIFFVGetField function in tif_dir.c in libtiff 4.0.6 allows attackers to cause a denial of service (invalid memory write and crash) or possibly have unspecified other impact via crafted field da…	CWE-254 7PK - Security Features	CVE-2015-7554	2024-11-21 11:36	2016-01-9	Show	GitHub Exploit DB Packet Storm

211745	3.7	LOW Network	phusionpassenger	phusion_passenger	agent/Core/Controller/SendRequest.cpp in Phusion Passenger before 4.0.60 and 5.0.x before 5.0.22, when used in Apache integration mode or in standalone mode without a filtering proxy, allows remote a…	CWE-20 Improper Input Validation	CVE-2015-7519	2024-11-21 11:36	2016-01-9	Show	GitHub Exploit DB Packet Storm

211746	7.8	HIGH Local	fortinet	forticlient	Fortinet FortiClient Linux SSLVPN before build 2313, when installed on Linux in a home directory that is world readable and executable, allows local users to gain privileges via the helper/subroc set…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2015-7362	2024-11-21 11:36	2016-01-9	Show	GitHub Exploit DB Packet Storm

211747	4.7	MEDIUM Local	puppet	puppet_enterprise	Puppet Server in Puppet Enterprise before 3.8.x before 3.8.3 and 2015.2.x before 2015.2.3 uses world-readable permissions for the private key of the Certification Authority (CA) certificate during th…	CWE-200 Information Exposure	CVE-2015-7328	2024-11-21 11:36	2016-01-9	Show	GitHub Exploit DB Packet Storm

211748	4.7	MEDIUM Local	ibm	sterling_b2b_integrator	IBM Sterling B2B Integrator 5.2 allows local users to obtain sensitive cleartext web-services information by leveraging database access.	CWE-200 Information Exposure	CVE-2015-7438	2024-11-21 11:36	2016-01-3	Show	GitHub Exploit DB Packet Storm

211749	4.3	MEDIUM Network	ibm	maximo_for_transportation maximo_for_utilities maximo_asset_management smartcloud_control_desk maximo_for_life_sciences maximo_asset_management_essentials maximo_for_nuclear_power	IBM Maximo Asset Management 7.5 before 7.5.0.9 FP9 and 7.6 before 7.6.0.3 FP3 and Maximo Asset Management 7.5 before 7.5.0.9 FP9, 7.5.1, and 7.6 before 7.6.0.3 FP3 for SmartCloud Control Desk allow r…	CWE-200 Information Exposure	CVE-2015-7452	2024-11-21 11:36	2016-01-3	Show	GitHub Exploit DB Packet Storm

211750	9.8	CRITICAL Network	ibm	sterling_integrator tivoli_common_reporting sterling_b2b_integrator websphere_application_server watson_content_analytics watson_explorer_analytical_components watson_explorer_annot…	Serialized-object interfaces in certain IBM analytics, business solutions, cognitive, IT infrastructure, and mobile and social products allow remote attackers to execute arbitrary commands via a craf…	NVD-CWE-noinfo	CVE-2015-7450	2024-11-21 11:36	2016-01-3	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed