Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
228991	4.6	警告	Sitaram Chamarty	-	gitolite におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2012-4506	2012-10-24 11:28	2012-10-10	Show	GitHub Exploit DB Packet Storm

228992	4.4	警告	Michael Rash.	-	fwknop の client/fwknop.c におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2012-4436	2012-10-24 11:07	2012-09-4	Show	GitHub Exploit DB Packet Storm

228993	4	警告	Michael Rash.	-	fwknop におけるサービス運用妨害 (サーバクラッシュ) の脆弱性	CWE-20 不適切な入力確認	CVE-2012-4435	2012-10-24 11:07	2012-09-4	Show	GitHub Exploit DB Packet Storm

228994	7.5	危険	OpenStack	-	OpenStack Object Storage (swift) における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2012-4406	2012-10-24 11:07	2012-09-13	Show	GitHub Exploit DB Packet Storm

228995	7.5	危険	jCore	-	jCore の admin/index.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2012-4232	2012-10-24 11:07	2012-08-12	Show	GitHub Exploit DB Packet Storm

228996	4.3	警告	jCore	-	jCore の admin/index.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-4231	2012-10-24 11:07	2012-08-12	Show	GitHub Exploit DB Packet Storm

228997	5	警告	Django Software Foundation	-	Django におけるサービス運用妨害 (プロセスまたはスレッド消費) の脆弱性	CWE-119 バッファエラー	CVE-2012-3444	2012-10-24 10:44	2012-07-30	Show	GitHub Exploit DB Packet Storm

228998	4.3	警告	OTRS プロジェクト	-	OTRS にクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-4751	2012-10-23 16:09	2012-10-18	Show	GitHub Exploit DB Packet Storm

228999	6.4	警告	サン・マイクロシステムズ	-	Oracle Java SE の Java Runtime Environment (JRE) におけるライブラリの処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2012-1726	2012-10-23 15:58	2012-06-12	Show	GitHub Exploit DB Packet Storm

229000	7.8	危険	Novell	-	ZENworks Asset Management に情報漏えいの脆弱性	CWE-255 証明書・パスワード管理	CVE-2012-4933	2012-10-23 15:17	2012-10-16	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:April 25, 2026, 4:08 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
211821	5.3	MEDIUM Network	radicale	radicale	Radicale before 1.1 allows remote authenticated users to bypass owner_write and owner_only limitations via regex metacharacters in the user name, as demonstrated by ".*".	CWE-264 Permissions, Privileges, and Access Controls	CVE-2015-8748	2024-11-21 11:39	2016-02-4	Show	GitHub Exploit DB Packet Storm

211822	10.0	CRITICAL Network	radicale	radicale	The multifilesystem storage backend in Radicale before 1.1 allows remote attackers to read or write to arbitrary files via a crafted component name.	CWE-20 Improper Input Validation	CVE-2015-8747	2024-11-21 11:39	2016-02-4	Show	GitHub Exploit DB Packet Storm

211823	6.5	MEDIUM Network	libtiff debian	libtiff debian_linux	tif_luv.c in libtiff allows attackers to cause a denial of service (out-of-bounds reads) via a crafted TIFF image.	CWE-125 Out-of-bounds Read	CVE-2015-8783	2024-11-21 11:39	2016-02-2	Show	GitHub Exploit DB Packet Storm

211824	6.5	MEDIUM Network	debian libtiff	debian_linux libtiff	tif_luv.c in libtiff allows attackers to cause a denial of service (out-of-bounds writes) via a crafted TIFF image, a different vulnerability than CVE-2015-8781.	CWE-787 Out-of-bounds Write	CVE-2015-8782	2024-11-21 11:39	2016-02-2	Show	GitHub Exploit DB Packet Storm

211825	6.5	MEDIUM Network	debian libtiff	debian_linux libtiff	tif_luv.c in libtiff allows attackers to cause a denial of service (out-of-bounds write) via an invalid number of samples per pixel in a LogL compressed TIFF image, a different vulnerability than CVE…	CWE-787 Out-of-bounds Write	CVE-2015-8781	2024-11-21 11:39	2016-02-2	Show	GitHub Exploit DB Packet Storm

211826	7.5	HIGH Network	mcafee	file_lock	Stack-based buffer overflow in McPvDrv.sys 4.6.111.0 in McAfee File Lock 5.x in McAfee Total Protection allows attackers to cause a denial of service (system crash) via a long vault GUID in an ioctl …	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2015-8773	2024-11-21 11:39	2016-01-30	Show	GitHub Exploit DB Packet Storm

211827	9.1	CRITICAL Network	mcafee	file_lock	McPvDrv.sys 4.6.111.0 in McAfee File Lock 5.x in McAfee Total Protection allows local users to obtain sensitive information from kernel memory or cause a denial of service (system crash) via a large …	CWE-19 Data Processing Errors	CVE-2015-8772	2024-11-21 11:39	2016-01-30	Show	GitHub Exploit DB Packet Storm

211828	6.5	MEDIUM Network	roundcube	roundcube_webmail	Absolute path traversal vulnerability in program/steps/addressbook/photo.inc in Roundcube before 1.0.6 and 1.1.x before 1.1.2 allows remote authenticated users to read arbitrary files via a full path…	CWE-22 Path Traversal	CVE-2015-8794	2024-11-21 11:39	2016-01-30	Show	GitHub Exploit DB Packet Storm

211829	6.1	MEDIUM Network	roundcube	webmail	Cross-site scripting (XSS) vulnerability in program/include/rcmail.php in Roundcube before 1.0.6 and 1.1.x before 1.1.2 allows remote attackers to inject arbitrary web script or HTML via the _mbox pa…	CWE-79 Cross-site Scripting	CVE-2015-8793	2024-11-21 11:39	2016-01-30	Show	GitHub Exploit DB Packet Storm

211830	5.3	MEDIUM Network	matroska opensuse	libmatroska leap opensuse	The KaxInternalBlock::ReadData function in libMatroska before 1.4.4 allows context-dependent attackers to obtain sensitive information from process heap memory via crafted EBML lacing, which triggers…	CWE-119 CWE-200 Incorrect Access of Indexable Resource ('Range Error') Information Exposure	CVE-2015-8792	2024-11-21 11:39	2016-01-30	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed