Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
229061	5.1	警告	GNOME Project	-	libgdata におけるユーザ名およびパスワードを取得される脆弱性	CWE-20 不適切な入力確認	CVE-2012-1177	2012-10-22 11:03	2012-08-26	Show	GitHub Exploit DB Packet Storm

229062	5	警告	Ingy dot Net	-	Perl 用 YAML::LibYAML モジュールにおけるフォーマットストリングの脆弱性	CWE-134 書式文字列の問題	CVE-2012-1152	2012-10-22 11:01	2012-09-9	Show	GitHub Exploit DB Packet Storm

229063	2.1	注意	オラクル	-	Oracle Fusion Middleware の Oracle WebCenter Sites における ImagePicker の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2012-5065	2012-10-19 18:18	2012-10-16	Show	GitHub Exploit DB Packet Storm

229064	10	危険	サン・マイクロシステムズオラクル	-	Oracle Fusion Middleware の Oracle JRockit における脆弱性	CWE-noinfo 情報不足	CVE-2012-3202	2012-10-19 18:17	2012-10-16	Show	GitHub Exploit DB Packet Storm

229065	4.3	警告	オラクル	-	Oracle Fusion Middleware の Oracle BI Publisher における Administration の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2012-3194	2012-10-19 18:12	2012-10-16	Show	GitHub Exploit DB Packet Storm

229066	3.5	注意	オラクル	-	Oracle Fusion Middleware の Oracle BI Publisher における Administration の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2012-3193	2012-10-19 18:11	2012-10-16	Show	GitHub Exploit DB Packet Storm

229067	4.9	警告	オラクル	-	Oracle Fusion Middleware の Oracle WebCenter Sites における Advanced UI の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2012-3186	2012-10-19 18:11	2012-10-16	Show	GitHub Exploit DB Packet Storm

229068	4.9	警告	オラクル	-	Oracle Fusion Middleware の Oracle WebCenter Sites における Advanced UI の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2012-3185	2012-10-19 18:10	2012-10-16	Show	GitHub Exploit DB Packet Storm

229069	4.3	警告	オラクル	-	Oracle Fusion Middleware の Oracle WebCenter Sites における Advanced UI の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2012-3184	2012-10-19 18:10	2012-10-16	Show	GitHub Exploit DB Packet Storm

229070	4.9	警告	オラクル	-	Oracle Fusion Middleware の Oracle Fusion Middleware における Advanced UI の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2012-3183	2012-10-19 18:09	2012-10-16	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:April 25, 2026, 4:08 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
212461	7.3	HIGH Network	hospira	communication_engine lifecare_pca_infusion_system	Stack-based buffer overflow in Hospira Communication Engine (CE) before 1.2 in LifeCare PCA Infusion System 5.07, Plum A+ Infusion System 13.40, and Plum A+3 Infusion System 13.40 allows remote attac…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2015-7909	2024-11-21 11:37	2016-01-22	Show	GitHub Exploit DB Packet Storm

212462	3.7	LOW Network	netapp	data_ontap	NetApp Data ONTAP before 8.2.4P1, when 7-Mode and HTTP access are enabled, allows remote attackers to obtain sensitive volume information via unspecified vectors.	CWE-200 Information Exposure	CVE-2015-7886	2024-11-21 11:37	2016-01-18	Show	GitHub Exploit DB Packet Storm

212463	3.7	LOW Network	f5	big-ip_analytics big-ip_application_acceleration_manager big-ip_link_controller big-ip_advanced_firewall_manager big-ip_policy_enforcement_manager big-ip_local_traffic_manager big-i…	BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, Link Controller, and PEM 12.0.0 before HF1, when the TCP profile for a virtual server is configured with Congestion Metrics Cache enabled, allow remote atta…	CWE-20 Improper Input Validation	CVE-2015-7759	2024-11-21 11:37	2016-01-13	Show	GitHub Exploit DB Packet Storm

212464	7.8	HIGH Local	huawei	p8_firmware mate_7_firmware	Heap-based buffer overflow in the HIFI driver in Huawei Mate 7 phones with software MT7-UL00 before MT7-UL00C17B354, MT7-TL10 before MT7-TL10C00B354, MT7-TL00 before MT7-TL00C01B354, and MT7-CL00 bef…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2015-8088	2024-11-21 11:37	2016-01-13	Show	GitHub Exploit DB Packet Storm

212465	6.1	MEDIUM Network	ssp-europe	secure_data_space	Multiple cross-site scripting (XSS) vulnerabilities in Secure Data Space SDS-API before 3.5.7 allow remote attackers to inject arbitrary web script or HTML via the (1) PATH_INFO to api/v3/public/shar…	CWE-79 Cross-site Scripting	CVE-2015-7706	2024-11-21 11:37	2016-01-12	Show	GitHub Exploit DB Packet Storm

212466	9.6	CRITICAL Network	unitronics	visilogic_oplc_ide	Heap-based buffer overflow in Unitronics VisiLogic OPLC IDE before 9.8.09 allows remote attackers to execute arbitrary code via a long vlp filename.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2015-7939	2024-11-21 11:37	2016-01-9	Show	GitHub Exploit DB Packet Storm

212467	9.8	CRITICAL Network	advantech	eki-1321_series_firmware eki-1322_series_firmware	Advantech EKI-132x devices with firmware before 2015-12-31 allow remote attackers to bypass authentication via unspecified vectors.	CWE-287 Improper Authentication	CVE-2015-7938	2024-11-21 11:37	2016-01-9	Show	GitHub Exploit DB Packet Storm

212468	5.9	MEDIUM Network	mozilla opensuse canonical	network_security_services leap opensuse firefox ubuntu_linux	Mozilla Network Security Services (NSS) before 3.20.2, as used in Mozilla Firefox before 43.0.2 and Firefox ESR 38.x before 38.5.2, does not reject MD5 signatures in Server Key Exchange messages in T…	CWE-19 Data Processing Errors	CVE-2015-7575	2024-11-21 11:37	2016-01-9	Show	GitHub Exploit DB Packet Storm

212469	3.3	LOW Local	opensuse gummi_project	leap opensuse gummi	Gummi 0.6.5 allows local users to write to arbitrary files via a symlink attack on a temporary dot file that uses the name of an existing file and a (1) .aux, (2) .log, (3) .out, (4) .pdf, or (5) .to…	CWE-59 Link Following	CVE-2015-7758	2024-11-21 11:37	2016-01-9	Show	GitHub Exploit DB Packet Storm

212470	8.1	HIGH Network	juniper	screenos	Juniper ScreenOS before 6.3.0r21, when ssh-pka is configured and enabled, allows remote attackers to cause a denial of service (system crash) or execute arbitrary code via crafted SSH negotiation.	CWE-20 Improper Input Validation	CVE-2015-7754	2024-11-21 11:37	2016-01-9	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed