Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 6, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
208951	2.1	注意	オラクル	-	Oracle Virtualization の Oracle VM VirtualBox における Core に関する脆弱性	CWE-noinfo 情報不足	CVE-2015-4896	2015-10-23 10:16	2015-10-20	Show	GitHub Exploit DB Packet Storm

208952	4.9	警告	オラクル	-	Oracle Virtualization の Oracle VM VirtualBox における Core に関する脆弱性	CWE-noinfo 情報不足	CVE-2015-4856	2015-10-23 10:16	2015-10-20	Show	GitHub Exploit DB Packet Storm

208953	4.9	警告	オラクル	-	Oracle Virtualization の Oracle VM VirtualBox における Core に関する脆弱性	CWE-noinfo 情報不足	CVE-2015-4813	2015-10-23 10:16	2015-10-20	Show	GitHub Exploit DB Packet Storm

208954	4.3	警告	オラクル	-	Oracle Communications Applications の Oracle Communications Convergence における Mail Proxy に関する脆弱性	CWE-noinfo 情報不足	CVE-2015-4793	2015-10-23 09:51	2015-10-20	Show	GitHub Exploit DB Packet Storm

208955	10	危険	オラクル	-	Oracle Communications Applications の複数のコンポーネントにおける PMAC に関する脆弱性	CWE-noinfo 情報不足	CVE-2015-2608	2015-10-23 09:51	2015-10-20	Show	GitHub Exploit DB Packet Storm

208956	7.5	危険	ICU project Google オラクル	-	Google Chrome で使用される International Components for Unicode の i18n/ucol.cpp の collator の実装におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2014-7940	2015-10-23 09:49	2014-11-26	Show	GitHub Exploit DB Packet Storm

208957	3.5	注意	オラクル	-	Oracle Supply Chain Products Suite の Oracle Agile PLM における Security に関する脆弱性	CWE-noinfo 情報不足	CVE-2015-4917	2015-10-23 09:39	2015-10-20	Show	GitHub Exploit DB Packet Storm

208958	3.5	注意	オラクル	-	Oracle Supply Chain Products Suite の Oracle Agile PLM における Security に関する脆弱性	CWE-noinfo 情報不足	CVE-2015-4892	2015-10-23 09:39	2015-10-20	Show	GitHub Exploit DB Packet Storm

208959	5	警告	オラクル	-	Oracle Supply Chain Products Suite の Oracle Configurator における Integration with Peoplesoft に関する脆弱性	CWE-noinfo 情報不足	CVE-2015-4848	2015-10-23 09:39	2015-10-20	Show	GitHub Exploit DB Packet Storm

208960	4.3	警告	オラクル	-	Oracle Supply Chain Products Suite の Oracle Configurator における OCI に関する脆弱性	CWE-noinfo 情報不足	CVE-2015-4847	2015-10-23 09:39	2015-10-20	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 7, 2026, 4:13 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
297841	-		mozilla suse opensuse canonical redhat	firefox seamonkey thunderbird thunderbird_esr linux_enterprise_server linux_enterprise_desktop opensuse linux_enterprise_software_development_kit ubuntu_linux enterprise_li…	Integer overflow in the WebGL subsystem in Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird before 17.0, Thunderbird ESR 10.x before 10.0.11, and SeaMonkey before 2.14 allows…	CWE-190 Integer Overflow or Wraparound	CVE-2012-5835	2024-11-21 10:45	2012-11-21	Show	GitHub Exploit DB Packet Storm

297842	-		mozilla suse opensuse canonical redhat	firefox seamonkey thunderbird thunderbird_esr linux_enterprise_server linux_enterprise_desktop opensuse linux_enterprise_software_development_kit ubuntu_linux enterprise_li…	The texImage2D implementation in the WebGL subsystem in Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird before 17.0, Thunderbird ESR 10.x before 10.0.11, and SeaMonkey befor…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2012-5833	2024-11-21 10:45	2012-11-21	Show	GitHub Exploit DB Packet Storm

297843	8.8	HIGH Network	mozilla redhat canonical opensuse suse	firefox seamonkey thunderbird thunderbird_esr enterprise_linux_server enterprise_linux_workstation enterprise_linux_desktop enterprise_linux_server_eus enterprise_linux_eus	Use-after-free vulnerability in Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird before 17.0, Thunderbird ESR 10.x before 10.0.11, and SeaMonkey before 2.14 on Mac OS X allow…	CWE-416 Use After Free	CVE-2012-5830	2024-11-21 10:45	2012-11-21	Show	GitHub Exploit DB Packet Storm

297844	-		mozilla suse opensuse redhat canonical debian	firefox seamonkey thunderbird thunderbird_esr linux_enterprise_server linux_enterprise_desktop opensuse linux_enterprise_software_development_kit enterprise_linux_server en…	Heap-based buffer overflow in the nsWindow::OnExposeEvent function in Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird before 17.0, Thunderbird ESR 10.x before 10.0.11, and S…	CWE-787 Out-of-bounds Write	CVE-2012-5829	2024-11-21 10:45	2012-11-21	Show	GitHub Exploit DB Packet Storm

297845	-		vmware	esxi esx	The vSphere API in VMware ESXi 4.1 and ESX 4.1 allows remote attackers to cause a denial of service (host daemon crash) via an invalid value in a (1) RetrieveProp or (2) RetrievePropEx SOAP request.	CWE-20 Improper Input Validation	CVE-2012-5703	2024-11-21 10:45	2012-11-20	Show	GitHub Exploit DB Packet Storm

297846	-		adobe	coldfusion	Unspecified vulnerability in Adobe ColdFusion 10 before Update 5, when Internet Information Services (IIS) is used, allows attackers to cause a denial of service via unknown vectors.	NVD-CWE-noinfo	CVE-2012-5674	2024-11-21 10:45	2012-11-20	Show	GitHub Exploit DB Packet Storm

297847	-		google	web_toolkit	Cross-site scripting (XSS) vulnerability in Google Web Toolkit (GWT) 2.4 through 2.5 Final, as used in JBoss Operations Network (ON) 3.1.1 and possibly other products, allows remote attackers to inje…	CWE-79 Cross-site Scripting	CVE-2012-5920	2024-11-21 10:45	2012-11-20	Show	GitHub Exploit DB Packet Storm

297848	-		havalite	cms	Multiple cross-site scripting (XSS) vulnerabilities in Havalite 1.0.4 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) find or (2) replace fields to havalite/find…	CWE-79 Cross-site Scripting	CVE-2012-5919	2024-11-21 10:45	2012-11-19	Show	GitHub Exploit DB Packet Storm

297849	-		razorcms	razorcms	razorCMS 1.2 allows remote authenticated users to access administrator directories and files by creating and deleting a directory.	CWE-264 Permissions, Privileges, and Access Controls	CVE-2012-5918	2024-11-21 10:45	2012-11-19	Show	GitHub Exploit DB Packet Storm

297850	-		flashtux	weechat	Heap-based buffer overflow in WeeChat 0.3.6 through 0.3.9 allows remote attackers to cause a denial of service (crash or hang) and possibly execute arbitrary code via crafted IRC colors that are not …	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2012-5854	2024-11-21 10:45	2012-11-19	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed