Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 12, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
209081 7.5 危険 The Cacti Group - Cacti の include/top_graph_header.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2015-8369 2015-12-21 16:44 2015-12-12 Show GitHub Exploit DB Packet Storm
209082 2.3 注意 シマンテック - Symantec Endpoint Encryption のクライアントの Framework Service の EACommunicatorSrv.exe における資格情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2015-6556 2015-12-21 16:30 2015-12-14 Show GitHub Exploit DB Packet Storm
209083 6 警告 ntop - ntopng におけるログインコンテキストを変更される脆弱性 CWE-Other
その他
CVE-2015-8368 2015-12-21 16:23 2015-12-1 Show GitHub Exploit DB Packet Storm
209084 7.8 危険 Xen プロジェクト - Xen の libxl toolstack ライブラリにおけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2015-8341 2015-12-21 15:19 2015-12-8 Show GitHub Exploit DB Packet Storm
209085 4.7 警告 シトリックス・システムズ
Xen プロジェクト
- Xen の common/memory.c の memory_exchange 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2015-8340 2015-12-21 15:19 2015-12-8 Show GitHub Exploit DB Packet Storm
209086 4.7 警告 シトリックス・システムズ
Xen プロジェクト
- Xen の common/memory.c の memory_exchange 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2015-8339 2015-12-21 15:19 2015-12-8 Show GitHub Exploit DB Packet Storm
209087 7.2 危険 Xen プロジェクト - Xen におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2015-8338 2015-12-21 15:19 2015-12-8 Show GitHub Exploit DB Packet Storm
209088 7.5 危険 Cool Video Gallery project - WordPress 用 Cool Video Gallery プラグインの lib/core.php における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認
CVE-2015-7527 2015-12-21 14:29 2015-11-29 Show GitHub Exploit DB Packet Storm
209089 4.3 警告 The Foreman - Foreman の情報のポップアップにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2015-7518 2015-12-21 13:46 2015-12-9 Show GitHub Exploit DB Packet Storm
209090 7.2 危険 GNU Project
レッドハット
- GNU C Library の Name Service Switch の nss_files/files-XXX.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2015-5277 2015-12-21 13:39 2015-09-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 12, 2026, 4:20 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
298131 - redhat
opensuse
enterprise_linux
opensuse
The SUSE coreutils-i18n.patch for GNU coreutils allows context-dependent attackers to cause a denial of service (segmentation fault and crash) via a long string to the sort command, when using the (1… CWE-20
 Improper Input Validation 
CVE-2013-0221 2024-11-21 10:47 2013-11-24 Show GitHub Exploit DB Packet Storm
298132 - redhat
clusterlabs
enterprise_linux
pacemaker
Pacemaker 1.1.10, when remote Cluster Information Base (CIB) configuration or resource management is enabled, does not limit the duration of connections to the blocking sockets, which allows remote a… CWE-399
 Resource Management Errors
CVE-2013-0281 2024-11-21 10:47 2013-11-23 Show GitHub Exploit DB Packet Storm
298133 - ibm lotus_sametime The Enterprise Meeting Server in IBM Lotus Sametime 8.5.2 and 8.5.2.1 allows remote authenticated users to spoof the origin of shared links by leveraging meeting-attendance privileges. CWE-264
Permissions, Privileges, and Access Controls
CVE-2013-0537 2024-11-21 10:47 2013-11-9 Show GitHub Exploit DB Packet Storm
298134 - f5 nginx The default configuration of nginx, possibly 1.3.13 and earlier, uses world-readable permissions for the (1) access.log and (2) error.log files, which allows local users to obtain sensitive informati… CWE-264
Permissions, Privileges, and Access Controls
CVE-2013-0337 2024-11-21 10:47 2013-10-27 Show GitHub Exploit DB Packet Storm
298135 - ibm storwize_v7000_unified_software
storwize_v7000_unified
IBM Storwize V7000 Unified 1.3.x and 1.4.x before 1.4.2.0 does not properly handle device files that are created with the NFS protocol but accessed with a non-NFS protocol, which allows remote authen… CWE-20
 Improper Input Validation 
CVE-2013-0500 2024-11-21 10:47 2013-10-17 Show GitHub Exploit DB Packet Storm
298136 - ibm infosphere_optim_data_growth_for_oracle_e-business_suite Cross-site request forgery (CSRF) vulnerability in the Optim E-Business Console in IBM Data Growth Solution for Oracle E-business Suite 6.0 through 9.1 allows remote authenticated users to hijack the… CWE-352
 Origin Validation Error
CVE-2013-0580 2024-11-21 10:47 2013-10-10 Show GitHub Exploit DB Packet Storm
298137 - ibm infosphere_optim_data_growth_for_oracle_e-business_suite The Optim E-Business Console in IBM Data Growth Solution for Oracle E-business Suite 6.0 through 9.1 allows remote attackers to impersonate arbitrary users by leveraging access to a legitimate user's… CWE-264
Permissions, Privileges, and Access Controls
CVE-2013-0579 2024-11-21 10:47 2013-10-10 Show GitHub Exploit DB Packet Storm
298138 - ibm infosphere_optim_data_growth_for_oracle_e-business_suite The Optim E-Business Console in IBM Data Growth Solution for Oracle E-business Suite 6.0 through 9.1 allows remote authenticated users to bypass intended access restrictions and create, modify, or de… CWE-264
Permissions, Privileges, and Access Controls
CVE-2013-0577 2024-11-21 10:47 2013-10-10 Show GitHub Exploit DB Packet Storm
298139 - ibm maximo_asset_management SQL injection vulnerability in IBM Maximo Asset Management 6.2 through 6.2.8 and 7.1 through 7.1.1.12 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors. CWE-89
SQL Injection
CVE-2013-0451 2024-11-21 10:47 2013-10-1 Show GitHub Exploit DB Packet Storm
298140 - libarchive
canonical
opensuse
fedoraproject
freebsd
libarchive
ubuntu_linux
opensuse
fedora
freebsd
Integer signedness error in the archive_write_zip_data function in archive_write_set_format_zip.c in libarchive 3.1.2 and earlier, when running on 64-bit machines, allows context-dependent attackers … CWE-189
Numeric Errors
CVE-2013-0211 2024-11-21 10:47 2013-10-1 Show GitHub Exploit DB Packet Storm