Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 4, 2026, 4 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
209231	5	警告	The PHP Group アップル	-	PHP の ext/standard/basic_functions.c の move_uploaded_file の実装における拡張子の制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2015-2348	2015-10-6 10:36	2015-03-18	Show	GitHub Exploit DB Packet Storm

209232	7.5	危険	The PHP Group アップル	-	PHP の ext/standard/var_unserializer.re の process_nested_data 関数における任意のコードを実行される脆弱性	CWE-Other その他	CVE-2015-2787	2015-10-6 10:36	2015-02-3	Show	GitHub Exploit DB Packet Storm

209233	6.8	警告	The PHP Group アップル	-	PHP の ext/exif/exif.c 内の exif_process_unicode 関数における任意のコードを実行される脆弱性	CWE-Other その他	CVE-2015-0232	2015-10-6 10:36	2015-01-22	Show	GitHub Exploit DB Packet Storm

209234	7.5	危険	The PHP Group アップル	-	PHP の ext/standard/var_unserializer.re の process_nested_data 関数における任意のコードを実行される脆弱性	CWE-Other その他	CVE-2015-0231	2015-10-6 10:36	2015-01-22	Show	GitHub Exploit DB Packet Storm

209235	6.9	警告	アップル FreeBSD	-	FreeBSD および Apple iOS のカーネルの libc の stdio 内の fflush.c の __sflush 関数における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2014-8611	2015-10-6 10:34	2014-12-10	Show	GitHub Exploit DB Packet Storm

209236	5	警告	The PHP Group アップル file project	-	PHP の Fileinfo コンポーネントで使用される file の softmagic.c におけるサービス運用妨害 (DoS) の脆弱性	CWE-119 バッファエラー	CVE-2014-9652	2015-10-6 10:34	2014-11-10	Show	GitHub Exploit DB Packet Storm

209237	7.5	危険	The PHP Group アップル	-	PHP の ext/enchant/enchant.c の enchant_broker_request_dict 関数におけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2014-9705	2015-10-6 10:34	2014-12-5	Show	GitHub Exploit DB Packet Storm

209238	5	警告	The PHP Group LibGD project アップル	-	PHP で使用される LibGD の gd_gif_in.c 内の GetCode_ 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-119 バッファエラー	CVE-2014-9709	2015-10-6 10:34	2014-12-13	Show	GitHub Exploit DB Packet Storm

209239	7.5	危険	The PHP Group アップル	-	PHP の CGI コンポーネントの sapi/cgi/cgi_main.c における php-cgi プロセスメモリから重要な情報を取得される脆弱性	CWE-119 バッファエラー	CVE-2014-9427	2015-10-6 10:33	2014-12-30	Show	GitHub Exploit DB Packet Storm

209240	7.5	危険	The PHP Group アップル	-	PHP の Zend Engine の zend_ts_hash.c の zend_ts_hash_graceful_destroy 関数におけるメモリ二重解放の脆弱性	CWE-Other その他	CVE-2014-9425	2015-10-6 10:33	2014-12-29	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 4, 2026, 4:17 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
297921	-	sophos	safeguard_enterprise	The Device Encryption Client component in Sophos SafeGuard Enterprise 6.0, when a volume-based encryption policy is enabled in conjunction with a user-defined key, does not properly block use of exFA…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2012-4736	2024-11-21 10:43	2012-08-30	Show	GitHub Exploit DB Packet Storm

297922	-	vbulletin	vbulletin	SQL injection vulnerability in announcement.php in vBulletin 4.1.10 allows remote attackers to execute arbitrary SQL commands via the announcementid parameter.	CWE-89 SQL Injection	CVE-2012-4686	2024-11-21 10:43	2012-08-29	Show	GitHub Exploit DB Packet Storm

297923	-	arbornetworks	peakflow_sp	Cross-site scripting (XSS) vulnerability in Arbor Networks Peakflow SP 5.1.1 before patch 6, 5.5 before patch 4, and 5.6.0 before patch 1 allows remote attackers to inject arbitrary web script or HTM…	CWE-79 Cross-site Scripting	CVE-2012-4685	2024-11-21 10:43	2012-08-29	Show	GitHub Exploit DB Packet Storm

297924	-	ioserver	ioserver	Directory traversal vulnerability in the XML Server in IOServer before 1.0.19.0, when the Root Directory pathname lacks a trailing \ (backslash) character, allows remote attackers to read arbitrary f…	CWE-22 Path Traversal	CVE-2012-4680	2024-11-21 10:43	2012-08-28	Show	GitHub Exploit DB Packet Storm

297925	-	sourcefabric	newscoop	Cross-site scripting (XSS) vulnerability in admin/login.php in Newscoop before 3.5.5 allows remote attackers to inject arbitrary web script or HTML via the f_user_name parameter.	CWE-79 Cross-site Scripting	CVE-2012-4679	2024-11-21 10:43	2012-08-28	Show	GitHub Exploit DB Packet Storm

297926	-	munin-monitoring	munin	munin-cgi-graph for Munin 2.0 rc4 does not delete temporary files, which allows remote attackers to cause a denial of service (disk consumption) via many requests to an image with unique parameters.	CWE-399 Resource Management Errors	CVE-2012-4678	2024-11-21 10:43	2012-08-27	Show	GitHub Exploit DB Packet Storm

297927	-	google	tunnelblick	Tunnelblick 3.3beta20 and earlier allows local users to gain privileges by using a crafted Info.plist file to control the gOkIfNotSecure value.	CWE-264 Permissions, Privileges, and Access Controls	CVE-2012-4677	2024-11-21 10:43	2012-08-27	Show	GitHub Exploit DB Packet Storm

297928	-	google	tunnelblick	The errorExitIfAttackViaString function in Tunnelblick 3.3beta20 and earlier allows local users to delete arbitrary files by constructing a (1) symlink or (2) hard link, a different vulnerability tha…	CWE-59 Link Following	CVE-2012-4676	2024-11-21 10:43	2012-08-27	Show	GitHub Exploit DB Packet Storm

297929	-	pluxml	pluxml	Cross-site scripting (XSS) vulnerability in PluXml 5.1.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to file update.	CWE-79 Cross-site Scripting	CVE-2012-4675	2024-11-21 10:43	2012-08-27	Show	GitHub Exploit DB Packet Storm

297930	-	pluxml	pluxml	PluXml before 5.1.6 allows remote attackers to obtain the installation path via the PHPSESSID.	CWE-200 Information Exposure	CVE-2012-4674	2024-11-21 10:43	2012-08-27	Show	GitHub Exploit DB Packet Storm