Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 12, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
209691 3.5 注意 Novell
Roundcube.net
- Roundcube Webmail の program/js/app.js におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2015-8105 2015-11-13 16:36 2015-09-9 Show GitHub Exploit DB Packet Storm
209692 6.8 警告 Debian
The Document Foundation
Canonical
Apache Software Foundation
- LibreOffice および Apache OpenOffice におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2015-5214 2015-11-13 16:25 2015-11-4 Show GitHub Exploit DB Packet Storm
209693 6.8 警告 Debian
The Document Foundation
Canonical
Apache Software Foundation
- LibreOffice および Apache OpenOffice における整数オーバーフローの脆弱性 CWE-189
数値処理の問題
CVE-2015-5213 2015-11-13 16:25 2015-11-4 Show GitHub Exploit DB Packet Storm
209694 6.8 警告 Debian
The Document Foundation
Canonical
Apache Software Foundation
- LibreOffice および Apache OpenOffice における整数アンダーフローの脆弱性 CWE-189
数値処理の問題
CVE-2015-5212 2015-11-13 16:25 2015-11-4 Show GitHub Exploit DB Packet Storm
209695 4.3 警告 Debian
The Document Foundation
Canonical
Apache Software Foundation
- LibreOffice および Apache OpenOffice における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2015-4551 2015-11-13 16:25 2015-11-4 Show GitHub Exploit DB Packet Storm
209696 2.1 注意 Canonical
XScreenSaver project
- XScreenSaver の driver/subprocs.c におけるロックスクリーンを回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2015-8025 2015-11-13 16:07 2015-10-24 Show GitHub Exploit DB Packet Storm
209697 7.5 危険 Google - Google Chrome の PDF Viewer における同一生成元ポリシーを回避される脆弱性 CWE-20
不適切な入力確認
CVE-2015-1302 2015-11-13 15:18 2015-11-10 Show GitHub Exploit DB Packet Storm
209698 5.8 警告 マイクロソフト - 複数の Microsoft Windows 製品の SChannel における重要な情報を取得される脆弱性 CWE-20
CWE-310
CVE-2015-6112 2015-11-13 14:33 2015-11-10 Show GitHub Exploit DB Packet Storm
209699 6.8 警告 マイクロソフト - 複数の Microsoft Windows 製品の IPSec におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2015-6111 2015-11-13 14:33 2015-11-10 Show GitHub Exploit DB Packet Storm
209700 4.9 警告 マイクロソフト - 複数の Microsoft Windows 製品の Kerberos における認証を回避される脆弱性 CWE-255
証明書・パスワード管理
CVE-2015-6095 2015-11-13 14:33 2015-11-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 13, 2026, 4:20 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
355111 - nicplex plexcart_x3 SQL injection vulnerability in the search function in Plexum PLEXCART X3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, possibly involving the (1) s_itemname and (… CWE-89
SQL Injection
CVE-2005-4315 2011-03-7 14:00 2005-12-17 Show GitHub Exploit DB Packet Storm
355112 - apple safari
webkit
WebKit.dll in WebKit, as used in Safari.exe 4.531.9.1 in Apple Safari, allows remote attackers to cause a denial of service (application crash) via JavaScript that writes <marquee> sequences in an in… CWE-399
 Resource Management Errors
CVE-2010-1729 2011-02-17 15:55 2010-05-6 Show GitHub Exploit DB Packet Storm
355113 - apple safari
webkit
WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6, and before 4.1 on Mac OS X 10.4, does not properly handle clipboard (1) drag and (2) paste operations for URLs, which allows user-assi… CWE-200
Information Exposure
CVE-2010-1388 2011-02-17 15:54 2010-06-12 Show GitHub Exploit DB Packet Storm
355114 - fetchmail fetchmail Fetchmail (aka fetchmail-ssl) before 5.8.17 allows a remote malicious (1) IMAP server or (2) POP/POP3 server to overwrite arbitrary memory and possibly gain privileges via a negative index number as … CWE-264
Permissions, Privileges, and Access Controls
CVE-2001-1009 2011-02-16 14:00 2001-08-31 Show GitHub Exploit DB Packet Storm
355115 - fetchmail fetchmail fetchmailconf in fetchmail before 5.7.4 allows local users to overwrite files of other users via a symlink attack on temporary files. CWE-59
Link Following
CVE-2001-1378 2011-02-16 14:00 2001-09-6 Show GitHub Exploit DB Packet Storm
355116 - fetchmail fetchmail fetchmail email client before 5.9.10 does not properly limit the maximum number of messages available, which allows a remote IMAP server to overwrite memory via a message count that exceeds the bound… CWE-20
 Improper Input Validation 
CVE-2002-0146 2011-02-16 05:45 2002-06-25 Show GitHub Exploit DB Packet Storm
355117 - php php Multiple format string vulnerabilities in the phar extension in PHP 5.3 before 5.3.2 allow context-dependent attackers to obtain sensitive information (memory contents) and possibly execute arbitrary… CWE-134
Use of Externally-Controlled Format String
CVE-2010-2094 2011-01-26 15:48 2010-05-28 Show GitHub Exploit DB Packet Storm
355118 - typsoft typsoft_ftp_server Typsoft FTP Server 1.11, with "Sub Directory Include" enabled, allows remote attackers to cause a denial of service (crash) by sending multiple RETR commands. NOTE: it was later reported that 1.10 i… CWE-399
 Resource Management Errors
CVE-2005-3294 2011-01-26 14:00 2005-10-24 Show GitHub Exploit DB Packet Storm
355119 - wordpress wordpress WordPress 2.9 before 2.9.2 allows remote authenticated users to read trash posts from other authors via a direct request with a modified p parameter. CWE-264
Permissions, Privileges, and Access Controls
CVE-2010-0682 2011-01-19 15:55 2010-02-24 Show GitHub Exploit DB Packet Storm
355120 - phpf1 max\'s_image_uploader Unrestricted file upload vulnerability in maxImageUpload/index.php in PHP F1 Max's Image Uploader 1.0, when Apache is not configured to handle the mime-type for files with pjpeg or jpeg extensions, a… NVD-CWE-Other
CVE-2010-0390 2011-01-12 14:00 2010-01-27 Show GitHub Exploit DB Packet Storm