Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 26, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
222541 7.5 危険 FFmpeg - FFmpeg におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2011-4351 2013-12-11 16:40 2011-11-23 Show GitHub Exploit DB Packet Storm
222542 6.8 警告 FFmpeg - FFmpeg の libavcodec/diracdec.c の dirac_decode_data_unit 関数における脆弱性 CWE-noinfo
情報不足
CVE-2011-3950 2013-12-11 16:40 2012-01-27 Show GitHub Exploit DB Packet Storm
222543 6.8 警告 FFmpeg - FFmpeg の libavcodec/diracdec.c の dirac_unpack_idwt_params 関数における脆弱性 CWE-noinfo
情報不足
CVE-2011-3949 2013-12-11 16:39 2012-01-27 Show GitHub Exploit DB Packet Storm
222544 6.8 警告 FFmpeg - FFmpeg の libavcodec/h264_sei.c の ff_h264_decode_sei 関数における脆弱性 CWE-399
リソース管理の問題
CVE-2011-3946 2013-12-11 16:38 2012-01-27 Show GitHub Exploit DB Packet Storm
222545 6.8 警告 FFmpeg - FFmpeg の libavcodec/smacker.c の smacker_decode_header_tree 関数における脆弱性 CWE-noinfo
情報不足
CVE-2011-3944 2013-12-11 16:38 2012-01-26 Show GitHub Exploit DB Packet Storm
222546 7.5 危険 FFmpeg - FFmpeg の libavcodec/error_resilience.c の decode_mb 関数における脆弱性 CWE-119
バッファエラー
CVE-2011-3941 2013-12-11 16:33 2012-01-25 Show GitHub Exploit DB Packet Storm
222547 6.8 警告 FFmpeg - FFmpeg の ffmpeg.c の codec_get_buffer 関数における脆弱性 CWE-noinfo
情報不足
CVE-2011-3935 2013-12-11 16:32 2012-01-25 Show GitHub Exploit DB Packet Storm
222548 6.8 警告 FFmpeg - FFmpeg の libavcodec/vp3.c の vp3_update_thread_context 関数におけるメモリ二重解放の脆弱性 CWE-399
リソース管理の問題
CVE-2011-3934 2013-12-11 16:31 2012-01-26 Show GitHub Exploit DB Packet Storm
222549 4.3 警告 Now Wireless Limited - NowSMS Now SMS & MMS Gateway の MMSC におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2013-7001 2013-12-11 15:59 2013-11-15 Show GitHub Exploit DB Packet Storm
222550 4.3 警告 Now Wireless Limited - NowSMS Now SMS & MMS Gateway の MMSC におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2013-7000 2013-12-11 15:55 2013-11-15 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 27, 2026, 4:52 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
273191 7.5 HIGH
Network
jenkins
redhat
jenkins
openshift
The Plugins Manager in Jenkins before 1.640 and LTS before 1.625.2 does not verify checksums for plugin files referenced in update site data, which makes it easier for man-in-the-middle attackers to … CWE-345
 Insufficient Verification of Data Authenticity
CVE-2015-7539 2024-11-21 11:36 2016-02-4 Show GitHub Exploit DB Packet Storm
273192 7.5 HIGH
Network
openstack
oracle
keystonemiddleware
keystone
solaris
The identity service in OpenStack Identity (Keystone) before 2015.1.3 (Kilo) and 8.0.x before 8.0.2 (Liberty) and keystonemiddleware (formerly python-keystoneclient) before 1.5.4 (Kilo) and Liberty b… CWE-522
 Insufficiently Protected Credentials
CVE-2015-7546 2024-11-21 11:36 2016-02-4 Show GitHub Exploit DB Packet Storm
273193 8.8 HIGH
Network
jenkins
redhat
jenkins
openshift
Jenkins before 1.640 and LTS before 1.625.2 allow remote attackers to bypass the CSRF protection mechanism via unspecified vectors. NVD-CWE-noinfo
CVE-2015-7538 2024-11-21 11:36 2016-02-4 Show GitHub Exploit DB Packet Storm
273194 8.8 HIGH
Network
redhat
jenkins
openshift
jenkins
Cross-site request forgery (CSRF) vulnerability in Jenkins before 1.640 and LTS before 1.625.2 allows remote attackers to hijack the authentication of administrators for requests that have unspecifie… CWE-352
 Origin Validation Error
CVE-2015-7537 2024-11-21 11:36 2016-02-4 Show GitHub Exploit DB Packet Storm
273195 5.4 MEDIUM
Network
jenkins jenkins Cross-site scripting (XSS) vulnerability in Jenkins before 1.640 and LTS before 1.625.2 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors related to wor… CWE-79
Cross-site Scripting
CVE-2015-7536 2024-11-21 11:36 2016-02-4 Show GitHub Exploit DB Packet Storm
273196 8.3 HIGH
Network
apache hive The authorization framework in Apache Hive 1.0.0, 1.0.1, 1.1.0, 1.1.1, 1.2.0 and 1.2.1, on clusters protected by Ranger and SqlStdHiveAuthorization, allows attackers to bypass intended parent table a… CWE-287
Improper Authentication
CVE-2015-7521 2024-11-21 11:36 2016-01-30 Show GitHub Exploit DB Packet Storm
273197 7.5 HIGH
Network
ibm jazz_reporting_service Report Builder in IBM Jazz Reporting Service (JRS) 5.x before 5.0.2-Rational-CLM-ifix011 and 6.0 before 6.0.0-Rational-CLM-ifix005 allows remote attackers to cause a denial of service (Report Builder… NVD-CWE-noinfo
CVE-2015-7464 2024-11-21 11:36 2016-01-29 Show GitHub Exploit DB Packet Storm
273198 5.9 MEDIUM
Local
ibm spectrum_scale IBM Spectrum Scale 4.1.1.x before 4.1.1.4 and 4.2.x before 4.2.0.1, in certain LDAP File protocol configurations, allows remote attackers to discover an LDAP password via unspecified vectors. CWE-200
Information Exposure
CVE-2015-7488 2024-11-21 11:36 2016-01-27 Show GitHub Exploit DB Packet Storm
273199 4.1 MEDIUM
Local
ibm maximo_asset_management
maximo_for_transportation
maximo_asset_management_essentials
maximo_for_utilities
maximo_for_nuclear_power
smartcloud_control_desk
tivoli_service_request_man…
IBM Maximo Asset Management 7.1 through 7.1.1.13, 7.5.0 before 7.5.0.9 IFIX002, and 7.6.0 before 7.6.0.3 IFIX001; Maximo Asset Management 7.5.0 before 7.5.0.9 IFIX002, 7.5.1, and 7.6.0 before 7.6.0.3… CWE-200
Information Exposure
CVE-2015-7487 2024-11-21 11:36 2016-01-27 Show GitHub Exploit DB Packet Storm
273200 6.1 MEDIUM
Network
ibm rational_software_architect_realtime
rational_software_architect_for_websphere_software
rational_software_architect_for_websphere_software\'
rational_software_architect
Cross-site scripting (XSS) vulnerability in InfoSphere Data Architect (IDA), as distributed in IBM Rational Software Architect 8.5 through 9.5, Rational Software Architect for WebSphere Software (RSA… CWE-79
Cross-site Scripting
CVE-2015-7439 2024-11-21 11:36 2016-01-27 Show GitHub Exploit DB Packet Storm