Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 18, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
224641 9.3 危険 アップル - Apple QuickTime におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2013-0986 2013-06-7 13:42 2013-05-22 Show GitHub Exploit DB Packet Storm
224642 9.3 危険 アップル - Apple QuickTime におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2013-0989 2013-06-7 13:38 2013-05-22 Show GitHub Exploit DB Packet Storm
224643 7.5 危険 アップル
Ruby on Rails project
- Ruby on Rails における任意のコードを実行される脆弱性 CWE-Other
その他
CVE-2013-0333 2013-06-7 12:18 2013-01-28 Show GitHub Exploit DB Packet Storm
224644 10 危険 アップル
Ruby on Rails project
- Ruby on Rails の ActiveRecord におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足
CVE-2013-0277 2013-06-7 12:09 2013-02-11 Show GitHub Exploit DB Packet Storm
224645 4.3 警告 アップル
Ruby on Rails project
- Ruby on Rails の ActiveRecord における attr_protected 保護メカニズムを回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2013-0276 2013-06-7 12:07 2013-02-11 Show GitHub Exploit DB Packet Storm
224646 2.6 注意 日本ケンタッキー・フライド・チキン株式会社 - Android 版 ピザハット公式アプリ 宅配ピザのPizzaHut における SSL サーバ証明書の検証不備の脆弱性 CWE-Other
その他
CVE-2013-3641 2013-06-7 12:01 2013-06-7 Show GitHub Exploit DB Packet Storm
224647 2.6 注意 マイクロソフト - Internet Explorer における情報漏えいの脆弱性 CWE-Other
その他
- 2013-06-7 12:00 2013-06-7 Show GitHub Exploit DB Packet Storm
224648 6.4 警告 アップル
Ruby on Rails project
- Ruby on Rails におけるデータベースのクエリ制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2013-0155 2013-06-7 11:58 2013-01-8 Show GitHub Exploit DB Packet Storm
224649 7.2 危険 アップル - CUPS における root として任意のファイルを読まれる脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-5519 2013-06-7 11:50 2012-11-20 Show GitHub Exploit DB Packet Storm
224650 7.5 危険 アップル
OpenSSL Project
- OpenSSL の crypto/buffer/buffer.c における整数符号エラーの脆弱性 CWE-189
数値処理の問題
CVE-2012-2131 2013-06-7 11:36 2012-04-23 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 19, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
277971 - ibm security_siteprotector_system SQL injection vulnerability in IBM Security SiteProtector System 3.0 before 3.0.0.7, 3.1 before 3.1.0.4, and 3.1.1 before 3.1.1.2 allows remote authenticated users to execute arbitrary SQL commands v… CWE-89
SQL Injection
CVE-2015-0161 2024-11-21 11:22 2015-05-25 Show GitHub Exploit DB Packet Storm
277972 - ibm security_siteprotector_system IBM Security SiteProtector System 3.0 before 3.0.0.7, 3.1 before 3.1.0.4, and 3.1.1 before 3.1.1.2 allows remote authenticated users to execute arbitrary commands with SYSTEM privileges via unspecifi… CWE-264
Permissions, Privileges, and Access Controls
CVE-2015-0160 2024-11-21 11:22 2015-05-25 Show GitHub Exploit DB Packet Storm
277973 - ibm websphere
business_process_manager
Cross-site scripting (XSS) vulnerability in IBM Business Process Manager (BPM) 7.5.x through 7.5.1.2, 8.0.x through 8.0.1.3, and 8.5.x through 8.5.6.0 and WebSphere Lombardi Edition (WLE) 7.2.x throu… CWE-79
Cross-site Scripting
CVE-2015-0156 2024-11-21 11:22 2015-05-25 Show GitHub Exploit DB Packet Storm
277974 - ibm spss_statistics An unspecified ActiveX control in IBM SPSS Statistics 22.0 through FP1 on 32-bit platforms allows remote attackers to execute arbitrary code via a crafted HTML document. NVD-CWE-noinfo
CVE-2015-0140 2024-11-21 11:22 2015-05-25 Show GitHub Exploit DB Packet Storm
277975 - ibm tivoli_storage_manager_fastback Buffer overflow in the FastBackMount process in IBM Tivoli Storage Manager FastBack 6.1 before 6.1.11.1 has unspecified impact and remote attack vectors. CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2015-0120 2024-11-21 11:22 2015-05-25 Show GitHub Exploit DB Packet Storm
277976 - ibm websphere_mq The cluster repository manager in IBM WebSphere MQ 7.5 before 7.5.0.5 and 8.0 before 8.0.0.2 allows remote authenticated administrators to cause a denial of service (memory overwrite and daemon outag… CWE-399
 Resource Management Errors
CVE-2015-0189 2024-11-21 11:22 2015-05-20 Show GitHub Exploit DB Packet Storm
277977 - redhat kexec-tools The Red Hat module-setup.sh script for kexec-tools, as distributed in the kexec-tools before 2.0.7-19 packages in Red Hat Enterprise Linux, allows local users to write to arbitrary files via a symlin… NVD-CWE-Other
CVE-2015-0267 2024-11-21 11:22 2015-05-20 Show GitHub Exploit DB Packet Storm
277978 - fedoraproject
libuv_project
nodejs
fedora
libuv
node.js
libuv before 0.10.34 does not properly drop group privileges, which allows context-dependent attackers to gain privileges via unspecified vectors. CWE-273
 Improper Check for Dropped Privileges
CVE-2015-0278 2024-11-21 11:22 2015-05-19 Show GitHub Exploit DB Packet Storm
277979 - redhat enterprise_virtualization_manager Red Hat Enterprise Virtualization (RHEV) Manager before 3.5.1 uses weak permissions on the directories shared by the ovirt-engine-dwhd service and a plugin during service startup, which allows local … CWE-264
Permissions, Privileges, and Access Controls
CVE-2015-0257 2024-11-21 11:22 2015-05-2 Show GitHub Exploit DB Packet Storm
277980 - redhat enterprise_virtualization_manager Red Hat Enterprise Virtualization (RHEV) Manager before 3.5.1 ignores the permission to deny snapshot creation during live storage migration between domains, which allows remote authenticated users t… CWE-264
Permissions, Privileges, and Access Controls
CVE-2015-0237 2024-11-21 11:22 2015-05-2 Show GitHub Exploit DB Packet Storm