Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 2, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
226251 6.8 警告 レッドハット - JBoss Enterprise Portal Platform の GateIn Portal コンポーネントにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2012-3532 2013-04-16 16:20 2012-08-23 Show GitHub Exploit DB Packet Storm
226252 9.3 危険 IBM - IBM Cognos Disclosure Management およびその他の製品における任意のファイルを読まれる脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2013-0501 2013-04-16 16:15 2013-04-5 Show GitHub Exploit DB Packet Storm
226253 9.3 危険 IBM - 複数の IBM 製品における任意のコマンドを実行される脆弱性 CWE-noinfo
情報不足
CVE-2012-5937 2013-04-16 15:56 2013-04-10 Show GitHub Exploit DB Packet Storm
226254 5 警告 OpenStack - 複数の OpenStack コンポーネントにおけるアクセスの制限を回避される脆弱性 CWE-287
不適切な認証
CVE-2013-0282 2013-04-16 15:52 2013-02-20 Show GitHub Exploit DB Packet Storm
226255 5 警告 OpenStack - OpenStack Keystone の Grizzly および Folsom におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2013-0270 2013-04-16 15:47 2013-04-4 Show GitHub Exploit DB Packet Storm
226256 7.5 危険 ZAPms - ZAPms における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2013-3050 2013-04-16 15:40 2013-04-10 Show GitHub Exploit DB Packet Storm
226257 7.1 危険 シスコシステムズ - Cisco Adaptive Security Appliances におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2013-1151 2013-04-15 11:42 2013-04-10 Show GitHub Exploit DB Packet Storm
226258 5.7 警告 シスコシステムズ - Cisco ユニバーサルブロードバンド 10000 シリーズルータにおけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2013-1189 2013-04-15 11:39 2013-04-10 Show GitHub Exploit DB Packet Storm
226259 6.6 警告 シスコシステムズ - Cisco AnyConnect Secure Mobility Client におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2013-1173 2013-04-15 11:38 2013-04-10 Show GitHub Exploit DB Packet Storm
226260 6.6 警告 シスコシステムズ - Cisco AnyConnect Secure Mobility Client における権限を取得される脆弱性 CWE-20
不適切な入力確認
CVE-2013-1172 2013-04-15 11:38 2013-04-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 2, 2026, 4:18 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
274491 - linux linux_kernel net/ipv6/addrconf.c in the IPv6 stack in the Linux kernel before 4.0 does not validate attempted changes to the MTU value, which allows context-dependent attackers to cause a denial of service (packe… CWE-20
 Improper Input Validation 
CVE-2015-8215 2024-11-21 11:38 2015-11-17 Show GitHub Exploit DB Packet Storm
274492 - xen
oracle
linux
debian
canonical
xen
solaris
vm_virtualbox
linux_kernel
debian_linux
ubuntu_linux
The KVM subsystem in the Linux kernel through 4.2.6, and Xen 4.3.x through 4.6.x, allows guest OS users to cause a denial of service (host OS panic or hang) by triggering many #DB (aka Debug) excepti… CWE-399
 Resource Management Errors
CVE-2015-8104 2024-11-21 11:38 2015-11-16 Show GitHub Exploit DB Packet Storm
274493 - libpng
fedoraproject
suse
opensuse
debian
redhat
oracle
apple
canonical
libpng
fedora
linux_enterprise_desktop
linux_enterprise_server
leap
opensuse
debian_linux
enterprise_linux_desktop
enterprise_linux_server_aus
enterprise_linux_workstation<…
Multiple buffer overflows in the (1) png_set_PLTE and (2) png_get_PLTE functions in libpng before 1.0.64, 1.1.x and 1.2.x before 1.2.54, 1.3.x and 1.4.x before 1.4.17, 1.5.x before 1.5.24, and 1.6.x … CWE-120
Classic Buffer Overflow
CVE-2015-8126 2024-11-21 11:38 2015-11-13 Show GitHub Exploit DB Packet Storm
274494 - symantec endpoint_protection Untrusted search path vulnerability in the client in Symantec Endpoint Protection (SEP) 12.1 before 12.1-RU6-MP3 allows local users to gain privileges via a Trojan horse DLL in a client install packa… NVD-CWE-Other
CVE-2015-8113 2024-11-21 11:38 2015-11-12 Show GitHub Exploit DB Packet Storm
274495 - opensuse
roundcube
opensuse
webmail
Cross-site scripting (XSS) vulnerability in program/js/app.js in Roundcube webmail before 1.0.7 and 1.1.x before 1.1.3 allows remote authenticated users to inject arbitrary web script or HTML via the… CWE-79
Cross-site Scripting
CVE-2015-8105 2024-11-21 11:38 2015-11-11 Show GitHub Exploit DB Packet Storm
274496 - net-snmp net-snmp The net-snmp package in OpenBSD through 5.8 uses 0644 permissions for snmpd.conf, which allows local users to obtain sensitive community information by reading this file. CWE-200
Information Exposure
CVE-2015-8100 2024-11-21 11:38 2015-11-10 Show GitHub Exploit DB Packet Storm
274497 - google picasa Integer overflow in Google Picasa 3.9.140 Build 239 and Build 248 allows remote attackers to execute arbitrary code via unspecified vectors related to "phase one 0x412 tag," which triggers a heap-bas… CWE-119
CWE-189
Incorrect Access of Indexable Resource ('Range Error') 
Numeric Errors
CVE-2015-8096 2024-11-21 11:38 2015-11-10 Show GitHub Exploit DB Packet Storm
274498 - monster_menus_module_project monster_menus The recycle bin feature in the Monster Menus module 7.x-1.21 before 7.x-1.24 for Drupal does not properly remove nodes from view, which allows remote attackers to obtain sensitive information via an … CWE-200
Information Exposure
CVE-2015-8095 2024-11-21 11:38 2015-11-10 Show GitHub Exploit DB Packet Storm
274499 9.8 CRITICAL
Network
eclipse hudson Hudson (aka org.jvnet.hudson.main:hudson-core) before 3.3.2 allows XXE attacks. CWE-611
XXE
CVE-2015-8031 2024-11-21 11:37 2022-07-19 Show GitHub Exploit DB Packet Storm
274500 5.5 MEDIUM
Local
sap mobile_platform SAP Mobile Platform 3.0 SP05 ClientHub allows attackers to obtain the keystream and other sensitive information via the DataVault, aka SAP Security Note 2094830. CWE-200
Information Exposure
CVE-2015-7731 2024-11-21 11:37 2021-08-10 Show GitHub Exploit DB Packet Storm