Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 26, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
227001 6.4 警告 MoinMoin - MoinMoin の AttachFile アクションにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2012-6080 2013-01-7 15:53 2013-01-3 Show GitHub Exploit DB Packet Storm
227002 4.3 警告 ownCloud - ownCloud の bookmarks/js/bookmarks.js におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-5666 2013-01-7 15:52 2012-12-18 Show GitHub Exploit DB Packet Storm
227003 4.3 警告 ownCloud - ownCloud における user_webdavauth および user_ldap の設定を変更される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-5665 2013-01-7 15:40 2012-12-18 Show GitHub Exploit DB Packet Storm
227004 5 警告 Steven Jones - Drupal 用 Context モジュールにおける重要な情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-5655 2013-01-7 15:35 2012-12-19 Show GitHub Exploit DB Packet Storm
227005 4.3 警告 Nodewords - Drupal 用 Nodewords: D6 Meta Tags モジュールにおける重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2012-5654 2013-01-7 15:22 2012-12-5 Show GitHub Exploit DB Packet Storm
227006 6 警告 Drupal - Drupal のファイルアップロード機能における保護メカニズムを回避される脆弱性 CWE-20
不適切な入力確認
CVE-2012-5653 2013-01-7 15:14 2012-12-19 Show GitHub Exploit DB Packet Storm
227007 5 警告 Drupal - Drupal におけるアップロードされたファイルに関する重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2012-5652 2013-01-7 15:09 2012-12-19 Show GitHub Exploit DB Packet Storm
227008 5 警告 Drupal - Drupal における重要な情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-5651 2013-01-7 15:09 2012-12-19 Show GitHub Exploit DB Packet Storm
227009 5.1 警告 ELinks - ELinks の protocol/http/http_negotiate.c におけるクライアントとして認証される脆弱性 CWE-287
不適切な認証
CVE-2012-4545 2013-01-7 11:45 2012-10-28 Show GitHub Exploit DB Packet Storm
227010 5 警告 WP PHP widget - WordPress 用 WP PHP widget プラグインにおける重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2013-0721 2013-01-7 11:38 2013-01-2 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 26, 2026, 4:05 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
274111 - apple iphone_os The Sandbox_profiles component in Apple iOS before 8.4.1 allows attackers to bypass the third-party app-sandbox protection mechanism and read arbitrary managed preferences via a crafted app. CWE-200
Information Exposure
CVE-2015-5749 2024-11-21 11:33 2015-08-17 Show GitHub Exploit DB Packet Storm
274112 - apple iphone_os
safari
mac_os_x
The kernel in Apple OS X before 10.10.5 does not properly mount HFS volumes, which allows local users to cause a denial of service via a crafted volume. CWE-17
Code
CVE-2015-5748 2024-11-21 11:33 2015-08-17 Show GitHub Exploit DB Packet Storm
274113 - apple mac_os_x The fasttrap driver in the kernel in Apple OS X before 10.10.5 allows local users to cause a denial of service (resource consumption) via unspecified vectors. CWE-399
 Resource Management Errors
CVE-2015-5747 2024-11-21 11:33 2015-08-17 Show GitHub Exploit DB Packet Storm
274114 - apple iphone_os AppleFileConduit in Apple iOS before 8.4.1 allows attackers to bypass intended restrictions on filesystem access via an afc command that leverages symlink mishandling. CWE-284
Improper Access Control
CVE-2015-5746 2024-11-21 11:33 2015-08-17 Show GitHub Exploit DB Packet Storm
274115 - dell netvault_backup Dell Netvault Backup before 10.0.5 allows remote attackers to cause a denial of service (crash) via a crafted request. CWE-20
 Improper Input Validation 
CVE-2015-5696 2024-11-21 11:33 2015-08-15 Show GitHub Exploit DB Packet Storm
274116 - bestpractical request_tracker Multiple cross-site scripting (XSS) vulnerabilities in Request Tracker (RT) 4.x before 4.2.12 allow remote attackers to inject arbitrary web script or HTML via vectors related to the (1) user and (2)… CWE-79
Cross-site Scripting
CVE-2015-5475 2024-11-21 11:33 2015-08-15 Show GitHub Exploit DB Packet Storm
274117 - adobe air_sdk
air_sdk_\&_compiler
air
flash_player
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR … NVD-CWE-Other
CVE-2015-5565 2024-11-21 11:33 2015-08-14 Show GitHub Exploit DB Packet Storm
274118 - adobe flash_player
air_sdk
air_sdk_\&_compiler
air
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR … NVD-CWE-Other
CVE-2015-5564 2024-11-21 11:33 2015-08-14 Show GitHub Exploit DB Packet Storm
274119 - adobe air_sdk
air_sdk_\&_compiler
air
flash_player
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR … NVD-CWE-Other
CVE-2015-5563 2024-11-21 11:33 2015-08-14 Show GitHub Exploit DB Packet Storm
274120 - adobe flash_player
air_sdk
air_sdk_\&_compiler
air
Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199… NVD-CWE-Other
CVE-2015-5562 2024-11-21 11:33 2015-08-14 Show GitHub Exploit DB Packet Storm