Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 12, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
227171	7.5	危険	xpoze	-	Xpoze Pro の home.html における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-6352	2012-12-20 19:10	2009-03-2	Show	GitHub Exploit DB Packet Storm

227172	4.3	警告	turnkeyforms	-	TurnkeyForms Local Classifieds の listtest.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-6351	2012-12-20 19:10	2009-03-2	Show	GitHub Exploit DB Packet Storm

227173	7.5	危険	turnkeyforms	-	TurnkeyForms Local Classifieds の listtest.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-6350	2012-12-20 19:10	2009-03-2	Show	GitHub Exploit DB Packet Storm

227174	7.5	危険	turnkeyforms	-	TurnkeyForms Business Survey Pro の survey_results_text.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-6349	2012-12-20 19:10	2009-03-2	Show	GitHub Exploit DB Packet Storm

227175	4.3	警告	ticklespace	-	Drupal 用の Answers モジュールにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-6413	2012-12-20 19:10	2008-09-18	Show	GitHub Exploit DB Packet Storm

227176	4.3	警告	sadi samami	-	Multi Languages WebShop Online の detail.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-6267	2012-12-20 19:10	2009-02-25	Show	GitHub Exploit DB Packet Storm

227177	6.8	警告	xt:Commerce	-	xt:Commerce における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-6304	2012-12-20 19:10	2008-11-20	Show	GitHub Exploit DB Packet Storm

227178	7.5	危険	TYPO3 Association	-	TYPO3 用の TU-Clausthal Staff エクステンションにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-6344	2012-12-20 19:10	2009-02-27	Show	GitHub Exploit DB Packet Storm

227179	4.3	警告	TYPO3 Association	-	TYPO3 用の TU-Clausthal ODIN エクステンションにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-6343	2012-12-20 19:10	2009-02-27	Show	GitHub Exploit DB Packet Storm

227180	4.3	警告	TYPO3 Association	-	TYPO3 用の SB Universal Plugin エクステンションにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-6341	2012-12-20 19:10	2009-02-27	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 12, 2026, 5:06 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
274801	-	linuxcontainers canonical	lxc ubuntu_linux	lxc-start in lxc before 1.0.8 and 1.1.x before 1.1.4 allows local container administrators to escape AppArmor confinement via a symlink attack on a (1) mount target or (2) bind mount source.	CWE-59 Link Following	CVE-2015-1335	2024-11-21 11:25	2015-10-2	Show	GitHub Exploit DB Packet Storm

274802	-	google	android	The AppWidgetServiceImpl implementation in com/android/server/appwidget/AppWidgetServiceImpl.java in the Settings application in Android before 5.1.1 LMY48I allows attackers to obtain a URI permissio…	CWE-284 Improper Access Control	CVE-2015-1541	2024-11-21 11:25	2015-10-1	Show	GitHub Exploit DB Packet Storm

274803	-	google	android	Multiple integer underflows in the ESDS::parseESDescriptor function in ESDS.cpp in libstagefright in Android before 5.1.1 LMY48I allow remote attackers to execute arbitrary code via crafted ESDS atom…	CWE-189 Numeric Errors	CVE-2015-1539	2024-11-21 11:25	2015-10-1	Show	GitHub Exploit DB Packet Storm

274804	-	google	android	Integer overflow in the SampleTable::setSampleToChunkParams function in SampleTable.cpp in libstagefright in Android before 5.1.1 LMY48I allows remote attackers to execute arbitrary code via crafted …	CWE-189 Numeric Errors	CVE-2015-1538	2024-11-21 11:25	2015-10-1	Show	GitHub Exploit DB Packet Storm

274805	-	google	android	Integer overflow in the Bitmap_createFromParcel function in core/jni/android/graphics/Bitmap.cpp in Android before 5.1.1 LMY48I allows attackers to cause a denial of service (system_server crash) or …	CWE-189 Numeric Errors	CVE-2015-1536	2024-11-21 11:25	2015-10-1	Show	GitHub Exploit DB Packet Storm

274806	-	google	android	Integer overflow in the native_handle_create function in libcutils/native_handle.c in Android before 5.1.1 LMY48M allows attackers to obtain a different application's privileges or cause a denial of …	CWE-189 Numeric Errors	CVE-2015-1528	2024-11-21 11:25	2015-10-1	Show	GitHub Exploit DB Packet Storm

274807	-	canonical	ubuntu_linux	The Unity Settings Daemon before 14.04.0+14.04.20150825-0ubuntu2 and 15.04.x before 15.04.1+15.04.20150408-0ubuntu1.2 does not properly detect if the screen is locked, which allows physically proxima…	CWE-20 Improper Input Validation	CVE-2015-1319	2024-11-21 11:25	2015-09-18	Show	GitHub Exploit DB Packet Storm

274808	-	google	chrome	Multiple unspecified vulnerabilities in Google Chrome before 45.0.2454.85 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.	NVD-CWE-noinfo	CVE-2015-1301	2024-11-21 11:25	2015-09-4	Show	GitHub Exploit DB Packet Storm

274809	-	google	chrome	The FrameFetchContext::updateTimingInfoForIFrameNavigation function in core/loader/FrameFetchContext.cpp in Blink, as used in Google Chrome before 45.0.2454.85, does not properly restrict the availab…	CWE-254 7PK - Security Features	CVE-2015-1300	2024-11-21 11:25	2015-09-4	Show	GitHub Exploit DB Packet Storm

274810	-	google	chrome	Use-after-free vulnerability in the shared-timer implementation in Blink, as used in Google Chrome before 45.0.2454.85, allows remote attackers to cause a denial of service or possibly have unspecifi…	NVD-CWE-Other	CVE-2015-1299	2024-11-21 11:25	2015-09-4	Show	GitHub Exploit DB Packet Storm