Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 22, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
227601	7.5	危険	questions answered	-	Questions Answered の管理インターフェースにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2009-4728	2012-12-20 19:28	2010-03-18	Show	GitHub Exploit DB Packet Storm

227602	4.3	警告	phpscriptsnow	-	Real Time Currency Exchange の rates.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-4715	2012-12-20 19:28	2010-03-15	Show	GitHub Exploit DB Packet Storm

227603	7.5	危険	tukanas	-	Tukanas Classifieds Script の index.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2009-4712	2012-12-20 19:28	2010-03-15	Show	GitHub Exploit DB Packet Storm

227604	4.3	警告	Pligg	-	Pligg におけるオープンリダイレクトの脆弱性	CWE-20 不適切な入力確認	CVE-2009-4788	2012-12-20 19:28	2009-11-30	Show	GitHub Exploit DB Packet Storm

227605	6.8	警告	Pligg	-	Pligg におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2009-4787	2012-12-20 19:28	2009-11-30	Show	GitHub Exploit DB Packet Storm

227606	4.3	警告	Pligg	-	Pligg におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-4786	2012-12-20 19:28	2009-11-30	Show	GitHub Exploit DB Packet Storm

227607	4.3	警告	phpMyFAQ	-	phpMyFAQ の index.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-4780	2012-12-20 19:28	2009-12-1	Show	GitHub Exploit DB Packet Storm

227608	6.8	警告	Ubercart	-	Drupal 用の Ubercart モジュールにおけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2009-4773	2012-12-20 19:28	2009-11-18	Show	GitHub Exploit DB Packet Storm

227609	4.3	警告	Ubercart	-	Drupal 用の Ubercart モジュールにおける重要な情報を取得される脆弱性	CWE-noinfo 情報不足	CVE-2009-4772	2012-12-20 19:28	2009-11-18	Show	GitHub Exploit DB Packet Storm

227610	5	警告	Ubercart	-	Drupal 用の Ubercart モジュールにおける不特定の "複製操作" を誘発される脆弱性	CWE-20 不適切な入力確認	CVE-2009-4771	2012-12-20 19:28	2009-11-18	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 23, 2026, 4:08 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
274261	7.8	HIGH Local	redhat debian canonical spice_project	enterprise_linux_server_eus enterprise_linux_hpc_node enterprise_linux_desktop enterprise_linux_server enterprise_linux_workstation debian_linux ubuntu_linux spice enterprise_…	Heap-based buffer overflow in SPICE before 0.12.6 allows guest OS users to cause a denial of service (heap-based memory corruption and QEMU-KVM crash) or possibly execute arbitrary code on the host v…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2015-5260	2024-11-21 11:32	2016-06-7	Show	GitHub Exploit DB Packet Storm

274262	5.5	MEDIUM Local	criu opensuse	checkpoint\/restore_in_userspace opensuse	The service daemon in CRIU does not properly restrict access to non-dumpable processes, which allows local users to obtain sensitive information via (1) process dumps or (2) ptrace access.	CWE-200 Information Exposure	CVE-2015-5231	2024-11-21 11:32	2016-06-7	Show	GitHub Exploit DB Packet Storm

274263	7.8	HIGH Local	opensuse criu	opensuse checkpoint\/restore_in_userspace	The service daemon in CRIU creates log and dump files insecurely, which allows local users to create arbitrary files and take ownership of existing files via unspecified vectors related to a director…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2015-5228	2024-11-21 11:32	2016-06-7	Show	GitHub Exploit DB Packet Storm

274264	9.1	CRITICAL Network	ibm suse redhat	java_sdk linux_enterprise_server linux_enterprise_software_development_kit suse_linux_enterprise_server websphere_application_server satellite	The J9 JVM in IBM SDK, Java Technology Edition 6 before SR16 FP20, 6 R1 before SR8 FP20, 7 before SR9 FP30, and 7 R1 before SR3 FP30 allows remote attackers to obtain sensitive information or inject …	CWE-200 Information Exposure	CVE-2015-5041	2024-11-21 11:32	2016-06-7	Show	GitHub Exploit DB Packet Storm

274265	4.4	MEDIUM Local	apache	cordova	Apache Cordova iOS before 4.0.0 allows remote attackers to execute arbitrary plugins via a link.	CWE-20 Improper Input Validation	CVE-2015-5208	2024-11-21 11:32	2016-05-10	Show	GitHub Exploit DB Packet Storm

274266	5.3	MEDIUM Local	apache	cordova	Apache Cordova iOS before 4.0.0 might allow attackers to bypass a URL whitelist protection mechanism in an app and load arbitrary resources by leveraging unspecified methods.	CWE-254 CWE-284 7PK - Security Features Improper Access Control	CVE-2015-5207	2024-11-21 11:32	2016-05-10	Show	GitHub Exploit DB Packet Storm

274267	5.9	MEDIUM Network	samba canonical	samba ubuntu_linux	Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not properly implement the DCE-RPC layer, which allows remote attackers to perform protocol-downgrade attacks, cause a…	NVD-CWE-noinfo	CVE-2015-5370	2024-11-21 11:32	2016-04-25	Show	GitHub Exploit DB Packet Storm

274268	7.5	HIGH Network	redhat openstack	openstack tripleo_heat_templates	The TripleO Heat templates (tripleo-heat-templates) do not properly order the Identity Service (keystone) before the OpenStack Object Storage (Swift) staticweb middleware in the swiftproxy pipeline w…	CWE-200 Information Exposure	CVE-2015-5271	2024-11-21 11:32	2016-04-16	Show	GitHub Exploit DB Packet Storm

274269	8.1	HIGH Network	apache	camel	Apache Camel 2.6.x through 2.14.x, 2.15.x before 2.15.5, and 2.16.x before 2.16.1, when using (1) camel-jetty or (2) camel-servlet as a consumer in Camel routes, allow remote attackers to execute arb…	CWE-19 Data Processing Errors	CVE-2015-5348	2024-11-21 11:32	2016-04-16	Show	GitHub Exploit DB Packet Storm

274270	6.5	MEDIUM Network	redhat canonical	libvirt ubuntu_linux	The virStorageVolCreateXML API in libvirt 1.2.14 through 1.2.19 allows remote authenticated users with a read-write connection to cause a denial of service (libvirtd crash) by triggering a failed unl…	CWE-284 Improper Access Control	CVE-2015-5247	2024-11-21 11:32	2016-04-15	Show	GitHub Exploit DB Packet Storm