Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 27, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
227881 8.8 危険 softcab - SoftCab Sound Converter ActiveX コントロール における任意のファイルを作成される脆弱性 CWE-Other
その他
CVE-2009-4453 2012-12-20 19:28 2009-12-29 Show GitHub Exploit DB Packet Storm
227882 4.3 警告 サン・マイクロシステムズ - Sun Java System Directory Server Enterprise Edition の DPS におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足
CVE-2009-4443 2012-12-20 19:28 2009-12-23 Show GitHub Exploit DB Packet Storm
227883 5 警告 サン・マイクロシステムズ - Sun Java System Directory Server Enterprise Edition の DPS におけるサービス運用妨害 (DoS) の脆弱性 CWE-16
環境設定
CVE-2009-4442 2012-12-20 19:28 2009-12-23 Show GitHub Exploit DB Packet Storm
227884 5 警告 サン・マイクロシステムズ - Sun Java System Directory Server Enterprise Edition の DPS におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2009-4441 2012-12-20 19:28 2009-12-23 Show GitHub Exploit DB Packet Storm
227885 6.8 警告 サン・マイクロシステムズ - Sun Java System Directory Server Enterprise Edition の DPS における認証されたユーザのバックエンドの接続をハイジャックされる脆弱性 CWE-362
競合状態
CVE-2009-4440 2012-12-20 19:28 2009-12-23 Show GitHub Exploit DB Packet Storm
227886 7.5 危険 VirtueMart - VirtueMart の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2009-4430 2012-12-20 19:28 2009-12-28 Show GitHub Exploit DB Packet Storm
227887 7.5 危険 weentech - weenCompany の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2009-4423 2012-12-20 19:28 2009-12-24 Show GitHub Exploit DB Packet Storm
227888 5 警告 Zend Technologies Ltd. - Zend Framework の Zend_Log_Writer_Mail クラスにおける任意の電子メールメッセージを送信される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2009-4417 2012-12-20 19:28 2009-12-24 Show GitHub Exploit DB Packet Storm
227889 4.3 警告 phpgroupware - phpGroupWare の login.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2009-4416 2012-12-20 19:28 2009-12-24 Show GitHub Exploit DB Packet Storm
227890 7.5 危険 phpgroupware - phpGroupWare におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2009-4415 2012-12-20 19:28 2009-12-24 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 27, 2026, 4:52 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
274731 - adobe air_sdk
air_sdk_\&_compiler
air
flash_player
Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2015-5544 2024-11-21 11:33 2015-08-14 Show GitHub Exploit DB Packet Storm
274732 - adobe flash_player
air_sdk
air_sdk_\&_compiler
air
Heap-based buffer overflow in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SD… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2015-5541 2024-11-21 11:33 2015-08-14 Show GitHub Exploit DB Packet Storm
274733 - adobe flash_player
air_sdk
air_sdk_\&_compiler
air
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR … NVD-CWE-Other
CVE-2015-5540 2024-11-21 11:33 2015-08-14 Show GitHub Exploit DB Packet Storm
274734 - adobe flash_player
air_sdk
air_sdk_\&_compiler
air
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR … NVD-CWE-Other
CVE-2015-5539 2024-11-21 11:33 2015-08-14 Show GitHub Exploit DB Packet Storm
274735 - bittorrent bootstrap-dht The lazy_bdecode function in BitTorrent DHT bootstrap server (bootstrap-dht ) allows remote attackers to execute arbitrary code via a crafted packet, related to "improper indexing." CWE-20
 Improper Input Validation 
CVE-2015-5685 2024-11-21 11:33 2015-08-13 Show GitHub Exploit DB Packet Storm
274736 - belkin n300_dual-band_wi-fi_range_extender_firmware Belkin N300 Dual-Band Wi-Fi Range Extender with firmware before 1.04.10 allows remote authenticated users to execute arbitrary commands via the (1) sub_dir parameter in a formUSBStorage request; pinC… CWE-264
Permissions, Privileges, and Access Controls
CVE-2015-5536 2024-11-21 11:33 2015-08-13 Show GitHub Exploit DB Packet Storm
274737 - qtranslate_project qtranslate Cross-site scripting (XSS) vulnerability in the qTranslate plugin 2.5.39 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the edit parameter in the qtransl… CWE-79
Cross-site Scripting
CVE-2015-5535 2024-11-21 11:33 2015-08-13 Show GitHub Exploit DB Packet Storm
274738 - bittorrent
utorrent
bittorrent
utorrent
BitTorrent and uTorrent allow remote attackers to inject command line parameters and execute arbitrary commands via a crafted URL using the (1) bittorrent or (2) magnet protocol. CWE-77
Command Injection
CVE-2015-5474 2024-11-21 11:33 2015-08-13 Show GitHub Exploit DB Packet Storm
274739 - websense content_gateway Stack-based buffer overflow in the handle_debug_network function in the manager in Websense Content Gateway before 8.0.0 HF02 allows remote administrators to cause a denial of service (crash) via a c… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2015-5718 2024-11-21 11:33 2015-08-12 Show GitHub Exploit DB Packet Storm
274740 - canonical
debian
apple
htacg
ubuntu_linux
debian_linux
mac_os_x
watchos
iphone_os
tidy
The ParseValue function in lexer.c in tidy before 4.9.31 allows remote attackers to cause a denial of service (crash) via vectors involving multiple whitespace characters before an empty href, which … CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2015-5523 2024-11-21 11:33 2015-08-11 Show GitHub Exploit DB Packet Storm