Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 30, 2026, 4 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
228081	9.3	危険	ultraplayer	-	UltraPlayer Media Player におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2009-4863	2012-12-20 19:28	2010-05-11	Show	GitHub Exploit DB Packet Storm

228082	4.3	警告	supportpro	-	SupportPRO SupportDesk の shownews.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-4861	2012-12-20 19:28	2010-05-11	Show	GitHub Exploit DB Packet Storm

228083	4.3	警告	turnkeyforms	-	Yahoo Answers Clone の questiondetail.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-4858	2012-12-20 19:28	2010-05-11	Show	GitHub Exploit DB Packet Storm

228084	7.5	危険	scripts.oldguy	-	TalkBack の addons/import.php における任意のコマンドを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2009-4854	2012-12-20 19:28	2010-05-7	Show	GitHub Exploit DB Packet Storm

228085	6.8	警告	toutvirtual	-	ToutVirtual VirtualIQ Pro におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2009-4849	2012-12-20 19:28	2010-05-7	Show	GitHub Exploit DB Packet Storm

228086	4.3	警告	toutvirtual	-	ToutVirtual VirtualIQ Pro におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-4848	2012-12-20 19:28	2010-05-7	Show	GitHub Exploit DB Packet Storm

228087	5	警告	toutvirtual	-	ToutVirtual VirtualIQ Pro の設定ページにおける重要な情報を取得される脆弱性	CWE-310 暗号の問題	CVE-2009-4845	2012-12-20 19:28	2010-05-7	Show	GitHub Exploit DB Packet Storm

228088	5	警告	toutvirtual	-	ToutVirtual VirtualIQ Pro における重要な Tomcat の情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2009-4844	2012-12-20 19:28	2010-05-7	Show	GitHub Exploit DB Packet Storm

228089	7.5	危険	toutvirtual	-	ToutVirtual VirtualIQ Pro における任意のコマンドを実行される脆弱性	CWE-287 不適切な認証	CVE-2009-4843	2012-12-20 19:28	2010-05-7	Show	GitHub Exploit DB Packet Storm

228090	4.3	警告	toutvirtual	-	ToutVirtual VirtualIQ Pro におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-4842	2012-12-20 19:28	2010-05-7	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 30, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
274591	7.5	HIGH Network	netsurf-browser	libnsbmp	libnsbmp.c in Libnsbmp 0.1.2 allows context-dependent attackers to cause a denial of service (out-of-bounds read) via a crafted color table to the (1) bmp_decode_rgb or (2) bmp_decode_rle function.	CWE-125 Out-of-bounds Read	CVE-2015-7507	2024-11-21 11:36	2020-02-19	Show	GitHub Exploit DB Packet Storm

274592	9.8	CRITICAL Network	yeager	yeager_cms	SQL injection vulnerability in Yeager CMS 1.2.1 allows remote attackers to execute arbitrary SQL commands via the "passwordreset&token" parameter.	CWE-89 SQL Injection	CVE-2015-7567	2024-11-21 11:36	2020-02-19	Show	GitHub Exploit DB Packet Storm

274593	8.8	HIGH Network	netsurf-browser	libnsgif	Stack-based buffer overflow in the gif_next_LZW function in libnsgif.c in Libnsgif 0.1.2 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitr…	CWE-787 Out-of-bounds Write	CVE-2015-7505	2024-11-21 11:36	2020-02-19	Show	GitHub Exploit DB Packet Storm

274594	6.5	MEDIUM Network	netsurf-browser	libnsgif	The gif_next_LZW function in libnsgif.c in Libnsgif 0.1.2 allows context-dependent attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted LZW stream in a GIF …	CWE-125 Out-of-bounds Read	CVE-2015-7506	2024-11-21 11:36	2020-02-18	Show	GitHub Exploit DB Packet Storm

274595	8.8	HIGH Network	netsurf-browser	libnsbmp	Heap-based buffer overflow in the bmp_decode_rle function in libnsbmp.c in Libnsbmp 0.1.2 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbit…	CWE-787 Out-of-bounds Write	CVE-2015-7508	2024-11-21 11:36	2020-02-12	Show	GitHub Exploit DB Packet Storm

274596	7.8	HIGH Local	delegate	delegate	DeleGate 9.9.13 allows local users to gain privileges as demonstrated by the dgcpnod setuid program.	CWE-269 Improper Privilege Management	CVE-2015-7556	2024-11-21 11:36	2020-01-16	Show	GitHub Exploit DB Packet Storm

274597	5.3	MEDIUM Network	aquamaniac debian opensuse	gwenhywfar debian_linux leap	A vulnerability exists in libgwenhywfar through 4.12.0 due to the usage of outdated bundled CA certificates.	CWE-319 Cleartext Transmission of Sensitive Information	CVE-2015-7542	2024-11-21 11:36	2019-12-4	Show	GitHub Exploit DB Packet Storm

274598	5.9	MEDIUM Network	technicolor	c2000t_firmware c2100t_firmware	Technicolor C2000T and C2100T uses hard-coded cryptographic keys.	CWE-798 Use of Hard-coded Credentials	CVE-2015-7276	2024-11-21 11:36	2019-11-7	Show	GitHub Exploit DB Packet Storm

274599	2.7	LOW Network	apache redhat	activemq jboss_fuse jboss_a-mq	It was found that the Apache ActiveMQ client before 5.14.5 exposed a remote shutdown command in the ActiveMQConnection class. An attacker logged into a compromised broker could use this flaw to achie…	CWE-20 Improper Input Validation	CVE-2015-7559	2024-11-21 11:36	2019-08-1	Show	GitHub Exploit DB Packet Storm

274600	7.5	HIGH Network	iab	open_real-time_bidding	The Interactive Advertising Bureau (IAB) OpenRTB 2.3 protocol implementation might allow remote attackers to conceal the status of ad transactions and potentially compromise bid integrity by leveragi…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2015-7266	2024-11-21 11:36	2018-10-31	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed