Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 8, 2026, 12:07 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
251071	2.1	注意	Linux	-	Linux kernel の ocfs2_prepare_page_for_write 関数における重要な情報を取得される脆弱性	CWE-20 不適切な入力確認	CVE-2011-0463	2012-03-27 18:42	2011-04-9	Show	GitHub Exploit DB Packet Storm

251072	4.3	警告	Novell	-	SUSE OBS のログインページにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-0462	2012-03-27 18:42	2011-03-2	Show	GitHub Exploit DB Packet Storm

251073	6.3	警告	Novell	-	openSUSE の /etc/init.d/boot.localfs における任意のファイルを上書きされる脆弱性	CWE-59 リンク解釈の問題	CVE-2011-0461	2012-03-27 18:42	2011-04-4	Show	GitHub Exploit DB Packet Storm

251074	7.5	危険	Ruby on Rails project	-	Ruby on Rails の actionpack/lib/action_view/template/resolver.rb におけるアクセス制限を回避する脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-0449	2012-03-27 18:42	2011-02-8	Show	GitHub Exploit DB Packet Storm

251075	7.5	危険	Ruby on Rails project	-	Ruby on Rails における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2011-0448	2012-03-27 18:42	2011-02-8	Show	GitHub Exploit DB Packet Storm

251076	6.8	警告	Ruby on Rails project	-	Ruby on Rails におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2011-0447	2012-03-27 18:42	2011-02-8	Show	GitHub Exploit DB Packet Storm

251077	4.3	警告	Ruby on Rails project	-	Ruby on Rails の mail_to ヘルパーにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-0446	2012-03-27 18:42	2011-02-9	Show	GitHub Exploit DB Packet Storm

251078	6.8	警告	TinyBB	-	TinyBB における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2011-0443	2012-03-27 18:42	2011-01-12	Show	GitHub Exploit DB Packet Storm

251079	3.5	注意	DELL EMC (旧 EMC Corporation)	-	EMC Avamar のサービスユーティリティにおける重要な情報を取得される脆弱性	CWE-310 暗号の問題	CVE-2011-0442	2012-03-27 18:42	2011-03-16	Show	GitHub Exploit DB Packet Storm

251080	6.3	警告	The PHP Group	-	PHP の Debian GNU/Linux /etc/cron.d/php5 クーロンジョブにおける任意のファイルを削除される脆弱性	CWE-59 リンク解釈の問題	CVE-2011-0441	2012-03-27 18:42	2011-03-29	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 8, 2026, 4:09 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
282821	-		microsoft	windows_rt windows_server_2012 windows_8.1 windows_server_2008 windows_7 windows_server_2003 windows_rt_8.1 windows_8	mrxdav.sys (aka the WebDAV driver) in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windo…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2015-0011	2024-11-21 11:22	2015-01-14	Show	GitHub Exploit DB Packet Storm

282822	-		microsoft	windows_server_2012 windows_8.1 windows_server_2008 windows_7 windows_server_2003 windows_rt_8.1 windows_vista windows_8	The Network Location Awareness (NLA) service in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, and Windows Server 201…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2015-0006	2024-11-21 11:22	2015-01-14	Show	GitHub Exploit DB Packet Storm

282823	-		microsoft	windows_rt windows_server_2012 windows_8.1 windows_server_2008 windows_7 windows_server_2003 windows_rt_8.1 windows_vista windows_8	The User Profile Service (aka ProfSvc) in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2015-0004	2024-11-21 11:22	2015-01-14	Show	GitHub Exploit DB Packet Storm

282824	-		microsoft	windows_rt windows_server_2012 windows_8.1 windows_server_2008 windows_7 windows_rt_8.1 windows_8	The AhcVerifyAdminContext function in ahcache.sys in the Application Compatibility component in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold a…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2015-0002	2024-11-21 11:22	2015-01-14	Show	GitHub Exploit DB Packet Storm

282825	-		microsoft	windows_rt windows_server_2012 windows_8.1 windows_rt_8.1 windows_8	The Windows Error Reporting (WER) component in Microsoft Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to bypass the Protected Process Light …	CWE-264 Permissions, Privileges, and Access Controls	CVE-2015-0001	2024-11-21 11:22	2015-01-14	Show	GitHub Exploit DB Packet Storm

282826	-		openssl	openssl	Memory leak in the dtls1_buffer_record function in d1_pkt.c in OpenSSL 1.0.0 before 1.0.0p and 1.0.1 before 1.0.1k allows remote attackers to cause a denial of service (memory consumption) by sending…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2015-0206	2024-11-21 11:22	2015-01-9	Show	GitHub Exploit DB Packet Storm

282827	-		openssl	openssl	The ssl3_get_cert_verify function in s3_srvr.c in OpenSSL 1.0.0 before 1.0.0p and 1.0.1 before 1.0.1k accepts client authentication with a Diffie-Hellman (DH) certificate without requiring a Certific…	CWE-310 Cryptographic Issues	CVE-2015-0205	2024-11-21 11:22	2015-01-9	Show	GitHub Exploit DB Packet Storm

282828	-		openssl	openssl	The ssl3_get_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k allows remote SSL servers to conduct RSA-to-EXPORT_RSA downgrade attacks and fa…	CWE-310 Cryptographic Issues	CVE-2015-0204	2024-11-21 11:22	2015-01-9	Show	GitHub Exploit DB Packet Storm

282829	-		xen opensuse	xen opensuse	Use-after-free vulnerability in Xen 4.2.x, 4.3.x, and 4.4.x allows remote domains to cause a denial of service (system crash) via a crafted hypercall during HVM guest teardown.	NVD-CWE-Other	CVE-2015-0361	2024-11-21 11:22	2015-01-8	Show	GitHub Exploit DB Packet Storm

282830	7.5	HIGH Network	2pisoftware	cmfive	system/classes/DbPDO.php in Cmfive through 2015-03-15, when database connectivity malfunctions, allows remote attackers to obtain sensitive information (username and password) via any request, such a…	CWE-522 Insufficiently Protected Credentials	CVE-2014-9702	2024-11-21 11:21	2020-06-2	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed