Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 27, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
251161 5 警告 IBM - IBM TFIM におけるアサーションを偽造される脆弱性 CWE-20
不適切な入力確認 		CVE-2008-7299 2012-03-27 18:42 2011-08-12 Show GitHub Exploit DB Packet Storm
251162 5.8 警告 Android - Android の Android ブラウザにおける任意クッキーが上書きまたは削除される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-7298 2012-03-27 18:42 2011-08-9 Show GitHub Exploit DB Packet Storm
251163 5.8 警告 Opera Software ASA - Opera における任意の Cookie を上書きおよび削除される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-7297 2012-03-27 18:42 2011-08-9 Show GitHub Exploit DB Packet Storm
251164 5.8 警告 アップル - Apple の Safari における任意のクッキーを上書きまたは削除される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-7296 2012-03-27 18:42 2011-08-9 Show GitHub Exploit DB Packet Storm
251165 5.8 警告 マイクロソフト - Microsoft Internet Explorer における任意のクッキーを上書きされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-7295 2012-03-27 18:42 2011-08-9 Show GitHub Exploit DB Packet Storm
251166 5.8 警告 Google - Google Chrome における任意のクッキーを上書きまたは削除される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-7294 2012-03-27 18:42 2011-08-9 Show GitHub Exploit DB Packet Storm
251167 5.8 警告 Mozilla Foundation - Mozilla Firefox における任意のクッキーを上書きまたは削除される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-7293 2012-03-27 18:42 2011-08-9 Show GitHub Exploit DB Packet Storm
251168 2.1 注意 Mozilla Foundation - Bugzilla における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2008-7292 2012-03-27 18:42 2011-08-9 Show GitHub Exploit DB Packet Storm
251169 4 警告 IBM - IBM TDS の ldap_explode_rdn API 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2008-7290 2012-03-27 18:42 2011-04-10 Show GitHub Exploit DB Packet Storm
251170 4 警告 IBM - IBM TDS におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2008-7289 2012-03-27 18:42 2011-04-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
278021 - palo_alto_networks traps Multiple cross-site scripting (XSS) vulnerabilities in the web-based console management interface in Palo Alto Networks Traps (formerly Cyvera Endpoint Protection) 3.1.2.1546 allow remote attackers t… CWE-79
Cross-site Scripting 		CVE-2015-2223 2024-11-21 11:27 2015-04-14 Show GitHub Exploit DB Packet Storm
278022 - boosted boosted_boards Unspecified vulnerability in Boosted Boards skateboards allows physically proximate attackers to modify skateboard movement, cause human injury, or cause physical damage via vectors related to an "in… NVD-CWE-noinfo
CVE-2015-2247 2024-11-21 11:27 2015-04-11 Show GitHub Exploit DB Packet Storm
278023 - netgate pfsense Cross-site request forgery (CSRF) vulnerability in system_firmware_restorefullbackup.php in the WebGUI in pfSense before 2.2.1 allows remote attackers to hijack the authentication of administrators f… CWE-352
 Origin Validation Error 		CVE-2015-2295 2024-11-21 11:27 2015-04-11 Show GitHub Exploit DB Packet Storm
278024 - fedoraproject
xen 		fedora
xen 		The XEN_DOMCTL_memory_mapping hypercall in Xen 3.2.x through 4.5.x, when using a PCI passthrough device, is not preemptible, which allows local x86 HVM domain users to cause a denial of service (host… CWE-20
 Improper Input Validation  		CVE-2015-2752 2024-11-21 11:27 2015-04-1 Show GitHub Exploit DB Packet Storm
278025 - xen
fedoraproject 		xen
fedora 		Xen 4.3.x, 4.4.x, and 4.5.x, when using toolstack disaggregation, allows remote domains with partial management control to cause a denial of service (host lock) via unspecified domctl operations. CWE-17
Code 		CVE-2015-2751 2024-11-21 11:27 2015-04-1 Show GitHub Exploit DB Packet Storm
278026 - netgate pfsense Multiple cross-site scripting (XSS) vulnerabilities in the WebGUI in pfSense before 2.2.1 allow remote attackers to inject arbitrary web script or HTML via the (1) zone parameter to status_captivepor… CWE-79
Cross-site Scripting 		CVE-2015-2294 2024-11-21 11:27 2015-04-1 Show GitHub Exploit DB Packet Storm
278027 - gaia-gis
debian 		freexl
debian_linux 		FreeXL before 1.0.0i allows remote attackers to cause a denial of service (stack corruption) and possibly execute arbitrary code via a crafted workbook, related to a "premature EOF." CWE-20
 Improper Input Validation  		CVE-2015-2754 2024-11-21 11:27 2015-03-31 Show GitHub Exploit DB Packet Storm
278028 - debian
gaia-gis 		debian_linux
freexl 		FreeXL before 1.0.0i allows remote attackers to cause a denial of service (stack corruption) or possibly execute arbitrary code via a crafted sector in a workbook. CWE-20
 Improper Input Validation  		CVE-2015-2753 2024-11-21 11:27 2015-03-31 Show GitHub Exploit DB Packet Storm
278029 - shibboleth
debian 		service_provider
debian_linux 		Shibboleth Service Provider (SP) before 2.5.4 allows remote authenticated users to cause a denial of service (crash) via a crafted SAML message. CWE-20
 Improper Input Validation  		CVE-2015-2684 2024-11-21 11:27 2015-03-31 Show GitHub Exploit DB Packet Storm
278030 - nih
php
fedoraproject
debian
opensuse 		libzip
php
fedora
debian_linux
opensuse 		Integer overflow in the _zip_cdir_new function in zip_dirent.c in libzip 0.11.2 and earlier, as used in the ZIP extension in PHP before 5.4.39, 5.5.x before 5.5.23, and 5.6.x before 5.6.7 and other p… CWE-189
Numeric Errors 		CVE-2015-2331 2024-11-21 11:27 2015-03-30 Show GitHub Exploit DB Packet Storm