Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 26, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
251281	7.5	危険	kylegilman	-	WordPress 用 Video Embed & Thumbnail Generator プラグインにおける任意のコマンドを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2012-1785	2012-03-22 17:47	2012-03-19	Show	GitHub Exploit DB Packet Storm

251282	7.5	危険	OddNormality	-	MyJobList における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2012-1784	2012-03-22 17:46	2012-03-19	Show	GitHub Exploit DB Packet Storm

251283	7.8	危険	Saurabh Gupta	-	Tiny Server におけるサービス運用妨害 (クラッシュ) の脆弱性	CWE-20 不適切な入力確認	CVE-2012-1783	2012-03-22 17:42	2012-03-19	Show	GitHub Exploit DB Packet Storm

251284	5	警告	Joakim Nygard and Jacob Oettinger	-	Webgrind における絶対パストラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2012-1790	2012-03-22 17:34	2012-03-19	Show	GitHub Exploit DB Packet Storm

251285	4.3	警告	idevSpot	-	IDevSpot idev-BusinessDirectory におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-1779	2012-03-22 17:33	2012-03-19	Show	GitHub Exploit DB Packet Storm

251286	7.5	危険	CreateVision	-	CreateVision CMS の artykul_print.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2012-1778	2012-03-22 17:32	2012-03-19	Show	GitHub Exploit DB Packet Storm

251287	6.8	警告	Webfolio CMS	-	Webfolio CMS におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2012-1498	2012-03-22 17:25	2012-03-19	Show	GitHub Exploit DB Packet Storm

251288	4.3	警告	NetMechanica	-	NetMechanica NetDecision の HTTP Server におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2012-1465	2012-03-22 17:22	2012-03-19	Show	GitHub Exploit DB Packet Storm

251289	5	警告	NetMechanica	-	NetMechanica NetDecision の Dashboard Server におけるインストールパスを取得される脆弱性	CWE-200 情報漏えい	CVE-2012-1464	2012-03-22 17:22	2012-03-19	Show	GitHub Exploit DB Packet Storm

251290	6.8	警告	Contao	-	Contao の main.php におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2012-1297	2012-03-22 17:18	2012-03-19	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 27, 2026, 4:52 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
276801	-	owncloud	owncloud	ownCloud Server before 5.0.19, 6.x before 6.0.7, and 7.x before 7.0.5 allows remote authenticated users to bypass the file blacklist and upload arbitrary files via a file path with UTF-8 encoding, as…	CWE-74 Injection	CVE-2015-3013	2024-11-21 11:28	2015-05-8	Show	GitHub Exploit DB Packet Storm

276802	-	debian kogmbh	debian_linux webodf	Multiple cross-site scripting (XSS) vulnerabilities in WebODF before 0.5.5, as used in ownCloud, allow remote attackers to inject arbitrary web script or HTML via a (1) style or (2) font name or (3) …	CWE-79 Cross-site Scripting	CVE-2015-3012	2024-11-21 11:28	2015-05-8	Show	GitHub Exploit DB Packet Storm

276803	-	owncloud debian	owncloud debian_linux	Multiple cross-site scripting (XSS) vulnerabilities in the contacts application in ownCloud Server Community Edition before 5.0.19, 6.x before 6.0.7, and 7.x before 7.0.5 allow remote authenticated u…	CWE-79 Cross-site Scripting	CVE-2015-3011	2024-11-21 11:28	2015-05-8	Show	GitHub Exploit DB Packet Storm

276804	-	oracle haxx canonical apple debian	enterprise_manager_ops_center libcurl curl ubuntu_linux mac_os_x debian_linux	The default configuration for cURL and libcurl before 7.42.1 sends custom HTTP headers to both the proxy and destination server, which might allow remote proxy servers to obtain sensitive information…	CWE-200 Information Exposure	CVE-2015-3153	2024-11-21 11:28	2015-05-2	Show	GitHub Exploit DB Packet Storm

276805	-	xiph debian opensuse	icecast debian_linux opensuse	Icecast before 2.4.2, when a stream_auth handler is defined for URL authentication, allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a request without log…	NVD-CWE-Other	CVE-2015-3026	2024-11-21 11:28	2015-04-30	Show	GitHub Exploit DB Packet Storm

276806	-	fedoraproject canonical debian apple haxx hp opensuse	fedora ubuntu_linux debian_linux mac_os_x libcurl system_management_homepage curl opensuse	cURL and libcurl 7.10.6 through 7.41.0 do not properly re-use authenticated Negotiate connections, which allows remote attackers to connect as other users via a request.	CWE-284 Improper Access Control	CVE-2015-3148	2024-11-21 11:28	2015-04-24	Show	GitHub Exploit DB Packet Storm

276807	-	fedoraproject canonical debian haxx apple oracle hp opensuse	fedora ubuntu_linux debian_linux curl mac_os_x solaris libcurl system_management_homepage opensuse	The sanitize_cookie_path function in cURL and libcurl 7.31.0 through 7.41.0 does not properly calculate an index, which allows remote attackers to cause a denial of service (out-of-bounds write and c…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2015-3145	2024-11-21 11:28	2015-04-24	Show	GitHub Exploit DB Packet Storm

276808	-	oracle haxx canonical debian	mysql_enterprise_monitor curl libcurl ubuntu_linux debian_linux	The fix_hostname function in cURL and libcurl 7.37.0 through 7.41.0 does not properly calculate an index, which allows remote attackers to cause a denial of service (out-of-bounds read or write and c…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2015-3144	2024-11-21 11:28	2015-04-24	Show	GitHub Exploit DB Packet Storm

276809	-	haxx canonical debian hp apple	curl ubuntu_linux debian_linux libcurl system_management_homepage mac_os_x	cURL and libcurl 7.10.6 through 7.41.0 does not properly re-use NTLM connections, which allows remote attackers to connect as other users via an unauthenticated request, a similar issue to CVE-2014-0…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2015-3143	2024-11-21 11:28	2015-04-24	Show	GitHub Exploit DB Packet Storm

276810	-	simple_ads_manager_project	simple_ads_manager	Unrestricted file upload vulnerability in sam-ajax-admin.php in the Simple Ads Manager plugin before 2.5.96 for WordPress allows remote attackers to execute arbitrary code by uploading a file with an…	NVD-CWE-Other	CVE-2015-2825	2024-11-21 11:28	2015-04-22	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed