Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 21, 2026, 6:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
251381	5	警告	BE User Switch	-	TYPO3 用 BE User Switch エクステンションにおける重要な情報を取得される脆弱性	CWE-noinfo 情報不足	CVE-2012-1085	2012-02-17 14:40	2012-02-14	Show	GitHub Exploit DB Packet Storm

251382	4.3	警告	BE User Switch	-	TYPO3 用 BE User Switch エクステンションにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-1084	2012-02-17 14:39	2012-02-14	Show	GitHub Exploit DB Packet Storm

251383	6.8	警告	Terminal PHP Shell	-	TYPO3 用 Terminal PHP Shell エクステンションにおけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2012-1083	2012-02-17 14:38	2012-02-14	Show	GitHub Exploit DB Packet Storm

251384	3.5	注意	Terminal PHP Shell	-	TYPO3 用 Terminal PHP Shell エクステンションにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-1082	2012-02-17 14:37	2012-02-14	Show	GitHub Exploit DB Packet Storm

251385	4.3	警告	Roderick Braun	-	TYPO3 用 Yet another Google search エクステンションにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-1081	2012-02-17 14:37	2012-02-14	Show	GitHub Exploit DB Packet Storm

251386	4.3	警告	Euro Calculator	-	TYPO3 用 Euro Calculator エクステンションにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-1080	2012-02-17 14:36	2012-02-14	Show	GitHub Exploit DB Packet Storm

251387	6.5	警告	Helut Hummel	-	TYPO3 用 Webservices for TYPO3 エクステンションにおける任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2012-1079	2012-02-17 14:36	2012-02-14	Show	GitHub Exploit DB Packet Storm

251388	5	警告	Claus Due	-	TYPO3 用 System Utilities エクステンションにおける重要な情報を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-1078	2012-02-17 14:35	2012-02-14	Show	GitHub Exploit DB Packet Storm

251389	7.5	危険	Bluechip Software	-	TYPO3 用 Post data records to Facebook エクステンションにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2012-1077	2012-02-17 14:34	2012-02-14	Show	GitHub Exploit DB Packet Storm

251390	4.3	警告	Robert Gonda	-	TYPO3 用 Documents download エクステンションにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-1076	2012-02-17 14:34	2012-02-14	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 21, 2026, 4:10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
273561	7.5	HIGH Network	botan_project debian	botan debian_linux	The BER decoder in Botan 0.10.x before 1.10.10 and 1.11.x before 1.11.19 allows remote attackers to cause a denial of service (application crash) via an empty BIT STRING in ASN.1 data.	CWE-20 Improper Input Validation	CVE-2015-5726	2024-11-21 11:33	2016-05-13	Show	GitHub Exploit DB Packet Storm

273562	6.5	MEDIUM Network	ubuntu libav opensuse	ubuntu libav leap	The ff_h263_decode_mba function in libavcodec/ituh263dec.c in Libav before 11.5 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a file with craft…	CWE-189 Numeric Errors	CVE-2015-5479	2024-11-21 11:33	2016-04-19	Show	GitHub Exploit DB Packet Storm

273563	7.5	HIGH Network	f5	big-iq_application_delivery_controller big-ip_local_traffic_manager big-ip_access_policy_manager big-ip_edge_gateway big-ip_application_security_manager big-iq_security big-ip_wan_o…	Memory leak in the last hop kernel module in F5 BIG-IP LTM, GTM, and Link Controller 10.1.x, 10.2.x before 10.2.4 HF13, 11.x before 11.2.1 HF15, 11.3.x, 11.4.x, 11.5.x before 11.5.3 HF2, and 11.6.x b…	CWE-399 Resource Management Errors	CVE-2015-5516	2024-11-21 11:33	2016-01-21	Show	GitHub Exploit DB Packet Storm

273564	7.3	HIGH Network	php	php	Stack-based buffer overflow in the phar_fix_filepath function in ext/phar/phar.c in PHP before 5.4.43, 5.5.x before 5.5.27, and 5.6.x before 5.6.11 allows remote attackers to cause a denial of servic…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2015-5590	2024-11-21 11:33	2016-01-19	Show	GitHub Exploit DB Packet Storm

273565	5.3	MEDIUM Network	swim_team_project	swim_team	Absolute path traversal vulnerability in include/user/download.php in the Swim Team plugin 1.44.10777 for WordPress allows remote attackers to read arbitrary files via a full pathname in the file par…	CWE-22 Path Traversal	CVE-2015-5471	2024-11-21 11:33	2016-01-13	Show	GitHub Exploit DB Packet Storm

273566	5.4	MEDIUM Network	hp	storeonce_backup_system_software	Cross-site scripting (XSS) vulnerability in HP StoreOnce Backup system software before 3.13.1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.	CWE-79 Cross-site Scripting	CVE-2015-5447	2024-11-21 11:33	2016-01-5	Show	GitHub Exploit DB Packet Storm

273567	7.5	HIGH Adjacent	hp	storeonce_backup_system_software	HP StoreOnce Backup system software before 3.13.1 allows remote attackers to execute arbitrary code via unspecified vectors.	NVD-CWE-noinfo	CVE-2015-5446	2024-11-21 11:33	2016-01-5	Show	GitHub Exploit DB Packet Storm

273568	8.8	HIGH Network	hp	storeonce_backup_system_software	Cross-site request forgery (CSRF) vulnerability in HP StoreOnce Backup system software before 3.13.1 allows remote authenticated users to hijack the authentication of unspecified victims via unknown …	CWE-352 Origin Validation Error	CVE-2015-5445	2024-11-21 11:33	2016-01-5	Show	GitHub Exploit DB Packet Storm

273569	6.5	MEDIUM Network	hp	jc653a_hp_12518_dc_switch_chassis jh179a_hp_flexfabric_5930_4-slot_switch jg362b_hp_hsr6804_router_chassis jg834a_hp_flexfabric_12508e_ac_switch_taa-compliant_chassis jg802a_hp_ff_12500e_…	HPE Networking Products, originally branded as Comware 5, Comware 7, H3C, or HP, allow remote attackers to bypass intended access restrictions or cause a denial of service via "Virtual routing and fo…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2015-5434	2024-11-21 11:33	2016-01-5	Show	GitHub Exploit DB Packet Storm

273570	7.4	HIGH Local	rarlab	winrar	The file-execution functionality in WinRAR before 5.30 beta 5 allows local users to gain privileges via a Trojan horse file with a name similar to an extensionless filename that was selected by the u…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2015-5663	2024-11-21 11:33	2015-12-30	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed