Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 19, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
251411	7.1	危険	ISC, Inc.	-	ISC DHCP の dhcpd のロギング機能におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2011-4868	2012-01-17 16:39	2012-01-12	Show	GitHub Exploit DB Packet Storm

251412	2.1	注意	Roderich Schupp	-	Perl 用 PAR モジュールの par_mktmpdir 関数におけるファイルを上書きされる脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-5060	2012-01-17 16:33	2012-01-13	Show	GitHub Exploit DB Packet Storm

251413	3.3	注意	Roderich Schupp	-	Perl 用 PAR::Packer モジュールの par_mktmpdir 関数におけるファイルを上書きされる脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-4114	2012-01-17 16:32	2012-01-13	Show	GitHub Exploit DB Packet Storm

251414	4.4	警告	Super	-	Super の super.c のエラー関数におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2011-2776	2012-01-17 16:31	2012-01-8	Show	GitHub Exploit DB Packet Storm

251415	4.3	警告	IBM	-	IBM WebSphere Application Server におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-1362	2012-01-17 16:29	2012-01-15	Show	GitHub Exploit DB Packet Storm

251416	9.3	危険	NTRglobal	-	NTR ActiveX コントロールの StopModule メソッドにおける任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2012-0267	2012-01-17 16:07	2012-01-15	Show	GitHub Exploit DB Packet Storm

251417	9.3	危険	NTRglobal	-	NTR ActiveX コントロールにおけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2012-0266	2012-01-17 16:04	2012-01-15	Show	GitHub Exploit DB Packet Storm

251418	10	危険	ヒューレット・パッカード	-	HP StorageWorks P2000 G3 MSA array systems における管理者権限でタスクを実行される脆弱性	CWE-22 パス・トラバーサル	CVE-2012-0697	2012-01-16 15:19	2012-01-13	Show	GitHub Exploit DB Packet Storm

251419	4.3	警告	IBM	-	IBM Cognos TM1 の Executive Viewer におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-0696	2012-01-16 15:04	2010-11-12	Show	GitHub Exploit DB Packet Storm

251420	10	危険	Google サムスン日本エイサー	-	Chromebook プラットフォームで稼働する Google Chrome における詳細不明な脆弱性	CWE-noinfo 情報不足	CVE-2012-0695	2012-01-16 15:04	2012-01-10	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 19, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
273561	7.5	HIGH Network	freeipa	freeipa	FreeIPA might display user data improperly via vectors involving non-printable characters.	CWE-20 Improper Input Validation	CVE-2015-5179	2024-11-21 11:32	2017-09-21	Show	GitHub Exploit DB Packet Storm

273562	9.8	CRITICAL Network	apache	traffic_server	Unspecified vulnerability in the HTTP/2 experimental feature in Apache Traffic Server before 5.3.x before 5.3.2 has unknown impact and attack vectors, a different vulnerability than CVE-2015-5168.	NVD-CWE-noinfo	CVE-2015-5206	2024-11-21 11:32	2017-09-14	Show	GitHub Exploit DB Packet Storm

273563	9.8	CRITICAL Network	apache	traffic_server	Unspecified vulnerability in the HTTP/2 experimental feature in Apache Traffic Server 5.3.x before 5.3.2 has unknown impact and attack vectors, a different vulnerability than CVE-2015-5206.	NVD-CWE-noinfo	CVE-2015-5168	2024-11-21 11:32	2017-09-14	Show	GitHub Exploit DB Packet Storm

273564	6.1	MEDIUM Network	ellucian	banner_student	Open redirect vulnerability in Ellucian (formerly SunGard) Banner Student 8.5.1.2 through 8.7 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL i…	CWE-601 Open Redirect	CVE-2015-5054	2024-11-21 11:32	2017-09-12	Show	GitHub Exploit DB Packet Storm

273565	6.1	MEDIUM Network	anchorcms	anchor_cms	Cross-site scripting (XSS) vulnerability in anchor-cms before 0.9-dev.	CWE-79 Cross-site Scripting	CVE-2015-5060	2024-11-21 11:32	2017-09-8	Show	GitHub Exploit DB Packet Storm

273566	9.8	CRITICAL Network	sefrengo	sefrengo	SQL injection vulnerability in Sefrengo before 1.6.5 beta2.	CWE-89 SQL Injection	CVE-2015-5052	2024-11-21 11:32	2017-09-8	Show	GitHub Exploit DB Packet Storm

273567	5.3	MEDIUM Network	linux_audit_project	linux_audit	Audit before 2.4.4 in Linux does not sanitize escape characters in filenames.	CWE-20 Improper Input Validation	CVE-2015-5186	2024-11-21 11:32	2017-09-7	Show	GitHub Exploit DB Packet Storm

273568	7.5	HIGH Network	apache	struts	Apache Struts 2.x before 2.3.24.1 allows remote attackers to manipulate Struts internals, alter user sessions, or affect container settings via vectors involving a top object.	CWE-20 Improper Input Validation	CVE-2015-5209	2024-11-21 11:32	2017-08-30	Show	GitHub Exploit DB Packet Storm

273569	5.9	MEDIUM Network	redhat	enterprise_virtualization_manager	Red Hat Enterprise Virtualization Manager 3.6 and earlier gives valid SLAAC IPv6 addresses to interfaces when "boot protocol" is set to None, which might allow remote attackers to communicate with a …	CWE-284 Improper Access Control	CVE-2015-5293	2024-11-21 11:32	2017-08-25	Show	GitHub Exploit DB Packet Storm

273570	5.3	MEDIUM Network	fedoraproject debian ntp	fedora debian_linux ntp	ntpd in ntp before 4.2.8p3 with remote configuration enabled allows remote authenticated users with knowledge of the configuration password and access to a computer entrusted to perform remote config…	CWE-20 Improper Input Validation	CVE-2015-5146	2024-11-21 11:32	2017-08-25	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed