Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 18, 2026, 12:09 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
251461	7.5	危険	Jextensions	-	Joomla! 用 HM Community コンポーネントにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2011-4808	2011-12-16 10:41	2011-12-14	Show	GitHub Exploit DB Packet Storm

251462	5	警告	foobla	-	Joomla! 用の obSuggest コンポーネントにおけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2011-4804	2011-12-16 10:19	2011-12-14	Show	GitHub Exploit DB Packet Storm

251463	7.5	危険	BraveNewCode	-	WordPress 用の WPTouch プラグインにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2011-4803	2011-12-16 10:18	2011-12-14	Show	GitHub Exploit DB Packet Storm

251464	6.8	警告	DELL EMC (旧 EMC Corporation)	-	EMC RSA AAOP におけるアプリケーション制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-2742	2011-12-15 16:59	2011-12-14	Show	GitHub Exploit DB Packet Storm

251465	6.8	警告	DELL EMC (旧 EMC Corporation)	-	EMC RSA AAOP におけるセキュリティ制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-2741	2011-12-15 16:58	2011-12-14	Show	GitHub Exploit DB Packet Storm

251466	4.3	警告	アドビシステムズ	-	Adobe ColdFusion の RDS におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-4368	2011-12-15 16:57	2011-12-13	Show	GitHub Exploit DB Packet Storm

251467	4.3	警告	アドビシステムズ	-	Adobe ColdFusion におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-2463	2011-12-15 16:57	2011-12-13	Show	GitHub Exploit DB Packet Storm

251468	4.3	警告	アップル	-	iOS 上の Safari におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	-	2011-12-15 12:02	2011-12-15	Show	GitHub Exploit DB Packet Storm

251469	7.2	危険	TADASoft	-	Tadasoft Restorepoint の評価版における権限を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-4202	2011-12-14 15:50	2011-12-13	Show	GitHub Exploit DB Packet Storm

251470	9.3	危険	TADASoft	-	Tadasoft Restorepoint の評価版における任意のコマンドを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2011-4201	2011-12-14 15:50	2011-12-13	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 18, 2026, 4:12 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
273531	7.3	HIGH Network	redhat	openstack	The TripleO Heat templates (tripleo-heat-templates), as used in Red Hat Enterprise Linux OpenStack Platform 7.0, do not properly use the configured RabbitMQ credentials, which makes it easier for rem…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2015-5329	2024-11-21 11:32	2016-04-12	Show	GitHub Exploit DB Packet Storm

273532	2.5	LOW Local	redhat	libvirt	Directory traversal vulnerability in the virStorageBackendFileSystemVolCreate function in storage/storage_backend_fs.c in libvirt, when fine-grained Access Control Lists (ACL) are in effect, allows l…	CWE-22 Path Traversal	CVE-2015-5313	2024-11-21 11:32	2016-04-12	Show	GitHub Exploit DB Packet Storm

273533	7.5	HIGH Network	openstack	tripleo_heat_templates	The TripleO Heat templates (tripleo-heat-templates), when deployed via the commandline interface, allow remote attackers to spoof OpenStack Networking metadata requests by leveraging knowledge of the…	CWE-254 7PK - Security Features	CVE-2015-5303	2024-11-21 11:32	2016-04-12	Show	GitHub Exploit DB Packet Storm

273534	4.2	MEDIUM Network	theforeman redhat	foreman satellite	Foreman before 1.8.4 and 1.9.x before 1.9.1 do not properly apply view_hosts permissions, which allows (1) remote authenticated users with the view_reports permission to read reports from arbitrary h…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2015-5233	2024-11-21 11:32	2016-04-12	Show	GitHub Exploit DB Packet Storm

273535	7.5	HIGH Network	redhat	enterprise_linux_desktop enterprise_linux_server_aus enterprise_linux_workstation enterprise_linux_server enterprise_linux_hpc_node enterprise_linux_server_eus enterprise_linux e…	The calloc function in the glibc package in Red Hat Enterprise Linux (RHEL) 6.7 and 7.2 does not properly initialize memory areas, which might allow context-dependent attackers to cause a denial of s…	CWE-17 Code	CVE-2015-5229	2024-11-21 11:32	2016-04-9	Show	GitHub Exploit DB Packet Storm

273536	8.8	HIGH Network	apache debian canonical	tomcat debian_linux ubuntu_linux	The (1) Manager and (2) Host Manager applications in Apache Tomcat 7.x before 7.0.68, 8.x before 8.0.31, and 9.x before 9.0.0.M2 establish sessions and send CSRF tokens for arbitrary new requests, wh…	CWE-352 Origin Validation Error	CVE-2015-5351	2024-11-21 11:32	2016-02-25	Show	GitHub Exploit DB Packet Storm

273537	8.1	HIGH Network	apache canonical debian	tomcat ubuntu_linux debian_linux	Session fixation vulnerability in Apache Tomcat 7.x before 7.0.66, 8.x before 8.0.30, and 9.x before 9.0.0.M2, when different session settings are used for deployments of multiple versions of the sam…	NVD-CWE-Other	CVE-2015-5346	2024-11-21 11:32	2016-02-25	Show	GitHub Exploit DB Packet Storm

273538	5.3	MEDIUM Network	debian apache canonical	debian_linux tomcat ubuntu_linux	The Mapper component in Apache Tomcat 6.x before 6.0.45, 7.x before 7.0.68, 8.x before 8.0.30, and 9.x before 9.0.0.M2 processes redirects before considering security constraints and Filters, which a…	CWE-22 Path Traversal	CVE-2015-5345	2024-11-21 11:32	2016-02-25	Show	GitHub Exploit DB Packet Storm

273539	4.3	MEDIUM Network	debian apache canonical	debian_linux tomcat ubuntu_linux	Directory traversal vulnerability in RequestUtil.java in Apache Tomcat 6.x before 6.0.45, 7.x before 7.0.65, and 8.x before 8.0.27 allows remote authenticated users to bypass intended SecurityManager…	CWE-22 Path Traversal	CVE-2015-5174	2024-11-21 11:32	2016-02-25	Show	GitHub Exploit DB Packet Storm

273540	4.3	MEDIUM Network	moodle	moodle	The choice module in Moodle through 2.6.11, 2.7.x before 2.7.11, 2.8.x before 2.8.9, and 2.9.x before 2.9.3 allows remote authenticated users to bypass intended access restrictions by visiting a URL …	CWE-264 Permissions, Privileges, and Access Controls	CVE-2015-5342	2024-11-21 11:32	2016-02-22	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed