Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 29, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
251741 6.9 警告 マイクロソフト - Microsoft Visual Studio における権限昇格の脆弱性 CWE-Other
その他
CVE-2012-0008 2012-03-19 15:27 2012-03-13 Show GitHub Exploit DB Packet Storm
251742 4.3 警告 マイクロソフト - Microsoft Windows Server 2008 および Windows 7 の RDP サービスにおけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2012-0152 2012-03-19 15:27 2012-03-13 Show GitHub Exploit DB Packet Storm
251743 4.3 警告 マイクロソフト - 複数の Microsoft Windows 製品の DirectWrite におけるサービス運用妨害 (アプリケーションハング) の脆弱性 CWE-20
不適切な入力確認
CVE-2012-0156 2012-03-19 15:26 2012-03-13 Show GitHub Exploit DB Packet Storm
251744 7.2 危険 マイクロソフト - 複数の Microsoft Windows 製品の win32k.sys における権限昇格の脆弱性 CWE-20
不適切な入力確認
CVE-2012-0157 2012-03-19 15:25 2012-03-13 Show GitHub Exploit DB Packet Storm
251745 5 警告 マイクロソフト - Microsoft Windows Server 2003 および 2008 の DNS サーバにおけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2012-0006 2012-03-19 15:24 2012-03-13 Show GitHub Exploit DB Packet Storm
251746 10 危険 ACCESS - Android用 NetFront Life Browser アプリケーションにおける詳細不明な脆弱性 CWE-noinfo
情報不足
CVE-2012-1485 2012-03-19 14:17 2012-03-15 Show GitHub Exploit DB Packet Storm
251747 10 危険 WaliSMS - Android用 WaliSMS CN アプリケーションにおける詳細不明な脆弱性 CWE-noinfo
情報不足
CVE-2012-1484 2012-03-19 14:16 2012-03-15 Show GitHub Exploit DB Packet Storm
251748 10 危険 Zhou Bo - Android用 Message Forwarder アプリケーションにおける詳細不明な脆弱性 CWE-noinfo
情報不足
CVE-2012-1483 2012-03-19 14:15 2012-03-15 Show GitHub Exploit DB Packet Storm
251749 10 危険 CooTek - Android 用 TouchPal Contacts アプリケーションにおける詳細不明な脆弱性 CWE-noinfo
情報不足
CVE-2012-1482 2012-03-19 14:09 2012-03-15 Show GitHub Exploit DB Packet Storm
251750 10 危険 Kashif Masud - Android 用 Textdroid アプリケーションにおける詳細不明な脆弱性 CWE-noinfo
情報不足
CVE-2012-1481 2012-03-19 14:06 2012-03-15 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 29, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
274461 - apple tvos
iphone_os
mac_os_x
watchos
Buffer overflow in libc in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows remote attackers to execute arbitrary code via a crafted package, a different vuln… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2015-7038 2024-11-21 11:36 2015-12-11 Show GitHub Exploit DB Packet Storm
274462 - apple iphone_os Directory traversal vulnerability in Mobile Backup in Photos in Apple iOS before 9.2 allows attackers to read arbitrary files via a crafted pathname. CWE-22
Path Traversal
CVE-2015-7037 2024-11-21 11:36 2015-12-11 Show GitHub Exploit DB Packet Storm
274463 - apple watchos
iphone_os
tvos
mac_os_x
AppSandbox in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 mishandles hard links, which allows attackers to bypass Contacts access revocation via a crafted app. CWE-264
Permissions, Privileges, and Access Controls
CVE-2015-7001 2024-11-21 11:36 2015-12-11 Show GitHub Exploit DB Packet Storm
274464 - ztree_project ztree Cross-site scripting (XSS) vulnerability in zTree 3.5.19.1 and possibly earlier allows remote attackers to inject arbitrary web script or HTML via the id parameter to demo/en/asyncData/getNodesForBig… CWE-79
Cross-site Scripting
CVE-2015-7348 2024-11-21 11:36 2015-12-8 Show GitHub Exploit DB Packet Storm
274465 - csl_dualcom gprs_cs2300-r_firmware CSL DualCom GPRS CS2300-R devices with firmware 1.25 through 3.53 allow remote attackers to modify the configuration via a command in an SMS message, as demonstrated by a "4 2" command. CWE-254
 7PK - Security Features
CVE-2015-7288 2024-11-21 11:36 2015-11-25 Show GitHub Exploit DB Packet Storm
274466 - csl_dualcom gprs_cs2300-r_firmware CSL DualCom GPRS CS2300-R devices with firmware 1.25 through 3.53 use the same 001984 default PIN across different customers' installations, which allows remote attackers to execute commands by lever… CWE-255
Credentials Management
CVE-2015-7287 2024-11-21 11:36 2015-11-25 Show GitHub Exploit DB Packet Storm
274467 - csl_dualcom gprs_cs2300-r_firmware CSL DualCom GPRS CS2300-R devices with firmware 1.25 through 3.53 rely on a polyalphabetic substitution cipher with hardcoded keys, which makes it easier for remote attackers to defeat a cryptographi… CWE-310
Cryptographic Issues
CVE-2015-7286 2024-11-21 11:36 2015-11-25 Show GitHub Exploit DB Packet Storm
274468 - csl_dualcom gprs_cs2300-r_firmware CSL DualCom GPRS CS2300-R devices with firmware 1.25 through 3.53 do not require authentication from Alarm Receiving Center (ARC) servers, which allows man-in-the-middle attackers to bypass intended … CWE-287
Improper Authentication
CVE-2015-7285 2024-11-21 11:36 2015-11-25 Show GitHub Exploit DB Packet Storm
274469 - fedoraproject
gnome
fedora
gnome_display_manager
GNOME Display Manager (gdm) before 3.18.2 allows physically proximate attackers to bypass the lock screen by holding the Escape key. CWE-264
Permissions, Privileges, and Access Controls
CVE-2015-7496 2024-11-21 11:36 2015-11-25 Show GitHub Exploit DB Packet Storm
274470 - apple mac_os_x
iphone_os
The fts3_tokenizer function in SQLite, as used in Apple iOS before 8.4 and OS X before 10.10.4, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via … CWE-20
 Improper Input Validation 
CVE-2015-7036 2024-11-21 11:36 2015-11-22 Show GitHub Exploit DB Packet Storm