Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 24, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
251851 4.3 警告 SimpleSAMLphp - SimpleSAMLphp の modules/core/www/no_cookie.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-0040 2012-01-25 14:16 2012-01-24 Show GitHub Exploit DB Packet Storm
251852 7.5 危険 Stoneware - Stoneware webNetwork における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2012-0912 2012-01-25 14:15 2012-01-23 Show GitHub Exploit DB Packet Storm
251853 6.8 警告 Stoneware - Stoneware webNetwork におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2012-0286 2012-01-25 14:14 2012-01-23 Show GitHub Exploit DB Packet Storm
251854 4.3 警告 Stoneware - Stoneware webNetwork におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-0285 2012-01-25 14:13 2012-01-23 Show GitHub Exploit DB Packet Storm
251855 5.8 警告 NeoAxis - NeoAxis web player におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2012-0907 2012-01-25 11:24 2012-01-20 Show GitHub Exploit DB Packet Storm
251856 7.5 危険 deV!L'z Clanportal - deV!L'z Clanportal (DZCP) の Moviebase アドオンにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2012-0906 2012-01-25 11:00 2012-01-20 Show GitHub Exploit DB Packet Storm
251857 7.5 危険 deV!L'z Clanportal - deV!L'z Clanportal (DZCP) の Gamebase アドオンにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2012-0905 2012-01-25 10:57 2012-01-20 Show GitHub Exploit DB Packet Storm
251858 4.3 警告 VideoLAN - VLC media player におけるサービス運用妨害 (クラッシュ) の脆弱性 CWE-399
リソース管理の問題
CVE-2012-0904 2012-01-25 10:54 2012-01-20 Show GitHub Exploit DB Packet Storm
251859 4.3 警告 VMware - VMware Zimbra Desktop におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-0903 2012-01-25 10:51 2012-01-20 Show GitHub Exploit DB Packet Storm
251860 5 警告 AirTies - AirTies Air 4450 におけるサービス運用妨害 (リブート) の脆弱性 CWE-noinfo
情報不足
CVE-2012-0902 2012-01-25 10:43 2012-01-20 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 24, 2026, 4:05 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
276351 - microsoft internet_explorer Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulne… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2015-2427 2024-11-21 11:27 2015-11-11 Show GitHub Exploit DB Packet Storm
276352 - microsoft word
onenote
publisher
powerpoint
project_server
infopath
access
excel
project
visio
lync
skype_for_business
pinyin_ime
office_2007_ime
Microsoft Access 2007 SP3, Excel 2007 SP3, InfoPath 2007 SP3, OneNote 2007 SP3, PowerPoint 2007 SP3, Project 2007 SP3, Publisher 2007 SP3, Visio 2007 SP3, Word 2007 SP3, Office 2007 IME (Japanese) SP… CWE-264
Permissions, Privileges, and Access Controls
CVE-2015-2503 2024-11-21 11:27 2015-11-11 Show GitHub Exploit DB Packet Storm
276353 - wordpress wordpress SQL injection vulnerability in the wp_untrash_post_comments function in wp-includes/post.php in WordPress before 4.2.4 allows remote attackers to execute arbitrary SQL commands via a comment that is … CWE-89
SQL Injection
CVE-2015-2213 2024-11-21 11:27 2015-11-9 Show GitHub Exploit DB Packet Storm
276354 - mit
oracle
canonical
debian
opensuse
suse
kerberos_5
solaris
ubuntu_linux
debian_linux
leap
opensuse
linux_enterprise_server
linux_enterprise_software_development_kit
linux_enterprise_desktop
The build_principal_va function in lib/krb5/krb/bld_princ.c in MIT Kerberos 5 (aka krb5) before 1.14 allows remote authenticated users to cause a denial of service (out-of-bounds read and KDC crash) … CWE-125
Out-of-bounds Read
CVE-2015-2697 2024-11-21 11:27 2015-11-9 Show GitHub Exploit DB Packet Storm
276355 - mit
opensuse
suse
debian
canonical
kerberos_5
leap
opensuse
linux_enterprise_server
linux_enterprise_software_development_kit
linux_enterprise_desktop
debian_linux
ubuntu_linux
lib/gssapi/krb5/iakerb.c in MIT Kerberos 5 (aka krb5) before 1.14 relies on an inappropriate context handle, which allows remote attackers to cause a denial of service (incorrect pointer read and pro… CWE-18
Source Code
CVE-2015-2696 2024-11-21 11:27 2015-11-9 Show GitHub Exploit DB Packet Storm
276356 - mit
oracle
canonical
debian
suse
opensuse
kerberos_5
solaris
ubuntu_linux
debian_linux
linux_enterprise_server
linux_enterprise_desktop
linux_enterprise_software_development_kit
leap
opensuse
lib/gssapi/spnego/spnego_mech.c in MIT Kerberos 5 (aka krb5) before 1.14 relies on an inappropriate context handle, which allows remote attackers to cause a denial of service (incorrect pointer read … CWE-763
 Release of Invalid Pointer or Reference
CVE-2015-2695 2024-11-21 11:27 2015-11-9 Show GitHub Exploit DB Packet Storm
276357 - oracle solaris Unspecified vulnerability in Oracle Sun Solaris 10 and 11.2 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Gzip. NVD-CWE-noinfo
CVE-2015-2642 2024-11-21 11:27 2015-10-22 Show GitHub Exploit DB Packet Storm
276358 - oracle enterprise_manager_grid_control Unspecified vulnerability in the Enterprise Manager Ops Center component in Oracle Enterprise Manager Grid Control 12.1.0.1 and 12.2.2 allows remote authenticated users to affect confidentiality and … NVD-CWE-noinfo
CVE-2015-2633 2024-11-21 11:27 2015-10-22 Show GitHub Exploit DB Packet Storm
276359 - oracle communications_applications Unspecified vulnerability in (1) the Oracle Communications Diameter Signaling Router (DSR) component in Oracle Communications Applications 4.1.6 and earlier, 5.1.0 and earlier, 6.0.2 and earlier, and… NVD-CWE-noinfo
CVE-2015-2608 2024-11-21 11:27 2015-10-22 Show GitHub Exploit DB Packet Storm
276360 - microsoft office_sharepoint_server
excel
excel_viewer
excel_for_mac
sharepoint_server
office_compatibility_pack
Use-after-free vulnerability in Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Excel for Mac 2011, Excel 2016 for Mac, Excel Viewer, Office Compatibility Pac… NVD-CWE-Other
CVE-2015-2558 2024-11-21 11:27 2015-10-14 Show GitHub Exploit DB Packet Storm