Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 28, 2026, noon

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
252071 4 警告 オラクル - Oracle MySQL の MySQL Server コンポーネントにおける脆弱性 CWE-noinfo
情報不足
CVE-2012-0491 2012-01-23 16:01 2012-01-17 Show GitHub Exploit DB Packet Storm
252072 4 警告 オラクル - Oracle MySQL の MySQL Server コンポーネントにおける脆弱性 CWE-noinfo
情報不足
CVE-2012-0489 2012-01-23 15:58 2012-01-17 Show GitHub Exploit DB Packet Storm
252073 4 警告 オラクル - Oracle MySQL の MySQL Server コンポーネントにおける脆弱性 CWE-noinfo
情報不足
CVE-2012-0488 2012-01-23 15:57 2012-01-17 Show GitHub Exploit DB Packet Storm
252074 4 警告 オラクル - Oracle MySQL の MySQL Server コンポーネントにおける脆弱性 CWE-noinfo
情報不足
CVE-2012-0487 2012-01-23 15:55 2012-01-17 Show GitHub Exploit DB Packet Storm
252075 5 警告 オラクル - Oracle MySQL の MySQL Server コンポーネントにおける脆弱性 CWE-noinfo
情報不足
CVE-2012-0486 2012-01-23 15:54 2012-01-17 Show GitHub Exploit DB Packet Storm
252076 4 警告 オラクル - Oracle MySQL の MySQL Server コンポーネントにおける脆弱性 CWE-noinfo
情報不足
CVE-2012-0485 2012-01-23 15:52 2012-01-17 Show GitHub Exploit DB Packet Storm
252077 4 警告 オラクル - Oracle MySQL の MySQL Server コンポーネントにおける脆弱性 CWE-noinfo
情報不足
CVE-2012-0120 2012-01-23 15:50 2012-01-17 Show GitHub Exploit DB Packet Storm
252078 4 警告 オラクル - Oracle MySQL の MySQL Server コンポーネントにおける脆弱性 CWE-noinfo
情報不足
CVE-2012-0119 2012-01-23 15:48 2012-01-17 Show GitHub Exploit DB Packet Storm
252079 4.3 警告 株式会社グルコース - glucose 2 において任意のスクリプトが実行される脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-0313 2012-01-23 12:41 2012-01-23 Show GitHub Exploit DB Packet Storm
252080 4 警告 オラクル - Oracle MySQL の MySQL Server コンポーネントにおける脆弱性 CWE-noinfo
情報不足
CVE-2012-0115 2012-01-23 11:28 2012-01-17 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
275961 9.8 CRITICAL
Network
koha koha Multiple SQL injection vulnerabilities in Koha 3.14.x before 3.14.16, 3.16.x before 3.16.12, 3.18.x before 3.18.08, and 3.20.x before 3.20.1 allow (1) remote attackers to execute arbitrary SQL comman… CWE-89
SQL Injection
CVE-2015-4633 2024-11-21 11:31 2018-10-19 Show GitHub Exploit DB Packet Storm
275962 7.5 HIGH
Network
koha koha Multiple directory traversal vulnerabilities in Koha 3.14.x before 3.14.16, 3.16.x before 3.16.12, 3.18.x before 3.18.08, and 3.20.x before 3.20.1 allow remote attackers to read arbitrary files via a… CWE-22
Path Traversal
CVE-2015-4632 2024-11-21 11:31 2018-10-19 Show GitHub Exploit DB Packet Storm
275963 5.4 MEDIUM
Network
koha koha Multiple cross-site scripting (XSS) vulnerabilities in Koha 3.14.x before 3.14.16, 3.16.x before 3.16.12, 3.18.x before 3.18.08, and 3.20.x before 3.20.1 allow remote attackers to inject arbitrary we… CWE-79
Cross-site Scripting
CVE-2015-4631 2024-11-21 11:31 2018-10-19 Show GitHub Exploit DB Packet Storm
275964 8.0 HIGH
Network
koha koha Multiple cross-site request forgery (CSRF) vulnerabilities in Koha 3.14.x before 3.14.16, 3.16.x before 3.16.12, 3.18.x before 3.18.08, and 3.20.x before 3.20.1 allow remote attackers to (1) hijack t… CWE-352
 Origin Validation Error
CVE-2015-4630 2024-11-21 11:31 2018-10-19 Show GitHub Exploit DB Packet Storm
275965 9.8 CRITICAL
Network
broadcom
xceedium
privileged_access_manager
xsuite
An improper input validation vulnerability in CA Privileged Access Manager 2.4.4.4 and earlier allows remote attackers to execute arbitrary commands. CWE-20
 Improper Input Validation 
CVE-2015-4664 2024-11-21 11:31 2018-06-19 Show GitHub Exploit DB Packet Storm
275966 6.1 MEDIUM
Network
nextendweb nextend_twitter_connect Cross-site scripting (XSS) vulnerability in the new_Twitter_sign_button function in nextend-Twitter-connect.php in the Nextend Twitter Connect plugin before 1.5.2 for WordPress allows remote attacker… CWE-79
Cross-site Scripting
CVE-2015-4557 2024-11-21 11:31 2018-04-13 Show GitHub Exploit DB Packet Storm
275967 4.6 MEDIUM
Physics
ring ring_firmware Ring (formerly DoorBot) video doorbells allow remote attackers to obtain sensitive information about the wireless network configuration by pressing the set up button and leveraging an API in the Gain… CWE-255
Credentials Management
CVE-2015-4400 2024-11-21 11:31 2018-02-7 Show GitHub Exploit DB Packet Storm
275968 6.5 MEDIUM
Network
efrontlearning efront Absolute path traversal vulnerability in eFront CMS 3.6.15.4 and earlier allows remote Professor users to obtain sensitive information via a full pathname in the other parameter. CWE-22
Path Traversal
CVE-2015-4461 2024-11-21 11:31 2018-02-6 Show GitHub Exploit DB Packet Storm
275969 9.8 CRITICAL
Network
bson_project bson BSON injection vulnerability in the legal? function in BSON (bson-ruby) gem before 3.0.4 for Ruby allows remote attackers to cause a denial of service (resource consumption) or inject arbitrary data … CWE-400
 Uncontrolled Resource Consumption
CVE-2015-4412 2024-11-21 11:31 2018-02-6 Show GitHub Exploit DB Packet Storm
275970 7.0 HIGH
Local
huawei mate_7_firmware The TEEOS module in Huawei Mate 7 (Mate7-TL10) smartphones before V100R001CHNC00B126SP03 allows local users with root permissions to gain privileges or cause a denial of service (memory corruption) v… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2015-4422 2024-11-21 11:31 2017-10-20 Show GitHub Exploit DB Packet Storm