Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 2, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
252301	4	警告	The Support Incident Tracker Project	-	Support Incident Tracker の move_uploaded_file.php における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2011-5067	2012-02-1 16:07	2012-01-29	Show	GitHub Exploit DB Packet Storm

252302	6	警告	The Support Incident Tracker Project	-	Support Incident Tracker の ftp_upload_file.php における任意の PHP コードを実行される脆弱性	CWE-Other その他	CVE-2011-3833	2012-02-1 16:05	2012-01-29	Show	GitHub Exploit DB Packet Storm

252303	6.5	警告	The Support Incident Tracker Project	-	Support Incident Tracker の config.php における任意の PHP コードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2011-3832	2012-02-1 16:02	2012-01-29	Show	GitHub Exploit DB Packet Storm

252304	7.5	危険	The Support Incident Tracker Project	-	Support Incident Tracker の incident_attachments.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2011-3831	2012-02-1 16:01	2012-01-29	Show	GitHub Exploit DB Packet Storm

252305	4.3	警告	The Support Incident Tracker Project	-	Support Incident Tracker の search.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-3830	2012-02-1 15:59	2012-01-29	Show	GitHub Exploit DB Packet Storm

252306	4	警告	The Support Incident Tracker Project	-	Support Incident Tracker の ftp_upload_file.php における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2011-3829	2012-02-1 15:58	2012-01-29	Show	GitHub Exploit DB Packet Storm

252307	4	警告	イー・アクセス株式会社	-	Pocket WiFi (GP02) におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2012-0314	2012-02-1 12:01	2012-02-1	Show	GitHub Exploit DB Packet Storm

252308	5.8	警告	OpenNMS	-	OpenNMS におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-0936	2012-02-1 11:05	2012-01-29	Show	GitHub Exploit DB Packet Storm

252309	7.5	危険	Aryadad	-	Aryadad CMS の Default.aspx における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2012-0935	2012-02-1 11:03	2012-01-29	Show	GitHub Exploit DB Packet Storm

252310	7.5	危険	Zingiri	-	WordPress 用 Theme Tuner プラグインにおける任意の PHP コードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2012-0934	2012-02-1 11:03	2012-01-29	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 2, 2026, 4:18 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
275051	6.1	MEDIUM Network	apache	wicket	Multiple cross-site scripting (XSS) vulnerabilities in the (1) RadioGroup and (2) CheckBoxMultipleChoice classes in Apache Wicket 1.5.x before 1.5.15, 6.x before 6.22.0, and 7.x before 7.2.0 allow re…	CWE-79 Cross-site Scripting	CVE-2015-7520	2024-11-21 11:36	2016-04-13	Show	GitHub Exploit DB Packet Storm

275052	5.3	MEDIUM Network	kubernetes redhat	kubernetes openshift	Kubernetes before 1.2.0-alpha.5 allows remote attackers to read arbitrary pod logs via a container name.	CWE-200 Information Exposure	CVE-2015-7528	2024-11-21 11:36	2016-04-12	Show	GitHub Exploit DB Packet Storm

275053	5.1	MEDIUM Local	redhat	cloudforms_management_engine cloudforms	Red Hat CloudForms 3.2 Management Engine (CFME) 5.4.4 and CloudForms 4.0 Management Engine (CFME) 5.5.0 do not properly encrypt data in the backend PostgreSQL database, which might allow local users …	CWE-200 Information Exposure	CVE-2015-7502	2024-11-21 11:36	2016-04-12	Show	GitHub Exploit DB Packet Storm

275054	8.8	HIGH Network	puppet	puppet_enterprise	Puppet Enterprise 2015.3 before 2015.3.1 allows remote attackers to bypass a host whitelist protection mechanism by leveraging the Puppet communications protocol.	CWE-254 7PK - Security Features	CVE-2015-7330	2024-11-21 11:36	2016-04-12	Show	GitHub Exploit DB Packet Storm

275055	8.4	HIGH Local	apple ruby-lang	mac_os_x ruby	The Fiddle::Handle implementation in ext/fiddle/handle.c in Ruby before 2.0.0-p648, 2.1 before 2.1.8, and 2.2 before 2.2.4, as distributed in Apple OS X before 10.11.4 and other products, mishandles …	CWE-20 Improper Input Validation	CVE-2015-7551	2024-11-21 11:36	2016-03-24	Show	GitHub Exploit DB Packet Storm

275056	4.3	MEDIUM Network	ibm	websphere_process_server business_process_manager	Business Space in IBM WebSphere Process Server 6.1.2.0 through 7.0.0.5 and Business Process Manager Advanced 7.5.x through 7.5.1.2, 8.0.x through 8.0.1.3, 8.5.0.x through 8.5.0.2, 8.5.5.x through 8.5…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2015-7454	2024-11-21 11:36	2016-03-21	Show	GitHub Exploit DB Packet Storm

275057	6.5	MEDIUM Network	samba canonical debian	samba ubuntu_linux debian_linux	The SMB1 implementation in smbd in Samba 3.x and 4.x before 4.1.23, 4.2.x before 4.2.9, 4.3.x before 4.3.6, and 4.4.x before 4.4.0rc4 allows remote authenticated users to modify arbitrary ACLs by usi…	CWE-284 Improper Access Control	CVE-2015-7560	2024-11-21 11:36	2016-03-14	Show	GitHub Exploit DB Packet Storm

275058	8.8	HIGH Network	ibm	flashsystem_v9000_firmware	Cross-site request forgery (CSRF) vulnerability in IBM Flash System V9000 7.4 before 7.4.1.4, 7.5 before 7.5.1.3, and 7.6 before 7.6.0.4 allows remote attackers to hijack the authentication of arbitr…	CWE-352 Origin Validation Error	CVE-2015-7446	2024-11-21 11:36	2016-03-13	Show	GitHub Exploit DB Packet Storm

275059	9.9	CRITICAL Network	ibm	tivoli_monitoring	The portal client in IBM Tivoli Monitoring (ITM) 6.2.2 through FP9, 6.2.3 through FP5, and 6.3.0 through FP6 allows remote authenticated users to gain privileges via unspecified vectors.	CWE-264 Permissions, Privileges, and Access Controls	CVE-2015-7411	2024-11-21 11:36	2016-03-12	Show	GitHub Exploit DB Packet Storm

275060	5.4	MEDIUM Network	ibm	maximo_asset_management tivoli_service_request_manager tivoli_asset_management_for_it maximo_asset_management_essentials maximo_for_utilities change_and_configuration_management_databa…	SQL injection vulnerability in IBM Maximo Asset Management 7.1 through 7.1.1.13, 7.5.0 before 7.5.0.9 IFIX003, and 7.6.0 before 7.6.0.3 IFIX001; Maximo Asset Management 7.5.0 before 7.5.0.9 IFIX003, …	CWE-89 SQL Injection	CVE-2015-7448	2024-11-21 11:36	2016-03-13	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed