Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 29, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
216541 4.3 警告 Star Host Design, LLC - phpMoneyBooks の index.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2012-1669 2014-11-19 12:20 2012-03-16 Show GitHub Exploit DB Packet Storm
216542 6.8 警告 Php Scriptlerim. - Php Scriptlerim Who's Who スクリプトにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2014-8953 2014-11-19 12:13 2014-10-30 Show GitHub Exploit DB Packet Storm
216543 4.3 警告 Meg Nicholas - WordPress 用 Contact Form Clean and Simple プラグインにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-8955 2014-11-19 11:37 2014-11-4 Show GitHub Exploit DB Packet Storm
216544 6 警告 iMember360 - WordPress 用 iMember360 プラグインにおける任意のコマンドを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2014-8949 2014-11-19 11:37 2014-04-24 Show GitHub Exploit DB Packet Storm
216545 4.3 警告 Pricop - phpSound におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-8954 2014-11-19 11:25 2014-08-10 Show GitHub Exploit DB Packet Storm
216546 4.3 警告 phpMemcachedAdmin project - phpMemcachedAdmin におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-8732 2014-11-19 11:15 2014-11-12 Show GitHub Exploit DB Packet Storm
216547 6.2 警告 F5 Networks - F5 BIG-IP におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2014-8727 2014-11-19 10:58 2014-09-16 Show GitHub Exploit DB Packet Storm
216548 7.5 危険 PHP-Fusion - PHP-Fusion における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2014-8596 2014-11-19 10:35 2014-08-6 Show GitHub Exploit DB Packet Storm
216549 6.5 警告 Zoho Corporation - ManageEngine Password Manager Pro および Password Manager Pro Managed Service Providers における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2014-8499 2014-11-18 19:25 2014-11-8 Show GitHub Exploit DB Packet Storm
216550 6.5 警告 Zoho Corporation - ManageEngine Password Manager Pro および Password Manager Pro Managed Service Providers の BulkEditSearchResult.cc における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2014-8498 2014-11-18 19:24 2014-11-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 30, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
296621 - condor_project condor Multiple buffer overflows in Condor 7.6.x before 7.6.10 and 7.8.x before 7.8.4 have unknown impact and attack vectors. CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2012-5196 2024-11-21 10:44 2012-09-29 Show GitHub Exploit DB Packet Storm
296622 - fork-cms fork_cms Multiple cross-site scripting (XSS) vulnerabilities in Fork CMS before 3.2.7 allow remote attackers to inject arbitrary web script or HTML via the term parameter to (1) autocomplete.php, (2) search/a… CWE-79
Cross-site Scripting
CVE-2012-5164 2024-11-21 10:44 2012-09-26 Show GitHub Exploit DB Packet Storm
296623 - osclass osclass Cross-site scripting (XSS) vulnerability in oc-admin/ajax/ajax.php in OSClass before 2.3.5 allows remote attackers to inject arbitrary web script or HTML via the id parameter in an enable_category ac… CWE-79
Cross-site Scripting
CVE-2012-5163 2024-11-21 10:44 2012-09-26 Show GitHub Exploit DB Packet Storm
296624 - osclass osclass Multiple SQL injection vulnerabilities in oc-admin/ajax/ajax.php in OSClass before 2.3.5 allow remote attackers to execute arbitrary SQL commands via the id parameter in a (1) edit_category_post or (… CWE-89
SQL Injection
CVE-2012-5162 2024-11-21 10:44 2012-09-26 Show GitHub Exploit DB Packet Storm
296625 - phpmyadmin phpmyadmin phpMyAdmin 3.5.2.2, as distributed by the cdnetworks-kr-1 mirror during an unspecified time frame in 2012, contains an externally introduced modification (Trojan Horse) in server_sync.php, which allo… CWE-94
Code Injection
CVE-2012-5159 2024-11-21 10:44 2012-09-26 Show GitHub Exploit DB Packet Storm
296626 - sqlitemanager sqlitemanager Multiple cross-site scripting (XSS) vulnerabilities in SQLiteManager 1.2.4 allow remote attackers to inject arbitrary web script or HTML via the dbsel parameter to (1) main.php or (2) index.php; or (… CWE-79
Cross-site Scripting
CVE-2012-5105 2024-11-21 10:44 2012-09-24 Show GitHub Exploit DB Packet Storm
296627 - ubbcentral ubb.threads Cross-site scripting (XSS) vulnerability in forums/ubbthreads.php in UBB.threads 7.5.6 and earlier allows remote attackers to inject arbitrary web script or HTML via the Loginname parameter. CWE-79
Cross-site Scripting
CVE-2012-5104 2024-11-21 10:44 2012-09-24 Show GitHub Exploit DB Packet Storm
296628 - dnelubin gelinsguestbook Multiple cross-site scripting (XSS) vulnerabilities in action/add-submit.php in Ggb Guestbook 0.3.1 allow remote attackers to inject arbitrary web script or HTML via the (1) url or (2) message parame… CWE-79
Cross-site Scripting
CVE-2012-5103 2024-11-21 10:44 2012-09-24 Show GitHub Exploit DB Packet Storm
296629 - dariusz_handzlik vertrigoserv Cross-site scripting (XSS) vulnerability in inc/extensions.php in VertrigoServ 2.25 allows remote attackers to inject arbitrary web script or HTML via the ext parameter. CWE-79
Cross-site Scripting
CVE-2012-5102 2024-11-21 10:44 2012-09-24 Show GitHub Exploit DB Packet Storm
296630 - jextensions je_poll_component SQL injection vulnerability in the JExtensions JE Poll component before 1.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via unspecified vectors. CWE-89
SQL Injection
CVE-2012-5101 2024-11-21 10:44 2012-09-24 Show GitHub Exploit DB Packet Storm