Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 17, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
219521 5 警告 Xerox - Xerox CopyCentre および Xerox WorkCentre Pro におけるバッファオーバーフローの脆弱性 - CVE-2006-1136 2014-03-11 17:43 2006-03-10 Show GitHub Exploit DB Packet Storm
219522 7.5 危険 revilloc solutions - RevilloC MailServer および Proxy におけるバッファオーバーフローの脆弱性 - CVE-2006-1124 2014-03-11 17:43 2006-03-9 Show GitHub Exploit DB Packet Storm
219523 6.8 警告 CutePHP - CuteNews におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-1121 2014-03-11 17:43 2006-03-9 Show GitHub Exploit DB Packet Storm
219524 4.3 警告 aztek forum - Aztek Forum におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-1110 2014-03-11 17:43 2006-03-9 Show GitHub Exploit DB Packet Storm
219525 7.5 危険 sauerbraten - Sauerbraten におけるバッファオーバーフローの脆弱性 - CVE-2006-1100 2014-03-11 17:43 2006-03-9 Show GitHub Exploit DB Packet Storm
219526 10 危険 van dyke technologies - SecureCRT および SecureFX におけるバッファオーバーフローの脆弱性 - CVE-2006-1038 2014-03-11 17:43 2006-03-7 Show GitHub Exploit DB Packet Storm
219527 7.5 危険 igenus - iGENUS Webmail における任意のローカルファイルを含められる脆弱性 CWE-94
コード・インジェクション 		CVE-2006-1031 2014-03-11 17:43 2006-03-7 Show GitHub Exploit DB Packet Storm
219528 7.5 危険 マイクロソフト - Microsoft Internet Explorer 6.0 におけるバッファオーバーフローの脆弱性 - CVE-2006-1016 2014-03-11 17:43 2006-03-7 Show GitHub Exploit DB Packet Storm
219529 6.4 警告 crossfire - CrossFire におけるバッファオーバーフローの脆弱性 - CVE-2006-1010 2014-03-11 17:43 2006-03-6 Show GitHub Exploit DB Packet Storm
219530 4.3 警告 Cactusoft International FZ-LLC & Cactusoft Ltd. - Parodia の agencyprofile.asp におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-1004 2014-03-11 17:43 2006-03-6 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 18, 2026, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
295811 - siemens wincc The XPath functionality in unspecified web applications in Siemens WinCC 7.0 SP3 before Update 2 does not properly handle special characters in parameters, which allows remote authenticated users to … CWE-94
Code Injection 		CVE-2012-2596 2024-11-21 10:39 2012-06-9 Show GitHub Exploit DB Packet Storm
295812 - siemens wincc Multiple cross-site scripting (XSS) vulnerabilities in unspecified web applications in Siemens WinCC 7.0 SP3 before Update 2 allow remote attackers to inject arbitrary web script or HTML via vectors … CWE-79
Cross-site Scripting 		CVE-2012-2595 2024-11-21 10:39 2012-06-9 Show GitHub Exploit DB Packet Storm
295813 - collabnet scrumworks The server in CollabNet ScrumWorks Pro before 6.0 allows remote authenticated users to gain privileges and obtain sensitive information via a modified desktop client. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2012-2603 2024-11-21 10:39 2012-06-9 Show GitHub Exploit DB Packet Storm
295814 - s9y serendipity SQL injection vulnerability in include/functions_trackbacks.inc.php in Serendipity 1.6.2 allows remote attackers to execute arbitrary SQL commands via the url parameter to comment.php. CWE-89
SQL Injection 		CVE-2012-2762 2024-11-21 10:39 2012-06-8 Show GitHub Exploit DB Packet Storm
295815 - sensiolabs symfony Session fixation vulnerability in lib/user/sfBasicSecurityUser.class.php in SensioLabs Symfony before 1.4.18 allows remote attackers to hijack web sessions via vectors related to the regenerate metho… NVD-CWE-Other
CVE-2012-2667 2024-11-21 10:39 2012-06-8 Show GitHub Exploit DB Packet Storm
295816 - bandainamcogames madomagi-ip_android The Puella Magi Madoka Magica iP application 1.05 and earlier for Android places cleartext Twitter credentials in a log file, which allows remote attackers to obtain sensitive information via a craft… CWE-255
Credentials Management 		CVE-2012-2630 2024-11-21 10:39 2012-06-5 Show GitHub Exploit DB Packet Storm
295817 - networkupstools nut Buffer overflow in the addchar function in common/parseconf.c in upsd in Network UPS Tools (NUT) before 2.6.4 allows remote attackers to execute arbitrary code or cause a denial of service (electric-… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2012-2944 2024-11-21 10:39 2012-06-2 Show GitHub Exploit DB Packet Storm
295818 - vmware vma Untrusted search path vulnerability in VMware vMA 4.x and 5.x before 5.0.0.2 allows local users to gain privileges via a Trojan horse DLL in the current working directory. NVD-CWE-Other
CVE-2012-2752 2024-11-21 10:39 2012-06-2 Show GitHub Exploit DB Packet Storm
295819 - cisco ios_xr
asr_9000_rsp440_router
crs_performance_route_processor 		Cisco IOS XR before 4.2.1 on ASR 9000 series devices and CRS series devices allows remote attackers to cause a denial of service (packet transmission outage) via a crafted packet, aka Bug IDs CSCty94… CWE-20
 Improper Input Validation  		CVE-2012-2488 2024-11-21 10:39 2012-05-31 Show GitHub Exploit DB Packet Storm
295820 - captcha cryptographp CRLF injection vulnerability in cryptographp.inc.php in Cryptographp allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the cfg parameter. NVD-CWE-Other
CVE-2012-2943 2024-11-21 10:39 2012-05-28 Show GitHub Exploit DB Packet Storm