Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 27, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
220141 5 警告 The PHP Group - PHP の SQLite における open_basedir 保護機能を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-3365 2014-04-7 17:46 2012-07-19 Show GitHub Exploit DB Packet Storm
220142 10 危険 The PHP Group
アップル		 - PHP の stream の実装における脆弱性 - CVE-2012-2688 2014-04-7 17:45 2012-07-19 Show GitHub Exploit DB Packet Storm
220143 4.3 警告 The PHP Group - PHP の Fileinfo コンポーネントの libmagic/softmagic.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2013-4636 2014-04-7 17:44 2013-06-20 Show GitHub Exploit DB Packet Storm
220144 5 警告 The PHP Group - PHP の Calendar コンポーネントの jewish.c における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2013-4635 2014-04-7 17:43 2013-06-20 Show GitHub Exploit DB Packet Storm
220145 5 警告 The PHP Group
アップル		 - PHP の ext/standard/quot_print.c におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2013-2110 2014-04-7 17:40 2013-06-20 Show GitHub Exploit DB Packet Storm
220146 9.3 危険 オラクル - Oracle Java SE および JavaFX における JavaFX に関する脆弱性 CWE-noinfo
情報不足 		CVE-2013-5844 2014-04-7 17:39 2013-10-15 Show GitHub Exploit DB Packet Storm
220147 9.3 危険 IBM
オラクル		 - Oracle Java SE および Java SE Embedded における Libraries に関する脆弱性 CWE-noinfo
情報不足 		CVE-2013-5838 2014-04-7 17:37 2013-10-15 Show GitHub Exploit DB Packet Storm
220148 6.8 警告 The PHP Group - PHP の Sessions サブシステムにおける Web セッションをハイジャックされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-4718 2014-04-7 17:37 2011-12-2 Show GitHub Exploit DB Packet Storm
220149 6.8 警告 The PHP Group
アップル		 - PHP の ext/xml/xml.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2013-4113 2014-04-7 17:36 2013-07-11 Show GitHub Exploit DB Packet Storm
220150 6.5 警告 X.Org Foundation - X.Org X11 の xorg-server モジュールの dix/dixfonts.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2013-4396 2014-04-7 17:35 2013-10-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 27, 2026, 4:52 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
295091 - osclass osclass Multiple SQL injection vulnerabilities in oc-admin/ajax/ajax.php in OSClass before 2.3.5 allow remote attackers to execute arbitrary SQL commands via the id parameter in a (1) edit_category_post or (… CWE-89
SQL Injection 		CVE-2012-5162 2024-11-21 10:44 2012-09-26 Show GitHub Exploit DB Packet Storm
295092 - phpmyadmin phpmyadmin phpMyAdmin 3.5.2.2, as distributed by the cdnetworks-kr-1 mirror during an unspecified time frame in 2012, contains an externally introduced modification (Trojan Horse) in server_sync.php, which allo… CWE-94
Code Injection 		CVE-2012-5159 2024-11-21 10:44 2012-09-26 Show GitHub Exploit DB Packet Storm
295093 - sqlitemanager sqlitemanager Multiple cross-site scripting (XSS) vulnerabilities in SQLiteManager 1.2.4 allow remote attackers to inject arbitrary web script or HTML via the dbsel parameter to (1) main.php or (2) index.php; or (… CWE-79
Cross-site Scripting 		CVE-2012-5105 2024-11-21 10:44 2012-09-24 Show GitHub Exploit DB Packet Storm
295094 - ubbcentral ubb.threads Cross-site scripting (XSS) vulnerability in forums/ubbthreads.php in UBB.threads 7.5.6 and earlier allows remote attackers to inject arbitrary web script or HTML via the Loginname parameter. CWE-79
Cross-site Scripting 		CVE-2012-5104 2024-11-21 10:44 2012-09-24 Show GitHub Exploit DB Packet Storm
295095 - dnelubin gelinsguestbook Multiple cross-site scripting (XSS) vulnerabilities in action/add-submit.php in Ggb Guestbook 0.3.1 allow remote attackers to inject arbitrary web script or HTML via the (1) url or (2) message parame… CWE-79
Cross-site Scripting 		CVE-2012-5103 2024-11-21 10:44 2012-09-24 Show GitHub Exploit DB Packet Storm
295096 - dariusz_handzlik vertrigoserv Cross-site scripting (XSS) vulnerability in inc/extensions.php in VertrigoServ 2.25 allows remote attackers to inject arbitrary web script or HTML via the ext parameter. CWE-79
Cross-site Scripting 		CVE-2012-5102 2024-11-21 10:44 2012-09-24 Show GitHub Exploit DB Packet Storm
295097 - jextensions je_poll_component SQL injection vulnerability in the JExtensions JE Poll component before 1.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via unspecified vectors. CWE-89
SQL Injection 		CVE-2012-5101 2024-11-21 10:44 2012-09-24 Show GitHub Exploit DB Packet Storm
295098 - luizpicanco hserver Directory traversal vulnerability in HServer 0.1.1 allows remote attackers to read arbitrary files via a (1) ..%5c (dot dot encoded backslash) or (2) %2e%2e%5c (encoded dot dot backslash) in the PATH… CWE-22
Path Traversal 		CVE-2012-5100 2024-11-21 10:44 2012-09-24 Show GitHub Exploit DB Packet Storm
295099 - phpb2b phpb2b Cross-site scripting (XSS) vulnerability in list.php in PHPB2B 4.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the q parameter in a search action. CWE-79
Cross-site Scripting 		CVE-2012-5099 2024-11-21 10:44 2012-09-24 Show GitHub Exploit DB Packet Storm
295100 - j_waite php-x-links Multiple SQL injection vulnerabilities in Php-X-Links, possibly 1.0, allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to rate.php, (2) cid parameter to view.php, or (… CWE-89
SQL Injection 		CVE-2012-5098 2024-11-21 10:44 2012-09-24 Show GitHub Exploit DB Packet Storm