Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
229271 7.5 危険 k5n.us - Craig Knudsen WebCalendar における settings.php を変更される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-5385 2012-10-15 15:46 2012-02-29 Show GitHub Exploit DB Packet Storm
229272 4.3 警告 k5n.us - Craig Knudsen WebCalendar におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-5384 2012-10-15 15:44 2012-10-11 Show GitHub Exploit DB Packet Storm
229273 4.3 警告 html2ps Project - html2ps におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2009-5067 2012-10-15 15:41 2012-10-10 Show GitHub Exploit DB Packet Storm
229274 6 警告 ActiveState Software - ActiveTcl のインストレーション機能における権限を取得される脆弱性 CWE-Other
その他
CVE-2012-5378 2012-10-15 15:06 2012-10-11 Show GitHub Exploit DB Packet Storm
229275 6 警告 ActiveState Software - ActivePerl のインストレーション機能における権限を取得される脆弱性 CWE-Other
その他
CVE-2012-5377 2012-10-15 15:03 2012-10-11 Show GitHub Exploit DB Packet Storm
229276 5.8 警告 Canonical - Ubuntu Software Properties における任意のパッケージリポジトリ GPG キーをインストールされる脆弱性 CWE-20
不適切な入力確認
CVE-2012-5356 2012-10-15 15:00 2012-10-1 Show GitHub Exploit DB Packet Storm
229277 4.3 警告 w1.fi - hostapd の EAP authentication server におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2012-4445 2012-10-15 14:57 2012-10-7 Show GitHub Exploit DB Packet Storm
229278 4 警告 Bacula.org - Bacula の dird/dird_conf.c におけるリソースのダンプ情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-4430 2012-10-15 14:56 2012-08-18 Show GitHub Exploit DB Packet Storm
229279 3.6 注意 Fedora Project - crypto-utils の genkey.pl における任意のファイルを上書きされる脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-3504 2012-10-15 14:54 2012-10-10 Show GitHub Exploit DB Packet Storm
229280 4.3 警告 シーメンス - Siemens SIMATIC S7-1200 PLC 上の Web サーバにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-3040 2012-10-15 14:34 2012-10-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 25, 2026, 4:08 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
285431 - virtual_hosting_control_system virtual_hosting_control_system Session fixation vulnerability in Virtual Hosting Control System (VHCS) 2.4.7.1 and earlier allows remote attackers to hijack web sessions by setting the PHPSESSID parameter. CWE-287
Improper Authentication
CVE-2007-3988 2018-10-16 06:32 2007-07-26 Show GitHub Exploit DB Packet Storm
285432 - cpanel cpanel Cross-site scripting (XSS) vulnerability in frontend/x/htaccess/changepro.html in cPanel 10.9.1 allows remote attackers to inject arbitrary web script or HTML via the resname parameter. NVD-CWE-Other
CVE-2007-4022 2018-10-16 06:32 2007-07-27 Show GitHub Exploit DB Packet Storm
285433 - areca cli Buffer overflow in cli32 in Areca CLI 1.72.250 and earlier might allow local users to gain privileges via a long argument. NOTE: this program is not setuid by default, but there are some usage scena… NVD-CWE-Other
CVE-2007-4027 2018-10-16 06:32 2007-07-27 Show GitHub Exploit DB Packet Storm
285434 - webspell webspell Absolute path traversal vulnerability in index.php in Webspell 4.01.02 allows remote attackers to include and execute arbitrary local files via a full pathname in the site parameter. NOTE: some of t… NVD-CWE-Other
CVE-2007-4028 2018-10-16 06:32 2007-07-27 Show GitHub Exploit DB Packet Storm
285435 - webspell webspell Vendor has supplied a patch for this vulnerability: http://cms.webspell.org/index.php?site=files&cat=10 NVD-CWE-Other
CVE-2007-4028 2018-10-16 06:32 2007-07-27 Show GitHub Exploit DB Packet Storm
285436 - libvorbis libvorbis libvorbis 1.1.2, and possibly other versions before 1.2.0, allows context-dependent attackers to cause a denial of service via (1) an invalid mapping type, which triggers an out-of-bounds read in the… NVD-CWE-Other
CVE-2007-4029 2018-10-16 06:32 2007-07-27 Show GitHub Exploit DB Packet Storm
285437 - libvorbis libvorbis Vendor has issued upgrade for this vulnerability: https://issues.rpath.com/browse/RPL-1590 NVD-CWE-Other
CVE-2007-4029 2018-10-16 06:32 2007-07-27 Show GitHub Exploit DB Packet Storm
285438 - php
t1lib
php
t1lib
Buffer overflow in the intT1_EnvGetCompletePath function in lib/t1lib/t1env.c in t1lib 5.1.1 allows context-dependent attackers to execute arbitrary code via a long FileName parameter. NOTE: this is… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2007-4033 2018-10-16 06:32 2007-07-28 Show GitHub Exploit DB Packet Storm
285439 - sitescape sitescape_forum Multiple cross-site scripting (XSS) vulnerabilities in SiteScape Forum before 7.3 allow remote attackers to inject arbitrary web script or HTML via the user name field in the login procedure, and oth… NVD-CWE-Other
CVE-2007-3807 2018-10-16 06:31 2007-07-17 Show GitHub Exploit DB Packet Storm
285440 - mkportal mkportal Multiple SQL injection vulnerabilities in MKPortal 1.1.1 allow remote attackers to execute arbitrary SQL commands via (1) the idurlo field in the delete_urlo function in (a) index.php in the urlobox … NVD-CWE-Other
CVE-2007-3814 2018-10-16 06:31 2007-07-17 Show GitHub Exploit DB Packet Storm