Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
229271 7.5 危険 k5n.us - Craig Knudsen WebCalendar における settings.php を変更される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-5385 2012-10-15 15:46 2012-02-29 Show GitHub Exploit DB Packet Storm
229272 4.3 警告 k5n.us - Craig Knudsen WebCalendar におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-5384 2012-10-15 15:44 2012-10-11 Show GitHub Exploit DB Packet Storm
229273 4.3 警告 html2ps Project - html2ps におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2009-5067 2012-10-15 15:41 2012-10-10 Show GitHub Exploit DB Packet Storm
229274 6 警告 ActiveState Software - ActiveTcl のインストレーション機能における権限を取得される脆弱性 CWE-Other
その他
CVE-2012-5378 2012-10-15 15:06 2012-10-11 Show GitHub Exploit DB Packet Storm
229275 6 警告 ActiveState Software - ActivePerl のインストレーション機能における権限を取得される脆弱性 CWE-Other
その他
CVE-2012-5377 2012-10-15 15:03 2012-10-11 Show GitHub Exploit DB Packet Storm
229276 5.8 警告 Canonical - Ubuntu Software Properties における任意のパッケージリポジトリ GPG キーをインストールされる脆弱性 CWE-20
不適切な入力確認
CVE-2012-5356 2012-10-15 15:00 2012-10-1 Show GitHub Exploit DB Packet Storm
229277 4.3 警告 w1.fi - hostapd の EAP authentication server におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2012-4445 2012-10-15 14:57 2012-10-7 Show GitHub Exploit DB Packet Storm
229278 4 警告 Bacula.org - Bacula の dird/dird_conf.c におけるリソースのダンプ情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-4430 2012-10-15 14:56 2012-08-18 Show GitHub Exploit DB Packet Storm
229279 3.6 注意 Fedora Project - crypto-utils の genkey.pl における任意のファイルを上書きされる脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-3504 2012-10-15 14:54 2012-10-10 Show GitHub Exploit DB Packet Storm
229280 4.3 警告 シーメンス - Siemens SIMATIC S7-1200 PLC 上の Web サーバにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-3040 2012-10-15 14:34 2012-10-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 22, 2026, 4 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
298651 - bti-tracker bti-tracker blocks/shoutbox_block.php in BtiTracker 1.4.4 does not verify user accounts, which allows remote attackers to post shoutbox entries as arbitrary users via a modified nick field. CWE-287
CWE-255
CWE-264
Improper Authentication
Credentials Management
Permissions, Privileges, and Access Controls
CVE-2007-5988 2017-07-29 10:33 2007-11-15 Show GitHub Exploit DB Packet Storm
298652 - bandersnatch bandersnatch Multiple cross-site scripting (XSS) vulnerabilities in index.php in Bandersnatch 0.4 allow remote attackers to inject arbitrary web script or HTML via the (1) func or (2) date parameter, or the jid p… CWE-79
Cross-site Scripting
CVE-2007-6001 2017-07-29 10:33 2007-11-16 Show GitHub Exploit DB Packet Storm
298653 - fenrir grani
sleipnir
Cross-site scripting (XSS) vulnerability in Fenriru (1) Sleipnir 2.5.17 R2 and earlier and (2) Grani 3.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the Search fiel… CWE-79
Cross-site Scripting
CVE-2007-6002 2017-07-29 10:33 2007-11-16 Show GitHub Exploit DB Packet Storm
298654 - thomson speedtouch Cross-site scripting (XSS) vulnerability in cgi/b/ic/connect in the Thomson SpeedTouch 716 with firmware 5.4.0.14 allows remote attackers to inject arbitrary web script or HTML via the url parameter.… CWE-79
Cross-site Scripting
CVE-2007-6003 2017-07-29 10:33 2007-11-16 Show GitHub Exploit DB Packet Storm
298655 - webex_communications webex_gpccontainer_activex_control Unspecified vulnerability in the GpcContainer.GpcContainer.1 ActiveX control in WebEx allows remote attackers to cause a denial of service (memory access violation and crash) via (1) an invalid argum… CWE-399
 Resource Management Errors
CVE-2007-6005 2017-07-29 10:33 2007-11-16 Show GitHub Exploit DB Packet Storm
298656 - horde framework
groupware_webmail_edition
horde
imp
IMP Webmail Client 4.1.5, Horde Application Framework 3.1.5, and Horde Groupware Webmail Edition 1.0.3 does not validate unspecified HTTP requests, which allows remote attackers to (1) delete arbitra… CWE-264
Permissions, Privileges, and Access Controls
CVE-2007-6018 2017-07-29 10:33 2008-01-11 Show GitHub Exploit DB Packet Storm
298657 - atom photoblog Multiple cross-site scripting (XSS) vulnerabilities in atomPhotoBlog.php in Atom PhotoBlog 1.0.9 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) Your Name, (2) Y… NVD-CWE-Other
CVE-2007-3134 2017-07-29 10:32 2007-06-9 Show GitHub Exploit DB Packet Storm
298658 - opera opera_browser Visual truncation vulnerability in Opera 9.21 allows remote attackers to spoof the address bar and possibly conduct phishing attacks via a long hostname, which is truncated after 34 characters, as de… NVD-CWE-Other
CVE-2007-3142 2017-07-29 10:32 2007-06-12 Show GitHub Exploit DB Packet Storm
298659 - kde konqueror Visual truncation vulnerability in Konqueror 3.5.5 allows remote attackers to spoof the address bar and possibly conduct phishing attacks via a long hostname, which is truncated after a certain numbe… NVD-CWE-Other
CVE-2007-3143 2017-07-29 10:32 2007-06-12 Show GitHub Exploit DB Packet Storm
298660 - mozilla mozilla Visual truncation vulnerability in Mozilla 1.7.12 allows remote attackers to spoof the address bar and possibly conduct phishing attacks via a long hostname, which is truncated after a certain number… NVD-CWE-Other
CVE-2007-3144 2017-07-29 10:32 2007-06-12 Show GitHub Exploit DB Packet Storm