Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
229521 6.8 警告 WordPress.org - WordPress の wp-admin/index.php におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2012-4448 2012-10-2 16:16 2012-09-28 Show GitHub Exploit DB Packet Storm
229522 5 警告 エマソン - Emerson DeltaV におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2012-3035 2012-10-2 16:06 2012-09-28 Show GitHub Exploit DB Packet Storm
229523 2.1 注意 IBM - IBM AIX および VIOS の fuser における任意のプロセスを停止される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-4833 2012-10-2 16:05 2012-09-18 Show GitHub Exploit DB Packet Storm
229524 5 警告 IBM - IBM WebSphere Commerce におけるユーザの個人情報を取得される脆弱性 CWE-noinfo
情報不足 		CVE-2012-4830 2012-10-2 16:00 2012-10-1 Show GitHub Exploit DB Packet Storm
229525 5 警告 IBM - IBM Rational Business Developer における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2012-3319 2012-10-2 15:59 2012-10-1 Show GitHub Exploit DB Packet Storm
229526 6.8 警告 IBM - IBM Rational Team Concert におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2012-0748 2012-10-2 15:56 2012-10-1 Show GitHub Exploit DB Packet Storm
229527 4.3 警告 Smarty - Smarty の SmartyException クラスにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-4437 2012-10-2 15:55 2012-10-1 Show GitHub Exploit DB Packet Storm
229528 7.5 危険 OptiPNG - OptiPNG の opngreduc.c における任意のコードを実行される脆弱性 CWE-399
リソース管理の問題 		CVE-2012-4432 2012-10-2 15:54 2012-09-16 Show GitHub Exploit DB Packet Storm
229529 6.8 警告 GNOME Project - GNOME の gnome-shell プラグインにおける任意の拡張機能のダウンロードを強制される脆弱性 CWE-94
コード・インジェクション 		CVE-2012-4427 2012-10-2 15:42 2012-10-1 Show GitHub Exploit DB Packet Storm
229530 7.5 危険 Apache Software Foundation - Guacamole の libguac におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2012-4415 2012-10-2 15:13 2012-10-1 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 20, 2026, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
284881 - eye.fi eye-fi_manager Multiple cross-site request forgery (CSRF) vulnerabilities in WS-Proxy in Eye-Fi 1.1.2 allow remote attackers to hijack the authentication of users for requests that modify configuration via a SOAPAc… CWE-352
 Origin Validation Error 		CVE-2008-7139 2018-10-12 05:58 2009-09-2 Show GitHub Exploit DB Packet Storm
284882 - cpanel cpanel Absolute path traversal vulnerability in the Disk Usage module (frontend/x/diskusage/index.html) in cPanel 11.18.3 allows remote attackers to list arbitrary directories via the showtree parameter. CWE-22
Path Traversal 		CVE-2008-7142 2018-10-12 05:58 2009-09-2 Show GitHub Exploit DB Packet Storm
284883 - phpbb phpbb phpBB 2.0.23 includes the session ID in a request to modcp.php when the moderator or administrator closes a thread, which allows remote attackers to hijack the session via a post in the thread contai… CWE-200
Information Exposure 		CVE-2008-7143 2018-10-12 05:58 2009-09-2 Show GitHub Exploit DB Packet Storm
284884 - coronamatrix phpaddressbook Multiple SQL injection vulnerabilities in index.php in CoronaMatrix phpAddressBook 2.0 allow remote attackers to execute arbitrary SQL commands via the (1) username or (2) parameters. CWE-89
SQL Injection 		CVE-2008-7145 2018-10-12 05:58 2009-09-2 Show GitHub Exploit DB Packet Storm
284885 - fortinet fortigate-1000 Fortinet FortiGuard Fortinet FortiGate-1000 3.00 build 040075,070111 allows remote attackers to bypass URL filtering via fragmented GET or POST requests that use HTTP/1.0 without the Host header. NO… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2008-7161 2018-10-12 05:58 2009-09-4 Show GitHub Exploit DB Packet Storm
284886 - alice gate2_plus_wi-fi Cross-site request forgery in cp06_wifi_m_nocifr.cgi in the administrator panel in TELECOM ITALIA Alice Gate2 Plus Wi-Fi allows remote attackers to hijack the authentication of administrators for req… CWE-352
 Origin Validation Error 		CVE-2008-7165 2018-10-12 05:58 2009-09-4 Show GitHub Exploit DB Packet Storm
284887 - gameservers gsc GSC build 2067 and earlier relies on the client to enforce administrator privileges, which allows remote attackers to execute arbitrary administrator commands via a crafted packet. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2008-7170 2018-10-12 05:58 2009-09-8 Show GitHub Exploit DB Packet Storm
284888 - juracapecoffee internet_connectivity_kit The Jura Internet Connection Kit for the Jura Impressa F90 coffee maker does not properly restrict access to privileged functions, which allows remote attackers to cause a denial of service (physical… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2008-7173 2018-10-12 05:58 2009-09-8 Show GitHub Exploit DB Packet Storm
284889 - juracapecoffee internet_connectivity_kit Multiple buffer overflows in the Jura Internet Connection Kit for the Jura Impressa F90 coffee maker allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code vi… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2008-7174 2018-10-12 05:58 2009-09-8 Show GitHub Exploit DB Packet Storm
284890 - alex_rabe nextgen_gallery Cross-site scripting (XSS) vulnerability in wp-admin/admin.php in NextGEN Gallery 0.96 and earlier plugin for Wordpress allows remote attackers to inject arbitrary web script or HTML via the picture … CWE-79
Cross-site Scripting 		CVE-2008-7175 2018-10-12 05:58 2009-09-8 Show GitHub Exploit DB Packet Storm