Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 25, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
230451 7.5 危険 uploadscript - UploadImage の admin.php における管理者の権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-0245 2012-12-20 18:34 2008-01-11 Show GitHub Exploit DB Packet Storm
230452 10 危険 SAP - SAP MaxDB における任意のコマンドを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2008-0244 2012-12-20 18:34 2008-01-11 Show GitHub Exploit DB Packet Storm
230453 5.8 警告 サン・マイクロシステムズ - Sun Java System Identity Manager の /idm/user/login.jsp におけるオープンリダイレクトの脆弱性 CWE-20
不適切な入力確認 		CVE-2008-0241 2012-12-20 18:34 2008-01-9 Show GitHub Exploit DB Packet Storm
230454 4.3 警告 サン・マイクロシステムズ - Sun Java System Identity Manager の /idm/help/index.jsp におけるフィッシング攻撃を実行される脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-0240 2012-12-20 18:34 2008-01-9 Show GitHub Exploit DB Packet Storm
230455 4.3 警告 サン・マイクロシステムズ - Sun Java System Identity Manager におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-0239 2012-12-20 18:34 2008-01-9 Show GitHub Exploit DB Packet Storm
230456 7.5 危険 Xine - xine-lib の input/libreal/rmff.c におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-0238 2012-12-20 18:34 2008-01-11 Show GitHub Exploit DB Packet Storm
230457 7.5 危険 zero cms - Zero CMS における意図したアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-0233 2012-12-20 18:34 2008-01-10 Show GitHub Exploit DB Packet Storm
230458 7.5 危険 zero cms - Zero CMS における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-0232 2012-12-20 18:34 2008-01-10 Show GitHub Exploit DB Packet Storm
230459 7.5 危険 tuned studios - Tuned Studios Subwoofer などの Web ページテンプレートにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-0231 2012-12-20 18:34 2008-01-10 Show GitHub Exploit DB Packet Storm
230460 6.4 警告 Xine - xine-lib の input/libreal/rmff.c におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-0225 2012-12-20 18:34 2008-01-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 25, 2026, 4:01 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
293581 - shawn_bradley php_volunteer_management SQL injection vulnerability in mods/hours/data/get_hours.php in PHP Volunteer Management 1.0.2 allows remote attackers to execute arbitrary SQL commands via the id parameter. CWE-89
SQL Injection 		CVE-2012-6504 2024-11-21 10:46 2013-01-24 Show GitHub Exploit DB Packet Storm
293582 - ninjaforge com_ninjaxplorer Unspecified vulnerability in the NinjaXplorer component before 1.0.7 for Joomla! has unknown impact and attack vectors. NVD-CWE-noinfo
CVE-2012-6503 2024-11-21 10:46 2013-01-24 Show GitHub Exploit DB Packet Storm
293583 - microsoft internet_explorer Microsoft Internet Explorer before 10 allows remote attackers to obtain sensitive information about the existence of files, and read certain data from files, via a UNC share pathname in the SRC attri… CWE-200
Information Exposure 		CVE-2012-6502 2024-11-21 10:46 2013-01-23 Show GitHub Exploit DB Packet Storm
293584 - cisco nx-os
nexus_7000
nexus_7000_10-slot
nexus_7000_18-slot
nexus_7000_9-slot 		Cisco NX-OS on Nexus 7000 series switches does not properly handle certain line-card replacements, which might allow remote authenticated users to cause a denial of service (memory consumption) via a… CWE-399
 Resource Management Errors 		CVE-2012-6396 2024-11-21 10:46 2013-01-20 Show GitHub Exploit DB Packet Storm
293585 - cisco adaptive_security_appliance_software
adaptive_security_appliance
asa_1000v_cloud_firewall
asa_5500 		Cisco Adaptive Security Appliances (ASA) devices with firmware 8.4 do not properly validate unspecified input related to UNC share pathnames, which allows remote authenticated users to cause a denial… CWE-20
 Improper Input Validation  		CVE-2012-6395 2024-11-21 10:46 2013-01-19 Show GitHub Exploit DB Packet Storm
293586 - ibm intelligent_operations_center Cross-site scripting (XSS) vulnerability in IBM Intelligent Operations Center 1.5.0 allows remote attackers to inject arbitrary web script or HTML via event data fields. CWE-79
Cross-site Scripting 		CVE-2012-6360 2024-11-21 10:46 2013-01-19 Show GitHub Exploit DB Packet Storm
293587 - ibm tivoli_federated_identity_manager
tivoli_federated_identity_manager_business_gateway 		IBM Tivoli Federated Identity Manager (TFIM) 6.2.0 before 6.2.0.11, 6.2.1 before 6.2.1.3, and 6.2.2 before 6.2.2.2 and Tivoli Federated Identity Manager Business Gateway (TFIMBG) 6.2.0 before 6.2.0.1… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2012-6359 2024-11-21 10:46 2013-01-19 Show GitHub Exploit DB Packet Storm
293588 - samba samba Samba 4.0.x before 4.0.1, in certain Active Directory domain-controller configurations, does not properly interpret Access Control Entries that are based on an objectClass, which allows remote authen… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2013-0172 2024-11-21 10:46 2013-01-18 Show GitHub Exploit DB Packet Storm
293589 - cisco quad
webex_social 		Cross-site scripting (XSS) vulnerability in Cisco WebEx Social (formerly Cisco Quad) allows remote attackers to inject arbitrary web script or HTML via a crafted RSS service link, aka Bug ID CSCub619… CWE-79
Cross-site Scripting 		CVE-2012-6397 2024-11-21 10:46 2013-01-18 Show GitHub Exploit DB Packet Storm
293590 - cisco prime_lan_management_solution Cisco Prime LAN Management Solution (LMS) 4.1 through 4.2.2 on Linux does not properly validate authentication and authorization requests in TCP sessions, which allows remote attackers to execute arb… CWE-20
 Improper Input Validation  		CVE-2012-6392 2024-11-21 10:46 2013-01-18 Show GitHub Exploit DB Packet Storm