Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 19, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
230491 7.5 危険 Vastal I-Tech & Co. - Buddy Zone における SQL インジェクションの脆弱性 - CVE-2007-3526 2012-12-20 18:19 2007-07-3 Show GitHub Exploit DB Packet Storm
230492 7.8 危険 ripe website manager - Ripe Website Manager における設定情報を取得される脆弱性 - CVE-2007-3525 2012-12-20 18:19 2007-07-3 Show GitHub Exploit DB Packet Storm
230493 6.8 警告 ripe website manager - Ripe Website Manager における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-3524 2012-12-20 18:19 2007-07-3 Show GitHub Exploit DB Packet Storm
230494 6.8 警告 sphpell - sPHPell における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-3522 2012-12-20 18:19 2007-07-3 Show GitHub Exploit DB Packet Storm
230495 7.5 危険 wesmo - phpEventCalendar の eventdisplay.php における SQL インジェクションの脆弱性 - CVE-2007-3519 2012-12-20 18:19 2007-07-3 Show GitHub Exploit DB Packet Storm
230496 10 危険 sweetphp - TotalCalendar の view_event.php における SQL インジェクションの脆弱性 - CVE-2007-3515 2012-12-20 18:19 2007-07-3 Show GitHub Exploit DB Packet Storm
230497 7.5 危険 シマンテック - Windows Servers 用の Symantec Backup Exec におけるヒープベースのバッファオーバーフローの脆弱性 - CVE-2007-3509 2012-12-20 18:19 2007-07-11 Show GitHub Exploit DB Packet Storm
230498 6.4 警告 qt-cute - QuickTalk フォーラムにおけるディレクトリトラバーサルの脆弱性 - CVE-2007-3505 2012-12-20 18:19 2007-07-2 Show GitHub Exploit DB Packet Storm
230499 10 危険 xeforum - Xeweb XEForum における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2007-3500 2012-12-20 18:19 2007-06-29 Show GitHub Exploit DB Packet Storm
230500 6.4 警告 slackroll - SlackRoll におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-3499 2012-12-20 18:19 2007-06-29 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 19, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
293141 - libupnp_project libupnp Stack-based buffer overflow in the unique_service_name function in ssdp/ssdp_server.c in the SSDP parser in the portable SDK for UPnP Devices (aka libupnp, formerly the Intel SDK for UPnP devices) be… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2012-5958 2024-11-21 10:45 2013-02-1 Show GitHub Exploit DB Packet Storm
293142 - cisco nac_appliance Multiple cross-site scripting (XSS) vulnerabilities in the web-authentication function on the Cisco NAC Appliance 4.9.2 and earlier allow remote attackers to inject arbitrary web script or HTML via t… CWE-79
Cross-site Scripting 		CVE-2012-6029 2024-11-21 10:45 2013-01-31 Show GitHub Exploit DB Packet Storm
293143 - tinymce
moodle 		spellchecker_php
moodle 		classes/GoogleSpell.php in the PHP Spellchecker (aka Google Spellchecker) addon before 2.0.6.1 for TinyMCE, as used in Moodle 2.1.x before 2.1.10, 2.2.x before 2.2.7, 2.3.x before 2.3.4, and 2.4.x be… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2012-6112 2024-11-21 10:45 2013-01-28 Show GitHub Exploit DB Packet Storm
293144 - moodle moodle calendar/managesubscriptions.php in the Manage Subscriptions implementation in Moodle 2.4.x before 2.4.1 omits a capability check, which allows remote authenticated users to remove course-level calen… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2012-6106 2024-11-21 10:45 2013-01-28 Show GitHub Exploit DB Packet Storm
293145 - moodle moodle blog/rsslib.php in Moodle 2.1.x before 2.1.10, 2.2.x before 2.2.7, 2.3.x before 2.3.4, and 2.4.x before 2.4.1 continues to provide a blog RSS feed after blogging is disabled, which allows remote atta… CWE-200
Information Exposure 		CVE-2012-6105 2024-11-21 10:45 2013-01-28 Show GitHub Exploit DB Packet Storm
293146 - moodle moodle blog/rsslib.php in Moodle 2.2.x before 2.2.7, 2.3.x before 2.3.4, and 2.4.x before 2.4.1 allows remote attackers to obtain sensitive information from site-level blogs by leveraging the guest role and… CWE-200
Information Exposure 		CVE-2012-6104 2024-11-21 10:45 2013-01-28 Show GitHub Exploit DB Packet Storm
293147 - moodle moodle Multiple cross-site request forgery (CSRF) vulnerabilities in user/messageselect.php in the messaging system in Moodle 2.2.x before 2.2.7, 2.3.x before 2.3.4, and 2.4.x before 2.4.1 allow remote atta… CWE-352
 Origin Validation Error 		CVE-2012-6103 2024-11-21 10:45 2013-01-28 Show GitHub Exploit DB Packet Storm
293148 - moodle moodle lib.php in the Submission comments plugin in the Assignment module in Moodle 2.3.x before 2.3.4 and 2.4.x before 2.4.1 allows remote attackers to read or modify the submission comments (aka feedback … CWE-264
Permissions, Privileges, and Access Controls 		CVE-2012-6102 2024-11-21 10:45 2013-01-28 Show GitHub Exploit DB Packet Storm
293149 - moodle moodle Multiple open redirect vulnerabilities in Moodle 2.2.x before 2.2.7, 2.3.x before 2.3.4, and 2.4.x before 2.4.1 allow remote attackers to redirect users to arbitrary web sites and conduct phishing at… CWE-20
 Improper Input Validation  		CVE-2012-6101 2024-11-21 10:45 2013-01-28 Show GitHub Exploit DB Packet Storm
293150 - moodle moodle report/outline/index.php in Moodle 2.2.x before 2.2.7, 2.3.x before 2.3.4, and 2.4.x before 2.4.1 does not properly enforce the moodle/user:viewhiddendetails capability requirement, which allows remo… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2012-6100 2024-11-21 10:45 2013-01-28 Show GitHub Exploit DB Packet Storm