Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 12, 2026, 10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
230841	7.5	危険	techno dreams	-	Techno Dreams Articles & Papers Package の ArticlesTableview.asp における SQL インジェクションの脆弱性	-	CVE-2006-4891	2012-12-20 18:02	2006-09-19	Show	GitHub Exploit DB Packet Storm

230842	7.5	危険	unak	-	UNAK-CMS における PHP リモートファイルインクルージョンの脆弱性	-	CVE-2006-4890	2012-12-20 18:02	2006-09-19	Show	GitHub Exploit DB Packet Storm

230843	5.1	警告	telekorn	-	Telekorn SL における PHP リモートファイルインクルージョンの脆弱性	-	CVE-2006-4889	2012-12-20 18:02	2006-09-19	Show	GitHub Exploit DB Packet Storm

230844	7.5	危険	shadowed portal	-	Shadowed Portal における PHP リモートファイルインクルージョンの脆弱性	-	CVE-2006-4885	2012-12-20 18:02	2006-09-19	Show	GitHub Exploit DB Packet Storm

230845	5	警告	phpquiz	-	Walter Beschmout PhpQuiz における重要な情報を取得される脆弱性	-	CVE-2006-4865	2012-12-20 18:02	2006-09-19	Show	GitHub Exploit DB Packet Storm

230846	4.3	警告	roller weblogger	-	Roller WebLogger におけるクロスサイトスクリプティングの脆弱性	-	CVE-2006-4856	2012-12-20 18:02	2006-09-19	Show	GitHub Exploit DB Packet Storm

230847	4.9	警告	シマンテック	-	Symantec Norton Personal Firewall などの \Device\SymEvent ドライバにおけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2006-4855	2012-12-20 18:02	2006-09-19	Show	GitHub Exploit DB Packet Storm

230848	7.5	危険	quadcomm	-	QuadComm Q-Shop の browse.asp における SQL インジェクションの脆弱性	-	CVE-2006-4852	2012-12-20 18:02	2006-09-18	Show	GitHub Exploit DB Packet Storm

230849	5	警告	ソフォス	-	Sophos Anti-Virus におけるサービス運用妨害 (DoS) の脆弱性	-	CVE-2006-4839	2012-12-20 18:02	2006-11-1	Show	GitHub Exploit DB Packet Storm

230850	7.5	危険	phpquiz	-	Jule Slootbeek phpQuiz の index.php における PHP リモートファイルインクルージョンの脆弱性	-	CVE-2006-4834	2012-12-20 18:02	2006-09-15	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 12, 2026, 5:06 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
292971	-	mozilla canonical suse	firefox thunderbird seamonkey ubuntu_linux linux_enterprise_desktop linux_enterprise_server	Mozilla Firefox before 16.0, Thunderbird before 16.0, and SeaMonkey before 2.13 do not properly implement the HTML5 Same Origin Policy, which allows remote attackers to conduct cross-site scripting (…	CWE-79 Cross-site Scripting	CVE-2012-3985	2024-11-21 10:41	2012-10-11	Show	GitHub Exploit DB Packet Storm

292972	-	mozilla canonical suse	firefox thunderbird seamonkey ubuntu_linux linux_enterprise_desktop linux_enterprise_server	Mozilla Firefox before 16.0, Thunderbird before 16.0, and SeaMonkey before 2.13 do not properly handle navigation away from a web page that has a SELECT element's menu active, which allows remote att…	NVD-CWE-Other	CVE-2012-3984	2024-11-21 10:41	2012-10-11	Show	GitHub Exploit DB Packet Storm

292973	-	mozilla redhat canonical suse debian	firefox thunderbird_esr thunderbird seamonkey enterprise_linux_server enterprise_linux_workstation ubuntu_linux enterprise_linux_desktop enterprise_linux_eus linux_enterpri…	Use-after-free vulnerability in the IME State Manager implementation in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and S…	CWE-416 Use After Free	CVE-2012-3990	2024-11-21 10:41	2012-10-11	Show	GitHub Exploit DB Packet Storm

292974	-	mozilla redhat canonical suse	firefox thunderbird_esr thunderbird seamonkey enterprise_linux_server enterprise_linux_workstation ubuntu_linux enterprise_linux_desktop enterprise_linux_eus linux_enterpri…	Use-after-free vulnerability in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 might allow user-as…	CWE-416 Use After Free	CVE-2012-3988	2024-11-21 10:41	2012-10-11	Show	GitHub Exploit DB Packet Storm

292975	-	mozilla redhat canonical suse debian	firefox thunderbird_esr thunderbird seamonkey enterprise_linux_server enterprise_linux_workstation ubuntu_linux enterprise_linux_desktop enterprise_linux_eus linux_enterpri…	Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 do not properly restrict calls to DOMWindowUtils (a…	CWE-20 Improper Input Validation	CVE-2012-3986	2024-11-21 10:41	2012-10-11	Show	GitHub Exploit DB Packet Storm

292976	-	mozilla canonical suse	firefox thunderbird seamonkey ubuntu_linux linux_enterprise_desktop linux_enterprise_server	Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 16.0, Thunderbird before 16.0, and SeaMonkey before 2.13 allow remote attackers to cause a denial of service (memo…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2012-3983	2024-11-21 10:41	2012-10-11	Show	GitHub Exploit DB Packet Storm

292977	-	mozilla redhat canonical suse debian	firefox thunderbird_esr thunderbird seamonkey enterprise_linux_server enterprise_linux_workstation ubuntu_linux enterprise_linux_desktop enterprise_linux_eus linux_enterpri…	Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey b…	NVD-CWE-noinfo	CVE-2012-3982	2024-11-21 10:41	2012-10-11	Show	GitHub Exploit DB Packet Storm

292978	-	freebsd	freebsd	The SCTP implementation in FreeBSD 8.2 allows remote attackers to cause a denial of service (NULL pointer dereference and kernel panic) via a crafted ASCONF chunk.	NVD-CWE-Other	CVE-2012-3549	2024-11-21 10:41	2012-10-10	Show	GitHub Exploit DB Packet Storm

292979	-	banu	tinyproxy	Tinyproxy 1.8.3 and earlier allows remote attackers to cause a denial of service (CPU and memory consumption) via (1) a large number of headers or (2) a large number of forged headers that trigger ha…	CWE-310 Cryptographic Issues	CVE-2012-3505	2024-11-21 10:41	2012-10-10	Show	GitHub Exploit DB Packet Storm

292980	-	dart	powertcp_activex	Stack consumption vulnerability in dartwebserver.dll 1.9 and earlier, as used in Dart PowerTCP WebServer for ActiveX and other products, allows remote attackers to cause a denial of service (daemon c…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2012-3819	2024-11-21 10:41	2012-10-4	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed