Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 12, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
230871 7.5 危険 walter beschmout - Walter Beschmout PhpQuiz における SQL インジェクションの脆弱性 - CVE-2006-4978 2012-12-20 18:02 2006-09-24 Show GitHub Exploit DB Packet Storm
230872 5 警告 walter beschmout - Walter Beschmout PhpQuiz の back/upload_img.php などにおける任意の PHP コードをアップロードされる脆弱性 - CVE-2006-4977 2012-12-20 18:02 2006-09-24 Show GitHub Exploit DB Packet Storm
230873 2.6 注意 Yahoo! - WAP 用の Yahoo! Messenger における任意の Web スクリプトまたは HTML を挿入される脆弱性 - CVE-2006-4975 2012-12-20 18:02 2006-09-24 Show GitHub Exploit DB Packet Storm
230874 7.5 危険 wahm e-commerce - WAHM E-Commerce Pie Cart Pro の enc/content.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4970 2012-12-20 18:02 2006-09-24 Show GitHub Exploit DB Packet Storm
230875 7.5 危険 wahm e-commerce - WAHM E-Commerce Pie Cart Pro における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4969 2012-12-20 18:02 2006-09-24 Show GitHub Exploit DB Packet Storm
230876 7.5 危険 postnuke software foundation - PNphpBB の includes/functions_admin.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4968 2012-12-20 18:02 2006-09-24 Show GitHub Exploit DB Packet Storm
230877 5 警告 サン・マイクロシステムズ - SSGD におけるホスト名などを含む重要な情報を取得される脆弱性 - CVE-2006-4959 2012-12-20 18:02 2006-09-23 Show GitHub Exploit DB Packet Storm
230878 6.8 警告 サン・マイクロシステムズ - SSGD におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-4958 2012-12-20 18:02 2006-09-23 Show GitHub Exploit DB Packet Storm
230879 7.5 危険 the myreview system - MyReview の functions.php における SQL インジェクションの脆弱性 - CVE-2006-4957 2012-12-20 18:02 2006-09-23 Show GitHub Exploit DB Packet Storm
230880 7.5 危険 prosysinfo - ProSysInfo TFTP Server TFTPDWIN の tftpd.exe におけるスタックベースのバッファオーバーフローの脆弱性 - CVE-2006-4948 2012-12-20 18:02 2006-09-22 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 12, 2026, 5:06 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
292751 - apache struts The token check mechanism in Apache Struts 2.0.0 through 2.3.4 does not properly validate the token name configuration parameter, which allows remote attackers to perform cross-site request forgery (… CWE-352
 Origin Validation Error
CVE-2012-4386 2024-11-21 10:42 2012-09-6 Show GitHub Exploit DB Packet Storm
292752 - adobe adobe_air_sdk
adobe_air
flash_player_for_android
flash_player
Adobe Flash Player before 10.3.183.23 and 11.x before 11.4.402.265 on Windows and Mac OS X, before 10.3.183.23 and 11.x before 11.2.202.238 on Linux, before 11.1.111.16 on Android 2.x and 3.x, and be… NVD-CWE-noinfo
CVE-2012-4171 2024-11-21 10:42 2012-09-1 Show GitHub Exploit DB Packet Storm
292753 - gimp gimp The scriptfu network server in GIMP 2.6 does not require authentication, which allows remote attackers to execute arbitrary commands via the python-fu-eval command. CWE-862
 Missing Authorization
CVE-2012-4245 2024-11-21 10:42 2012-09-1 Show GitHub Exploit DB Packet Storm
292754 - adobe photoshop_cs6 Buffer overflow in Adobe Photoshop CS6 13.x before 13.0.1 allows remote attackers to execute arbitrary code via a crafted file. CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2012-4170 2024-11-21 10:42 2012-08-31 Show GitHub Exploit DB Packet Storm
292755 - cybozu cybozu_live The WebView class in the Cybozu Live application 1.0.4 and earlier for Android allows remote attackers to execute arbitrary JavaScript code, and obtain sensitive information, via a crafted applicatio… CWE-94
Code Injection
CVE-2012-4009 2024-11-21 10:42 2012-08-31 Show GitHub Exploit DB Packet Storm
292756 - cybozu cybozu_live The Cybozu Live application 1.0.4 and earlier for Android allows remote attackers to execute arbitrary Java methods, and obtain sensitive information or execute arbitrary commands, via a crafted web … CWE-94
Code Injection
CVE-2012-4008 2024-11-21 10:42 2012-08-31 Show GitHub Exploit DB Packet Storm
292757 - opera opera_browser Opera before 11.60 allows remote attackers to spoof the address bar via unspecified homograph characters, a different vulnerability than CVE-2010-2660. NVD-CWE-Other
CVE-2012-4010 2024-11-21 10:42 2012-08-31 Show GitHub Exploit DB Packet Storm
292758 - pbboard pbboard Unrestricted file upload vulnerability in admin.php in PBBoard 2.1.4 allows remote administrators to execute arbitrary PHP code by uploading a file with an executable extension, then accessing it via… NVD-CWE-Other
CVE-2012-4036 2024-11-21 10:42 2012-08-28 Show GitHub Exploit DB Packet Storm
292759 - foxitsoftware foxit_reader Foxit Reader before 5.3 on Windows XP and Windows 7 allows remote attackers to execute arbitrary code via a PDF document with a crafted attachment that triggers calculation of a negative number durin… NVD-CWE-Other
CVE-2012-4337 2024-11-21 10:42 2012-08-24 Show GitHub Exploit DB Packet Storm
292760 - phpmyadmin phpmyadmin Multiple cross-site scripting (XSS) vulnerabilities in the Database Structure page in phpMyAdmin 3.4.x before 3.4.11.1 and 3.5.x before 3.5.2.2 allow remote authenticated users to inject arbitrary we… CWE-79
Cross-site Scripting
CVE-2012-4345 2024-11-21 10:42 2012-08-22 Show GitHub Exploit DB Packet Storm