Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 12, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
231091 7.5 危険 pike - Pike における SQL インジェクションの脆弱性 - CVE-2006-4041 2012-12-20 18:02 2006-08-9 Show GitHub Exploit DB Packet Storm
231092 7.5 危険 zonemetrics - ZoneMetrics ZoneX Publishers Gold Edition の includes/usercp_register.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4036 2012-12-20 18:02 2006-08-9 Show GitHub Exploit DB Packet Storm
231093 10 危険 WordPress.org - WordPress における脆弱性 CWE-noinfo
情報不足 		CVE-2006-4028 2012-12-20 18:02 2006-07-29 Show GitHub Exploit DB Packet Storm
231094 7.5 危険 Red Graphic Systems - SAPID CMS における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2006-4026 2012-12-20 18:02 2006-08-8 Show GitHub Exploit DB Packet Storm
231095 7.5 危険 xennobb - XennoBB の profile.php における SQL インジェクションの脆弱性 - CVE-2006-4025 2012-12-20 18:02 2006-08-8 Show GitHub Exploit DB Packet Storm
231096 2.6 注意 scatterchat - ScatterChat の cryptographic モジュールにおける大量のメッセージのパターンを特定される脆弱性 - CVE-2006-4021 2012-12-20 18:02 2006-08-17 Show GitHub Exploit DB Packet Storm
231097 4.3 警告 toenda software development - toendaCMS stable および unstable の /toendaCMS におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-4016 2012-12-20 18:02 2006-08-7 Show GitHub Exploit DB Packet Storm
231098 5 警告 シマンテック - SBAS におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2006-4014 2012-12-20 18:02 2006-07-27 Show GitHub Exploit DB Packet Storm
231099 7.6 危険 シマンテック - SBAS におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2006-4013 2012-12-20 18:02 2006-07-27 Show GitHub Exploit DB Packet Storm
231100 5.1 警告 savewebportal - circeOS SaveWeb Portal における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4012 2012-12-20 18:02 2006-08-7 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 13, 2026, 5:05 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
292411 - opensuse
google 		opensuse
chrome 		Google Chrome before 23.0.1271.91 allows remote attackers to cause a denial of service (application crash) via a response with chunked transfer coding. NVD-CWE-noinfo
CVE-2012-5132 2024-11-21 10:44 2012-11-28 Show GitHub Exploit DB Packet Storm
292412 - google chrome Google Chrome before 23.0.1271.91 on Mac OS X does not properly mitigate improper rendering behavior in the Intel GPU driver, which allows remote attackers to cause a denial of service or possibly ha… NVD-CWE-noinfo
CVE-2012-5131 2024-11-21 10:44 2012-11-28 Show GitHub Exploit DB Packet Storm
292413 - opensuse
google 		opensuse
chrome 		Skia, as used in Google Chrome before 23.0.1271.91, allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors. CWE-125
Out-of-bounds Read 		CVE-2012-5130 2024-11-21 10:44 2012-11-28 Show GitHub Exploit DB Packet Storm
292414 - openvas openvas_manager The send_to_sourcefire function in manage_sql.c in OpenVAS Manager 3.x before 3.0.4 allows remote attackers to execute arbitrary commands via the (1) IP address or (2) port number field in an OMP req… CWE-20
 Improper Input Validation  		CVE-2012-5520 2024-11-21 10:44 2012-11-26 Show GitHub Exploit DB Packet Storm
292415 - lighttpd lighttpd The http_request_split_value function in request.c in lighttpd before 1.4.32 allows remote attackers to cause a denial of service (infinite loop) via a request with a header containing an empty token… CWE-399
 Resource Management Errors 		CVE-2012-5533 2024-11-21 10:44 2012-11-25 Show GitHub Exploit DB Packet Storm
292416 - bigace bigace Session fixation vulnerability in BIGACE before 2.7.8 allows remote attackers to hijack web sessions via unspecified vectors. NVD-CWE-Other
CVE-2012-5173 2024-11-21 10:44 2012-11-23 Show GitHub Exploit DB Packet Storm
292417 - andy_armstrong cgi.pm CGI.pm module before 3.63 for Perl does not properly escape newlines in (1) Set-Cookie or (2) P3P headers, which might allow remote attackers to inject arbitrary headers into responses from applicati… CWE-16
Configuration 		CVE-2012-5526 2024-11-21 10:44 2012-11-22 Show GitHub Exploit DB Packet Storm
292418 - moodle moodle Moodle 2.3.x before 2.3.3 allows remote authenticated users to bypass the moodle/role:manage capability requirement and read all capability data by visiting the Check Permissions page. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2012-5481 2024-11-21 10:44 2012-11-21 Show GitHub Exploit DB Packet Storm
292419 - moodle moodle The Database activity module in Moodle 2.1.x before 2.1.9, 2.2.x before 2.2.6, and 2.3.x before 2.3.3 allows remote attackers to bypass intended restrictions on reading other participants' entries vi… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2012-5480 2024-11-21 10:44 2012-11-21 Show GitHub Exploit DB Packet Storm
292420 - moodle moodle The Portfolio plugin in Moodle 2.1.x before 2.1.9, 2.2.x before 2.2.6, and 2.3.x before 2.3.3 allows remote authenticated users to upload and execute files via a modified Portfolio API callback. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2012-5479 2024-11-21 10:44 2012-11-21 Show GitHub Exploit DB Packet Storm