Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 11, 2026, 6:01 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
231101 7.5 危険 gillius programming - GNE の ConsoleStreambuf.cpp におけるフォーマットストリングの脆弱性 - CVE-2006-3908 2012-12-20 18:02 2006-07-27 Show GitHub Exploit DB Packet Storm
231102 5 警告 シーメンス - Siemens SpeedStream におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2006-3907 2012-12-20 18:02 2006-07-27 Show GitHub Exploit DB Packet Storm
231103 7.5 危険 mywebland - Webland MyBloggie における SQL インジェクションの脆弱性 - CVE-2006-3905 2012-12-20 18:02 2006-07-27 Show GitHub Exploit DB Packet Storm
231104 6.8 警告 Etomite Project - Etomite CMS の manager/index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2006-3904 2012-12-20 18:02 2006-07-27 Show GitHub Exploit DB Packet Storm
231105 5.8 警告 mywebland - myWebland MyBloggie における CRLF インジェクションの脆弱性 - CVE-2006-3903 2012-12-20 18:02 2006-07-27 Show GitHub Exploit DB Packet Storm
231106 4.3 警告 phpfaber - phpFaber TopSites の index.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-3902 2012-12-20 18:02 2006-07-27 Show GitHub Exploit DB Packet Storm
231107 7.5 危険 tumbleweed - Tumbleweed EMF におけるスタックベースのバッファオーバーフローの脆弱性 - CVE-2006-3901 2012-12-20 18:02 2006-07-27 Show GitHub Exploit DB Packet Storm
231108 6.8 警告 tobias kloy - TP-Book の guestbook.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-3900 2012-12-20 18:02 2006-07-27 Show GitHub Exploit DB Packet Storm
231109 5 警告 マイクロソフト - Windows 上で稼動する Microsoft Internet Explorer 6.0 におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2006-3899 2012-12-20 18:02 2006-07-27 Show GitHub Exploit DB Packet Storm
231110 5 警告 マイクロソフト - Windows 上で稼動する Microsoft Internet Explorer 6.0 におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2006-3898 2012-12-20 18:02 2006-07-27 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 12, 2026, 5:06 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
292451 - otrs otrs
otrs_itsm
Cross-site scripting (XSS) vulnerability in Open Ticket Request System (OTRS) Help Desk 2.4.x before 2.4.14, 3.0.x before 3.0.16, and 3.1.x before 3.1.10, when Firefox or Opera is used, allows remote… CWE-79
Cross-site Scripting
CVE-2012-4600 2024-11-21 10:43 2012-08-31 Show GitHub Exploit DB Packet Storm
292452 - sophos safeguard_enterprise The Device Encryption Client component in Sophos SafeGuard Enterprise 6.0, when a volume-based encryption policy is enabled in conjunction with a user-defined key, does not properly block use of exFA… CWE-264
Permissions, Privileges, and Access Controls
CVE-2012-4736 2024-11-21 10:43 2012-08-30 Show GitHub Exploit DB Packet Storm
292453 - vbulletin vbulletin SQL injection vulnerability in announcement.php in vBulletin 4.1.10 allows remote attackers to execute arbitrary SQL commands via the announcementid parameter. CWE-89
SQL Injection
CVE-2012-4686 2024-11-21 10:43 2012-08-29 Show GitHub Exploit DB Packet Storm
292454 - arbornetworks peakflow_sp Cross-site scripting (XSS) vulnerability in Arbor Networks Peakflow SP 5.1.1 before patch 6, 5.5 before patch 4, and 5.6.0 before patch 1 allows remote attackers to inject arbitrary web script or HTM… CWE-79
Cross-site Scripting
CVE-2012-4685 2024-11-21 10:43 2012-08-29 Show GitHub Exploit DB Packet Storm
292455 - ioserver ioserver Directory traversal vulnerability in the XML Server in IOServer before 1.0.19.0, when the Root Directory pathname lacks a trailing \ (backslash) character, allows remote attackers to read arbitrary f… CWE-22
Path Traversal
CVE-2012-4680 2024-11-21 10:43 2012-08-28 Show GitHub Exploit DB Packet Storm
292456 - sourcefabric newscoop Cross-site scripting (XSS) vulnerability in admin/login.php in Newscoop before 3.5.5 allows remote attackers to inject arbitrary web script or HTML via the f_user_name parameter. CWE-79
Cross-site Scripting
CVE-2012-4679 2024-11-21 10:43 2012-08-28 Show GitHub Exploit DB Packet Storm
292457 - munin-monitoring munin munin-cgi-graph for Munin 2.0 rc4 does not delete temporary files, which allows remote attackers to cause a denial of service (disk consumption) via many requests to an image with unique parameters. CWE-399
 Resource Management Errors
CVE-2012-4678 2024-11-21 10:43 2012-08-27 Show GitHub Exploit DB Packet Storm
292458 - google tunnelblick Tunnelblick 3.3beta20 and earlier allows local users to gain privileges by using a crafted Info.plist file to control the gOkIfNotSecure value. CWE-264
Permissions, Privileges, and Access Controls
CVE-2012-4677 2024-11-21 10:43 2012-08-27 Show GitHub Exploit DB Packet Storm
292459 - google tunnelblick The errorExitIfAttackViaString function in Tunnelblick 3.3beta20 and earlier allows local users to delete arbitrary files by constructing a (1) symlink or (2) hard link, a different vulnerability tha… CWE-59
Link Following
CVE-2012-4676 2024-11-21 10:43 2012-08-27 Show GitHub Exploit DB Packet Storm
292460 - pluxml pluxml Cross-site scripting (XSS) vulnerability in PluXml 5.1.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to file update. CWE-79
Cross-site Scripting
CVE-2012-4675 2024-11-21 10:43 2012-08-27 Show GitHub Exploit DB Packet Storm