Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 24, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
231101 9.3 危険 rkd software - RKD Software の BarCodeAx.dll におけるスタックベースのバッファオーバーフローの脆弱性 - CVE-2007-3435 2012-12-20 18:19 2007-06-26 Show GitHub Exploit DB Packet Storm
231102 7.5 危険 PluXml - Pluxml の admin/images.php における任意のコードをアップロードおよび実行される脆弱性 - CVE-2007-3432 2012-12-20 18:19 2007-06-26 Show GitHub Exploit DB Packet Storm
231103 6.8 警告 valerio capello - Valerio Capello Dagger - The Cutting Edge r23jan2007 の cal.func.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-3431 2012-12-20 18:19 2007-06-26 Show GitHub Exploit DB Packet Storm
231104 7.5 危険 Simple Invoices - Simple Invoices 2007 の index.php における SQL インジェクションの脆弱性 - CVE-2007-3430 2012-12-20 18:19 2007-06-26 Show GitHub Exploit DB Packet Storm
231105 7.5 危険 ZoneO-soft - phpTrafficA における脆弱性 - CVE-2007-3428 2012-12-20 18:19 2007-06-26 Show GitHub Exploit DB Packet Storm
231106 7.5 危険 ZoneO-soft - phpTrafficA の index.php における SQL インジェクションの脆弱性 - CVE-2007-3427 2012-12-20 18:19 2007-06-26 Show GitHub Exploit DB Packet Storm
231107 4.3 警告 ZoneO-soft - phpTrafficA の index.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-3426 2012-12-20 18:19 2007-06-26 Show GitHub Exploit DB Packet Storm
231108 5 警告 ZoneO-soft - phpTrafficA の index.php におけるディレクトリトラバーサルの脆弱性 - CVE-2007-3425 2012-12-20 18:19 2007-06-26 Show GitHub Exploit DB Packet Storm
231109 7.5 危険 web-app.org - web-app.org WebAPP の cgi-bin/cgi-lib/instantmessage.pl における脆弱性 - CVE-2007-3424 2012-12-20 18:19 2007-06-26 Show GitHub Exploit DB Packet Storm
231110 7.5 危険 web-app.org - web-app.org WebAPP の cgi-bin/cgi-lib/instantmessage.pl における脆弱性 - CVE-2007-3423 2012-12-20 18:19 2007-06-26 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 24, 2026, 4:05 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
293991 - apache tomcat The HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.36, 6.x before 6.0.36, and 7.x before 7.0.30 caches information about the authenticated user within the session … CWE-287
Improper Authentication 		CVE-2012-5886 2024-11-21 10:45 2012-11-18 Show GitHub Exploit DB Packet Storm
293992 - apache tomcat The replay-countermeasure functionality in the HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.36, 6.x before 6.0.36, and 7.x before 7.0.30 tracks cnonce (aka clien… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2012-5885 2024-11-21 10:45 2012-11-18 Show GitHub Exploit DB Packet Storm
293993 - uk-cookie_project uk-cookie Cross-site scripting (XSS) vulnerability in the Uk Cookie (aka uk-cookie) plugin for WordPress allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. CWE-79
Cross-site Scripting 		CVE-2012-5856 2024-11-21 10:45 2012-11-18 Show GitHub Exploit DB Packet Storm
293994 - mozilla bugzilla The User.get method in Bugzilla/WebService/User.pm in Bugzilla 4.3.2 allows remote attackers to obtain sensitive information about the saved searches of arbitrary users via an XMLRPC request or a JSO… CWE-200
Information Exposure 		CVE-2012-5884 2024-11-21 10:45 2012-11-16 Show GitHub Exploit DB Packet Storm
293995 - mozilla
yahoo 		bugzilla
yui 		Cross-site scripting (XSS) vulnerability in the Flash component infrastructure in YUI 2.8.0 through 2.9.0, as used in Bugzilla 3.7.x and 4.0.x before 4.0.9, 4.1.x and 4.2.x before 4.2.4, and 4.3.x an… CWE-79
Cross-site Scripting 		CVE-2012-5883 2024-11-21 10:45 2012-11-16 Show GitHub Exploit DB Packet Storm
293996 - yahoo yui Cross-site scripting (XSS) vulnerability in the Flash component infrastructure in YUI 2.5.0 through 2.9.0 allows remote attackers to inject arbitrary web script or HTML via vectors related to uploade… CWE-79
Cross-site Scripting 		CVE-2012-5882 2024-11-21 10:45 2012-11-16 Show GitHub Exploit DB Packet Storm
293997 - yahoo yui Cross-site scripting (XSS) vulnerability in the Flash component infrastructure in YUI 2.4.0 through 2.9.0 allows remote attackers to inject arbitrary web script or HTML via vectors related to charts.… CWE-79
Cross-site Scripting 		CVE-2012-5881 2024-11-21 10:45 2012-11-16 Show GitHub Exploit DB Packet Storm
293998 - phome empirecms Eval injection vulnerability in the ReplaceListVars function in the template parser in e/class/connect.php in EmpireCMS 6.6 allows user-assisted remote attackers to execute arbitrary PHP code via a c… CWE-94
Code Injection 		CVE-2012-5777 2024-11-21 10:45 2012-11-16 Show GitHub Exploit DB Packet Storm
293999 - google
apple 		chrome
webkit
safari 		html/parser/XSSAuditor.cpp in WebCore in WebKit, as used in Google Chrome through 22 and Safari 5.1.7, does not consider all possible output contexts of reflected data, which makes it easier for remo… CWE-79
Cross-site Scripting 		CVE-2012-5851 2024-11-21 10:45 2012-11-15 Show GitHub Exploit DB Packet Storm
294000 - oberthur id-one_cosmo Unspecified vulnerability on Oberthur ID-One COSMO 5.2, 5.2a, and 64 smart cards makes it easier for attackers to defeat cryptographic protection mechanisms by leveraging the generation of non-compli… NVD-CWE-noinfo
CVE-2012-5860 2024-11-21 10:45 2012-11-14 Show GitHub Exploit DB Packet Storm