Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 12, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
231271 6.8 警告 Edgewall Software - Trac における任意のファイルを読まれるなどの脆弱性 CWE-Other
その他
CVE-2006-3695 2012-12-20 18:02 2006-07-21 Show GitHub Exploit DB Packet Storm
231272 4.6 警告 rocks clusters - Rocks Clusters における権限を取得される脆弱性 - CVE-2006-3693 2012-12-20 18:02 2006-07-21 Show GitHub Exploit DB Packet Storm
231273 7.5 危険 vbzoom - VBZooM における SQL インジェクションの脆弱性 - CVE-2006-3691 2012-12-20 18:02 2006-07-21 Show GitHub Exploit DB Packet Storm
231274 7.5 危険 miniBB - MiniBB Forum における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-3690 2012-12-20 18:02 2006-07-21 Show GitHub Exploit DB Packet Storm
231275 7.5 危険 francisco charrua - Fransisco Charrua Photo-Gallery の Room.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2006-3688 2012-12-20 18:02 2006-07-21 Show GitHub Exploit DB Packet Storm
231276 7.5 危険 D-Link Systems, Inc. - D-Link DI-524 の UPnP サービス内におけるスタックベースのバッファオーバーフローの脆弱性 - CVE-2006-3687 2012-12-20 18:02 2006-07-21 Show GitHub Exploit DB Packet Storm
231277 5 警告 ヒューレット・パッカード - HP Open VMS の [SYSEXE]SMPUTIL.EXE におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2006-3686 2012-12-20 18:02 2006-07-21 Show GitHub Exploit DB Packet Storm
231278 5.1 警告 czaries network - CzarNews における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-3685 2012-12-20 18:02 2006-07-21 Show GitHub Exploit DB Packet Storm
231279 7.5 危険 softcomplex - SoftComplex PHP Event Calendar の calendar.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-3684 2012-12-20 18:02 2006-07-21 Show GitHub Exploit DB Packet Storm
231280 7.5 危険 flipper poll - Flipper Poll の poll.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-3683 2012-12-20 18:02 2006-07-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 12, 2026, 5:06 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
293521 - hp operations_orchestration Unspecified vulnerability in HP Operations Orchestration 9.0 before 9.03 allows remote attackers to execute arbitrary code via unknown vectors. NVD-CWE-noinfo
CVE-2012-3258 2024-11-21 10:40 2012-09-19 Show GitHub Exploit DB Packet Storm
293522 - siemens simatic_pcs7
wincc
WebNavigator in Siemens WinCC 7.0 SP3 and earlier, as used in SIMATIC PCS7 and other products, allows remote attackers to discover a username and password via crafted parameters to unspecified method… CWE-200
Information Exposure
CVE-2012-3034 2024-11-21 10:40 2012-09-18 Show GitHub Exploit DB Packet Storm
293523 - siemens simatic_pcs7
wincc
SQL injection vulnerability in WebNavigator in Siemens WinCC 7.0 SP3 and earlier, as used in SIMATIC PCS7 and other products, allows remote attackers to execute arbitrary SQL commands via a crafted S… CWE-89
SQL Injection
CVE-2012-3032 2024-11-21 10:40 2012-09-18 Show GitHub Exploit DB Packet Storm
293524 - siemens simatic_pcs7
wincc
Multiple cross-site scripting (XSS) vulnerabilities in WebNavigator in Siemens WinCC 7.0 SP3 and earlier, as used in SIMATIC PCS7 and other products, allow remote attackers to inject arbitrary web sc… CWE-79
Cross-site Scripting
CVE-2012-3031 2024-11-21 10:40 2012-09-18 Show GitHub Exploit DB Packet Storm
293525 - siemens simatic_pcs7
wincc
WebNavigator in Siemens WinCC 7.0 SP3 and earlier, as used in SIMATIC PCS7 and other products, stores sensitive information under the web root with insufficient access control, which allows remote at… CWE-264
Permissions, Privileges, and Access Controls
CVE-2012-3030 2024-11-21 10:40 2012-09-18 Show GitHub Exploit DB Packet Storm
293526 - siemens simatic_pcs7
wincc
Cross-site request forgery (CSRF) vulnerability in WebNavigator in Siemens WinCC 7.0 SP3 and earlier, as used in SIMATIC PCS7 and other products, allows remote attackers to hijack the authentication … CWE-352
 Origin Validation Error
CVE-2012-3028 2024-11-21 10:40 2012-09-18 Show GitHub Exploit DB Packet Storm
293527 - cososys endpoint_protector_appliace_4 The CoSoSys Endpoint Protector 4 appliance establishes an EPProot password based entirely on the appliance serial number, which makes it easier for remote attackers to obtain access via a brute-force… CWE-264
Permissions, Privileges, and Access Controls
CVE-2012-2994 2024-11-21 10:40 2012-09-18 Show GitHub Exploit DB Packet Storm
293528 5.9 MEDIUM
Network
microsoft windows_phone_7_firmware Microsoft Windows Phone 7 does not verify the domain name in the subject's Common Name (CN) field of an X.509 certificate, which allows man-in-the-middle attackers to spoof an SSL server for the (1) … CWE-295
Improper Certificate Validation 
CVE-2012-2993 2024-11-21 10:40 2012-09-18 Show GitHub Exploit DB Packet Storm
293529 - trendmicro interscan_messaging_security_suite Cross-site request forgery (CSRF) vulnerability in saveAccountSubTab.imss in Trend Micro InterScan Messaging Security Suite 7.1-Build_Win32_1394 allows remote attackers to hijack the authentication o… CWE-352
 Origin Validation Error
CVE-2012-2996 2024-11-21 10:40 2012-09-17 Show GitHub Exploit DB Packet Storm
293530 - trendmicro interscan_messaging_security_suite Multiple cross-site scripting (XSS) vulnerabilities in Trend Micro InterScan Messaging Security Suite 7.1-Build_Win32_1394 allow remote attackers to inject arbitrary web script or HTML via (1) the wr… CWE-79
Cross-site Scripting
CVE-2012-2995 2024-11-21 10:40 2012-09-17 Show GitHub Exploit DB Packet Storm