Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 7, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
231341	5.8	警告	osCommerce Moneybookers	-	osCommerce の MoneyBookers モジュールにおける SSL サーバを偽装される脆弱性	CWE-20 不適切な入力確認	CVE-2012-5794	2012-11-7 16:28	2012-11-4	Show	GitHub Exploit DB Packet Storm

231342	5.8	警告	osCommerce Harald Ponce de Leon	-	osCommerce の Authorize.Net モジュールにおける SSL サーバを偽装される脆弱性	CWE-20 不適切な入力確認	CVE-2012-5793	2012-11-7 16:26	2012-11-4	Show	GitHub Exploit DB Packet Storm

231343	5.8	警告	Sage Pay Europe Limited osCommerce	-	osCommerce の Sage Pay Direct モジュールにおける SSL サーバを偽装される脆弱性	CWE-20 不適切な入力確認	CVE-2012-5792	2012-11-7 16:15	2012-11-4	Show	GitHub Exploit DB Packet Storm

231344	5.8	警告	PayPal	-	PayPal Invoicing における SSL サーバを偽装される脆弱性	CWE-20 不適切な入力確認	CVE-2012-5791	2012-11-7 14:45	2012-11-4	Show	GitHub Exploit DB Packet Storm

231345	5.8	警告	PayPal	-	PayPal Payments Standard PHP ライブラリにおける SSL サーバを偽装される脆弱性	CWE-20 不適切な入力確認	CVE-2012-5790	2012-11-7 14:45	2012-11-4	Show	GitHub Exploit DB Packet Storm

231346	5.8	警告	PayPal	-	PayPal Payments Standard PHP ライブラリにおける SSL サーバを偽装される脆弱性	CWE-20 不適切な入力確認	CVE-2012-5789	2012-11-7 14:44	2012-11-4	Show	GitHub Exploit DB Packet Storm

231347	5.8	警告	PayPal	-	PayPal IPN ユーティリティにおける SSL サーバを偽装される脆弱性	CWE-20 不適切な入力確認	CVE-2012-5788	2012-11-7 14:30	2012-11-4	Show	GitHub Exploit DB Packet Storm

231348	5.8	警告	PayPal	-	PayPal merchant SDK における SSL サーバを偽装される脆弱性	CWE-20 不適切な入力確認	CVE-2012-5787	2012-11-7 14:29	2012-11-4	Show	GitHub Exploit DB Packet Storm

231349	5.8	警告	Apache Software Foundation	-	Apache CXF における SSL サーバを偽装される脆弱性	CWE-20 不適切な入力確認	CVE-2012-5786	2012-11-7 14:28	2012-11-4	Show	GitHub Exploit DB Packet Storm

231350	5.8	警告	Apache Software Foundation	-	Apache Axis2/Java における SSL サーバを偽装される脆弱性	CWE-20 不適切な入力確認	CVE-2012-5785	2012-11-7 14:28	2012-11-4	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 7, 2026, 4:22 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
293171	-	creative_commons_module_project	creativecommons	Multiple cross-site scripting (XSS) vulnerabilities in the Creative Commons module 6.x-1.x before 6.x-1.1 for Drupal allow remote authenticated users with the administer creative commons permission t…	CWE-79 Cross-site Scripting	CVE-2012-2297	2024-11-21 10:38	2012-08-27	Show	GitHub Exploit DB Packet Storm

293172	-	munin-monitoring	munin	munin-cgi-graph in Munin 2.0 rc4 allows remote attackers to cause a denial of service (disk or memory consumption) via many image requests with large values in the (1) size_x or (2) size_y parameters.	CWE-399 Resource Management Errors	CVE-2012-2147	2024-11-21 10:38	2012-08-27	Show	GitHub Exploit DB Packet Storm

293173	-	ematia	elixir	Elixir 0.8.0 uses Blowfish in CFB mode without constructing a unique initialization vector (IV), which makes it easier for context-dependent users to obtain sensitive information and decrypt the data…	CWE-310 Cryptographic Issues	CVE-2012-2146	2024-11-21 10:38	2012-08-27	Show	GitHub Exploit DB Packet Storm

293174	-	munin-monitoring	munin	cgi-bin/munin-cgi-graph in Munin 2.x writes data to a log file without sanitizing non-printable characters, which might allow user-assisted remote attackers to inject terminal emulator escape sequenc…	CWE-20 Improper Input Validation	CVE-2012-2104	2024-11-21 10:38	2012-08-27	Show	GitHub Exploit DB Packet Storm

293175	-	munin-monitoring	munin	The qmailscan plugin for Munin 1.4.5 allows local users to overwrite arbitrary files via a symlink attack on temporary files with predictable names.	CWE-59 Link Following	CVE-2012-2103	2024-11-21 10:38	2012-08-27	Show	GitHub Exploit DB Packet Storm

293176	-	sitecom	wlm-2501	Cross-site request forgery (CSRF) vulnerability in goform/admin/formWlEncrypt in Sitecom WLM-2501 allows remote attackers to hijack the authentication of administrators for requests that change the r…	CWE-352 Origin Validation Error	CVE-2012-1921	2024-11-21 10:38	2012-08-27	Show	GitHub Exploit DB Packet Storm

293177	-	pluxml	pluxml	Directory traversal vulnerability in update/index.php in PluXml before 5.1.6 allows remote attackers to include and execute arbitrary local files via a ..%2F (encoded dot dot slash) in the default_la…	CWE-22 Path Traversal	CVE-2012-2227	2024-11-21 10:38	2012-08-27	Show	GitHub Exploit DB Packet Storm

293178	-	emc	applicationxtender_web_access_.net applicationxtender_desktop	EMC ApplicationXtender Desktop before 6.5 SP2 and ApplicationXtender Web Access .NET before 6.5 SP2 allow remote attackers to upload files to any location, and possibly execute arbitrary code, via un…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2012-2289	2024-11-21 10:38	2012-08-26	Show	GitHub Exploit DB Packet Storm

293179	-	ibm	websphere_application_server	IBM Global Security Kit (aka GSKit), as used in IBM HTTP Server in IBM WebSphere Application Server (WAS) 6.1.x before 6.1.0.45, 7.0.x before 7.0.0.25, 8.0.x before 8.0.0.4, and 8.5.x before 8.5.0.1,…	CWE-310 Cryptographic Issues	CVE-2012-2190	2024-11-21 10:38	2012-08-21	Show	GitHub Exploit DB Packet Storm

293180	-	debian	devotee	devotee 0.1 patch 2 uses a 32-bit seed for generating 48-bit random numbers, which makes it easier for remote attackers to obtain the secret monikers via a brute force attack.	CWE-200 Information Exposure	CVE-2012-2387	2024-11-21 10:38	2012-08-21	Show	GitHub Exploit DB Packet Storm