Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 21, 2026, 6:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
231471 5 警告 Simple Invoices - Simple Invoices の include/auth/auth.php における重要な情報を取得される脆弱性 - CVE-2007-1341 2012-12-20 18:19 2007-03-8 Show GitHub Exploit DB Packet Storm
231472 7.5 危険 weltennetz - Weltennetz News-Letterman の eintrag.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-1340 2012-12-20 18:19 2007-03-8 Show GitHub Exploit DB Packet Storm
231473 7.8 危険 VMware - VMware Workstation の仮想マシンプロセスにおけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-1337 2012-12-20 18:19 2007-05-2 Show GitHub Exploit DB Packet Storm
231474 9.3 危険 tks banking solutions - TKS Banking Solutions ePortfolio Java におけるクロスサイトリクエストフォージェリの脆弱性 - CVE-2007-1332 2012-12-20 18:19 2007-03-7 Show GitHub Exploit DB Packet Storm
231475 4.3 警告 tks banking solutions - TKS Banking Solutions ePortfolio Java におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-1331 2012-12-20 18:19 2007-03-7 Show GitHub Exploit DB Packet Storm
231476 7.8 危険 silcnet - silc-server の apps/silcd/command.c におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-1327 2012-12-20 18:19 2007-03-7 Show GitHub Exploit DB Packet Storm
231477 7.5 危険 s9y - Serendipity の index.php における SQL インジェクションの脆弱性 - CVE-2007-1326 2012-12-20 18:19 2007-03-7 Show GitHub Exploit DB Packet Storm
231478 7.1 危険 The phpMyAdmin Project - phpMyAdmin の libraries/common.lib.php におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-1325 2012-12-20 18:19 2007-03-2 Show GitHub Exploit DB Packet Storm
231479 5 警告 snapgear - SnapGear におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-1324 2012-12-20 18:19 2007-03-7 Show GitHub Exploit DB Packet Storm
231480 6.8 警告 savas place - Sava's Guestbook の add2.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-1305 2012-12-20 18:19 2007-03-6 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 21, 2026, 4:10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
294051 - phpmyadmin phpmyadmin Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 3.5.x before 3.5.3 allow remote authenticated users to inject arbitrary web script or HTML via a crafted name of (1) an event, (2) a … CWE-79
Cross-site Scripting 		CVE-2012-5339 2024-11-21 10:44 2012-10-25 Show GitHub Exploit DB Packet Storm
294052 - zoner zoner_antivirus_free The Zoner AntiVirus Free application for Android does not verify that the server hostname matches a domain name in the subject's Common Name (CN) field of the X.509 certificate, which allows man-in-t… CWE-310
Cryptographic Issues 		CVE-2012-5456 2024-11-21 10:44 2012-10-25 Show GitHub Exploit DB Packet Storm
294053 - videousermanuals white-label-cms Cross-site scripting (XSS) vulnerability in wlcms-plugin.php in the White Label CMS plugin 1.5 for WordPress allows remote authenticated administrators to inject arbitrary web script or HTML via the … CWE-79
Cross-site Scripting 		CVE-2012-5388 2024-11-21 10:44 2012-10-25 Show GitHub Exploit DB Packet Storm
294054 - videousermanuals white-label-cms Cross-site request forgery (CSRF) vulnerability in wlcms-plugin.php in the White Label CMS plugin before 1.5.1 for WordPress allows remote attackers to hijack the authentication of administrators for… CWE-352
 Origin Validation Error 		CVE-2012-5387 2024-11-21 10:44 2012-10-25 Show GitHub Exploit DB Packet Storm
294055 - tibco formvine The server in TIBCO Formvine 3.1.x and 3.2.x before 3.2.1 does not properly implement access control, which allows remote attackers to obtain sensitive information or modify data via unspecified vect… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2012-5302 2024-11-21 10:44 2012-10-25 Show GitHub Exploit DB Packet Storm
294056 - adobe shockwave_player Buffer overflow in Adobe Shockwave Player before 11.6.8.638 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2012-4172, CVE-2012-4173, CVE-2012-4… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2012-5273 2024-11-21 10:44 2012-10-24 Show GitHub Exploit DB Packet Storm
294057 - joomla joomla\! Cross-site scripting (XSS) vulnerability in the language search component in Joomla! before 3.0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to a … CWE-79
Cross-site Scripting 		CVE-2012-5455 2024-11-21 10:44 2012-10-23 Show GitHub Exploit DB Packet Storm
294058 - atutor acontent user/index_inline_editor_submit.php in ATutor AContent 1.2-1 does not properly restrict access, which allows remote authenticated users to modify arbitrary user passwords via a crafted request. NOTE… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2012-5454 2024-11-21 10:44 2012-10-23 Show GitHub Exploit DB Packet Storm
294059 - atutor acontent SQL injection vulnerability in user/index_inline_editor_submit.php in ATutor AContent 1.2-1 allows remote authenticated users to execute arbitrary SQL commands via the field parameter. NOTE: this vu… CWE-89
SQL Injection 		CVE-2012-5453 2024-11-21 10:44 2012-10-23 Show GitHub Exploit DB Packet Storm
294060 - intelliants subrion_cms Multiple cross-site scripting (XSS) vulnerabilities in Subrion CMS 2.2.1 allow remote attackers to inject arbitrary web script or HTML via the (1) multi_title parameter to blocks/add/; (2) cost, (3) … CWE-79
Cross-site Scripting 		CVE-2012-5452 2024-11-21 10:44 2012-10-23 Show GitHub Exploit DB Packet Storm