Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 26, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
231581 7.5 危険 Plogger Project - Plogger におけるセッションをハイジャックされる脆弱性 CWE-287
不適切な認証 		CVE-2007-2277 2012-12-20 18:19 2007-04-25 Show GitHub Exploit DB Packet Storm
231582 9.4 危険 rajneel lal totaram - Rajneel Lal TotaRam USP FOSS におけるディレクトリトラバーサルの脆弱性 - CVE-2007-2271 2012-12-20 18:19 2007-04-25 Show GitHub Exploit DB Packet Storm
231583 5 警告 swsoft - Windows 用の SWsoft Plesk の top.php3 におけるディレクトリトラバーサルの脆弱性 - CVE-2007-2269 2012-12-20 18:19 2007-04-25 Show GitHub Exploit DB Packet Storm
231584 5 警告 swsoft - Windows 用の SWsoft Plesk におけるディレクトリトラバーサルの脆弱性 - CVE-2007-2268 2012-12-20 18:19 2007-04-25 Show GitHub Exploit DB Packet Storm
231585 6.8 警告 サン・マイクロシステムズ - Sun Cluster および Solaris Cluster におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-2267 2012-12-20 18:19 2007-04-24 Show GitHub Exploit DB Packet Storm
231586 10 危険 Progress Software Corporation - Progress Webspeed Messenger における任意のファイルを実行される脆弱性 CWE-DesignError
CVE-2007-2266 2012-12-20 18:19 2007-04-25 Show GitHub Exploit DB Packet Storm
231587 6.8 警告 phpee - YA Book におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-2265 2012-12-20 18:19 2007-04-25 Show GitHub Exploit DB Packet Storm
231588 7.5 危険 sinato - Sinato jmuffin の html/php/detail.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2007-2262 2012-12-20 18:19 2007-04-25 Show GitHub Exploit DB Packet Storm
231589 7.5 危険 realink - C-Arbre の espaces/communiques/annotations.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-2261 2012-12-20 18:19 2007-04-25 Show GitHub Exploit DB Packet Storm
231590 7.5 危険 phpmybibli - PHPMyBibli の includes/init.inc.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-2258 2012-12-20 18:19 2007-04-25 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 26, 2026, 4:05 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
294241 - xen xen Stack-based buffer overflow in the dirty video RAM tracking functionality in Xen 3.4 through 4.1 allows local HVM guest OS administrators to cause a denial of service (crash) via a large bitmap image. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2012-5511 2024-11-21 10:44 2012-12-13 Show GitHub Exploit DB Packet Storm
294242 - xen xen Xen 4.x, when downgrading the grant table version, does not properly remove the status page from the tracking list when freeing the page, which allows local guest OS administrators to cause a denial … NVD-CWE-Other
CVE-2012-5510 2024-11-21 10:44 2012-12-13 Show GitHub Exploit DB Packet Storm
294243 - canonical
libav
google
opensuse 		ubuntu_linux
libav
chrome
opensuse 		Google Chrome before 23.0.1271.97, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.5, do not properly perform AAC decoding, which allows remote attackers to cause a denial of service (stack memory … CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2012-5144 2024-11-21 10:44 2012-12-12 Show GitHub Exploit DB Packet Storm
294244 - opensuse
google 		opensuse
chrome 		Integer overflow in Google Chrome before 23.0.1271.97 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to PPAPI image buffers. CWE-190
 Integer Overflow or Wraparound 		CVE-2012-5143 2024-11-21 10:44 2012-12-12 Show GitHub Exploit DB Packet Storm
294245 - google
opensuse 		chrome
opensuse 		Google Chrome before 23.0.1271.97 does not properly handle history navigation, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via unspecified… CWE-94
Code Injection 		CVE-2012-5142 2024-11-21 10:44 2012-12-12 Show GitHub Exploit DB Packet Storm
294246 - opensuse
google 		opensuse
chrome 		Google Chrome before 23.0.1271.97 does not properly restrict instantiation of the Chromoting client plug-in, which has unspecified impact and attack vectors. NVD-CWE-noinfo
CVE-2012-5141 2024-11-21 10:44 2012-12-12 Show GitHub Exploit DB Packet Storm
294247 - google
opensuse 		chrome
opensuse 		Use-after-free vulnerability in Google Chrome before 23.0.1271.97 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the URL loader. CWE-416
 Use After Free 		CVE-2012-5140 2024-11-21 10:44 2012-12-12 Show GitHub Exploit DB Packet Storm
294248 - opensuse
google 		opensuse
chrome 		Use-after-free vulnerability in Google Chrome before 23.0.1271.97 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to visibility even… CWE-416
 Use After Free 		CVE-2012-5139 2024-11-21 10:44 2012-12-12 Show GitHub Exploit DB Packet Storm
294249 - kent-web access_report Cross-site scripting (XSS) vulnerability in KENT-WEB ACCESS REPORT 5.02 and earlier allows remote attackers to inject arbitrary web script or HTML via vectors related to tag embedding. CWE-79
Cross-site Scripting 		CVE-2012-5176 2024-11-21 10:44 2012-12-6 Show GitHub Exploit DB Packet Storm
294250 - kent-web access_report Cross-site scripting (XSS) vulnerability in KENT-WEB ACCESS REPORT 4.2 and earlier allows remote attackers to inject arbitrary web script or HTML via vectors related to access-log data. CWE-79
Cross-site Scripting 		CVE-2012-5175 2024-11-21 10:44 2012-12-6 Show GitHub Exploit DB Packet Storm