Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 18, 2026, 4:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
231821 5 警告 schoolalumni portal - SchoolAlumni Portal の mod.php におけるディレクトリトラバーサルの脆弱性 - CVE-2006-5528 2012-12-20 18:02 2006-10-26 Show GitHub Exploit DB Packet Storm
231822 5.1 警告 PHPNUKE - PHP-Nuke の mainfile.php における SQL インジェクション攻撃を実行される脆弱性 - CVE-2006-5525 2012-12-20 18:02 2006-10-26 Show GitHub Exploit DB Packet Storm
231823 6.8 警告 phpList - phplist の index.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-5524 2012-12-20 18:02 2006-10-26 Show GitHub Exploit DB Packet Storm
231824 7.5 危険 rhode island secretary of state - Rhode Island OMFA における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2006-5517 2012-12-20 18:02 2006-10-26 Show GitHub Exploit DB Packet Storm
231825 4.3 警告 wikini - WikiNi の actions/usersettings.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-5516 2012-12-20 18:02 2006-10-26 Show GitHub Exploit DB Packet Storm
231826 7.5 危険 web group communication center - WGCC の quiz.php における SQL インジェクションの脆弱性 - CVE-2006-5514 2012-12-20 18:02 2006-10-26 Show GitHub Exploit DB Packet Storm
231827 4.3 警告 zwahlen informatik - Zwahlen Online Shop の article.htm におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-5512 2012-12-20 18:02 2006-10-25 Show GitHub Exploit DB Packet Storm
231828 7.5 危険 woltlab - WoltLab Burning Book の addentry.php における任意の PHP コードを実行される脆弱性 - CVE-2006-5509 2012-12-20 18:02 2006-10-25 Show GitHub Exploit DB Packet Storm
231829 7.5 危険 woltlab - WoltLab Burning Book の addentry.php における SQL インジェクションの脆弱性 - CVE-2006-5508 2012-12-20 18:02 2006-10-25 Show GitHub Exploit DB Packet Storm
231830 7.5 危険 wiclear - WiClear における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2006-5506 2012-12-20 18:02 2006-10-25 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 18, 2026, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
293831 - 3s-software codesys_gateway-server Directory traversal vulnerability in 3S CODESYS Gateway-Server before 2.3.9.27 allows remote attackers to execute arbitrary code via vectors involving a crafted pathname. CWE-22
Path Traversal 		CVE-2012-4705 2024-11-21 10:43 2013-02-24 Show GitHub Exploit DB Packet Storm
293832 - 3s-software codesys_gateway-server Array index error in 3S CODESYS Gateway-Server before 2.3.9.27 allows remote attackers to execute arbitrary code via a crafted packet. CWE-20
 Improper Input Validation  		CVE-2012-4704 2024-11-21 10:43 2013-02-24 Show GitHub Exploit DB Packet Storm
293833 - linux linux_kernel The load_script function in fs/binfmt_script.c in the Linux kernel before 3.7.2 does not properly handle recursion, which allows local users to obtain sensitive information from kernel stack memory v… CWE-200
Information Exposure 		CVE-2012-4530 2024-11-21 10:43 2013-02-18 Show GitHub Exploit DB Packet Storm
293834 - moxa edr-g903_firmware Moxa EDR-G903 series routers with firmware before 2.11 have a hardcoded account, which allows remote attackers to obtain unspecified device access via unknown vectors. CWE-798
 Use of Hard-coded Credentials 		CVE-2012-4712 2024-11-21 10:43 2013-02-15 Show GitHub Exploit DB Packet Storm
293835 - wellintech kingview Buffer overflow in kingMess.exe 65.20.2003.10300 in WellinTech KingView 6.52, kingMess.exe 65.20.2003.10400 in KingView 6.53, and kingMess.exe 65.50.2011.18049 in KingView 6.55 allows remote attacker… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2012-4711 2024-11-21 10:43 2013-02-15 Show GitHub Exploit DB Packet Storm
293836 - tridium niagara_ax Directory traversal vulnerability in Tridium Niagara AX 3.5, 3.6, and 3.7 allows remote attackers to read sensitive files, and consequently execute arbitrary code, by leveraging (1) valid credentials… CWE-22
Path Traversal 		CVE-2012-4701 2024-11-21 10:43 2013-02-15 Show GitHub Exploit DB Packet Storm
293837 - moxa edr_g903_firmware
edr-g903 		Moxa EDR-G903 series routers with firmware before 2.11 do not use a sufficient source of entropy for (1) SSH and (2) SSL keys, which makes it easier for man-in-the-middle attackers to spoof a device … CWE-310
Cryptographic Issues 		CVE-2012-4694 2024-11-21 10:43 2013-02-15 Show GitHub Exploit DB Packet Storm
293838 - ecava integraxor Multiple buffer overflows in an ActiveX control in PE3DO32A.ocx in IntegraXor SCADA Server 4.00 build 4250.0 and earlier allow remote attackers to execute arbitrary code via a crafted HTML document. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2012-4700 2024-11-21 10:43 2013-02-8 Show GitHub Exploit DB Packet Storm
293839 - ibm infosphere_information_server
infosphere_business_glossary 		Information Services Framework (ISF) in IBM InfoSphere Information Server 8.1, 8.5 before FP3, and 8.7 and InfoSphere Business Glossary 8.1.1 and 8.1.2 does not have an off autocomplete attribute for… CWE-200
Information Exposure 		CVE-2012-4832 2024-11-21 10:43 2013-01-31 Show GitHub Exploit DB Packet Storm
293840 - ibm infosphere_information_server
infosphere_business_glossary 		Cross-site scripting (XSS) vulnerability in InfoSphere Business Glossary 8.1.1 and 8.1.2, InfoSphere DataStage Operation Console, InfoSphere Administration, and Reporting and Repository Management We… CWE-79
Cross-site Scripting 		CVE-2012-4819 2024-11-21 10:43 2013-01-31 Show GitHub Exploit DB Packet Storm