Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 8, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
231831 4.3 警告 Intelliants - Subrion CMS におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-5452 2012-10-24 16:41 2012-10-22 Show GitHub Exploit DB Packet Storm
231832 4.3 警告 ATutor - ATutor AContent の file_manager/preview_top.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-5169 2012-10-24 16:41 2012-10-12 Show GitHub Exploit DB Packet Storm
231833 7.5 危険 ATutor - ATutor AContent における任意のユーザのパスワードまたはカテゴリ名を変更される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-5168 2012-10-24 16:40 2012-10-12 Show GitHub Exploit DB Packet Storm
231834 7.5 危険 ATutor - ATutor AContent における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2012-5167 2012-10-24 16:39 2012-10-12 Show GitHub Exploit DB Packet Storm
231835 7.5 危険 OpenX - OpenX の admin/campaign-zone-link.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2012-4990 2012-10-24 16:39 2012-10-22 Show GitHub Exploit DB Packet Storm
231836 4.3 警告 OpenX - OpenX の admin/plugin-index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-4989 2012-10-24 16:38 2012-10-22 Show GitHub Exploit DB Packet Storm
231837 6.8 警告 Intelliants - Subrion CMS におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2012-4773 2012-10-24 16:37 2012-10-22 Show GitHub Exploit DB Packet Storm
231838 7.5 危険 Intelliants - Subrion CMS の register/ における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2012-4772 2012-10-24 16:37 2012-10-22 Show GitHub Exploit DB Packet Storm
231839 4.3 警告 Intelliants - Subrion CMS におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-4771 2012-10-24 16:36 2012-10-22 Show GitHub Exploit DB Packet Storm
231840 3.6 注意 OpenFabrics Alliance - ibacm における ib_acm デーモンログまたは ibacm.port ファイルを上書きされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-4518 2012-10-24 16:35 2012-10-22 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 8, 2026, 4:54 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
292751 - tridium niagara_ax The default configuration of Tridium Niagara AX Framework through 3.6 uses a cleartext base64 format for transmission of credentials in cookies, which allows remote attackers to obtain sensitive info… CWE-522
 Insufficiently Protected Credentials 		CVE-2012-3025 2024-11-21 10:40 2012-08-16 Show GitHub Exploit DB Packet Storm
292752 - tridium niagara_ax Tridium Niagara AX Framework through 3.6 uses predictable values for (1) session IDs and (2) keys, which might allow remote attackers to bypass authentication via a brute-force attack. CWE-287
Improper Authentication 		CVE-2012-3024 2024-11-21 10:40 2012-08-16 Show GitHub Exploit DB Packet Storm
292753 - siemens comos Siemens COMOS before 9.1 Patch 413, 9.2 before Update 03 Patch 023, and 10.0 before Patch 005 allows remote authenticated users to obtain database administrative access via unspecified method calls. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2012-3009 2024-11-21 10:40 2012-08-16 Show GitHub Exploit DB Packet Storm
292754 - tom_braider count_per_day Multiple cross-site scripting (XSS) vulnerabilities in userperspan.php in the Count Per Day module before 3.2 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) p… CWE-79
Cross-site Scripting 		CVE-2012-3434 2024-11-21 10:40 2012-08-16 Show GitHub Exploit DB Packet Storm
292755 - zabbix zabbix SQL injection vulnerability in frontends/php/popup_bitem.php in Zabbix 1.8.15rc1 and earlier, and 2.x before 2.0.2rc1, allows remote attackers to execute arbitrary SQL commands via the itemid paramet… CWE-89
SQL Injection 		CVE-2012-3435 2024-11-21 10:40 2012-08-16 Show GitHub Exploit DB Packet Storm
292756 - canonical
libpng
opensuse
redhat
debian 		ubuntu_linux
libpng
opensuse
debian_linux 		The png_push_read_zTXt function in pngpread.c in libpng 1.0.x before 1.0.58, 1.2.x before 1.2.48, 1.4.x before 1.4.10, and 1.5.x before 1.5.10 allows remote attackers to cause a denial of service (ou… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2012-3425 2024-11-21 10:40 2012-08-14 Show GitHub Exploit DB Packet Storm
292757 - jan_kara linux_diskquota The good_client function in rquotad (rquota_svc.c) in Linux DiskQuota (aka quota) before 3.17 invokes the hosts_ctl function the first time without a host name, which might allow remote attackers to … CWE-264
Permissions, Privileges, and Access Controls 		CVE-2012-3417 2024-11-21 10:40 2012-08-14 Show GitHub Exploit DB Packet Storm
292758 - libtiff libtiff The t2p_read_tiff_init function in tiff2pdf (tools/tiff2pdf.c) in LibTIFF 4.0.2 and earlier does not properly initialize the T2P context struct pointer in certain error conditions, which allows conte… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2012-3401 2024-11-21 10:40 2012-08-14 Show GitHub Exploit DB Packet Storm
292759 - redhat certificate_system
dogtag_certificate_system 		Red Hat Certificate System (RHCS) before 8.1.1 and Dogtag Certificate System does not properly check certificate revocation requests made through the web interface, which allows remote attackers with… CWE-310
Cryptographic Issues 		CVE-2012-3367 2024-11-21 10:40 2012-08-14 Show GitHub Exploit DB Packet Storm
292760 - ushahidi ushahidi_platform Multiple cross-site scripting (XSS) vulnerabilities in (1) application/views/admin/layout.php and (2) themes/default/views/header.php in the Ushahidi Platform before 2.5 allow remote authenticated us… CWE-79
Cross-site Scripting 		CVE-2012-3476 2024-11-21 10:40 2012-08-13 Show GitHub Exploit DB Packet Storm