Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 11, 2026, 6:01 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
232081 5.8 警告 PayPal - PayPal Payments Standard PHP ライブラリにおける SSL サーバを偽装される脆弱性 CWE-20
不適切な入力確認
CVE-2012-5789 2012-11-7 14:44 2012-11-4 Show GitHub Exploit DB Packet Storm
232082 5.8 警告 PayPal - PayPal IPN ユーティリティにおける SSL サーバを偽装される脆弱性 CWE-20
不適切な入力確認
CVE-2012-5788 2012-11-7 14:30 2012-11-4 Show GitHub Exploit DB Packet Storm
232083 5.8 警告 PayPal - PayPal merchant SDK における SSL サーバを偽装される脆弱性 CWE-20
不適切な入力確認
CVE-2012-5787 2012-11-7 14:29 2012-11-4 Show GitHub Exploit DB Packet Storm
232084 5.8 警告 Apache Software Foundation - Apache CXF における SSL サーバを偽装される脆弱性 CWE-20
不適切な入力確認
CVE-2012-5786 2012-11-7 14:28 2012-11-4 Show GitHub Exploit DB Packet Storm
232085 5.8 警告 Apache Software Foundation - Apache Axis2/Java における SSL サーバを偽装される脆弱性 CWE-20
不適切な入力確認
CVE-2012-5785 2012-11-7 14:28 2012-11-4 Show GitHub Exploit DB Packet Storm
232086 5.8 警告 Amazon.com, Inc. - Amazon Flexible Payments Service PHP ライブラリにおける SSL サーバを偽装される脆弱性 CWE-20
不適切な入力確認
CVE-2012-5782 2012-11-7 14:25 2012-11-4 Show GitHub Exploit DB Packet Storm
232087 5.8 警告 Amazon.com, Inc. - Amazon Elastic Load Balancing API Tools における SSL サーバを偽装される脆弱性 CWE-20
不適切な入力確認
CVE-2012-5781 2012-11-7 14:24 2012-11-4 Show GitHub Exploit DB Packet Storm
232088 5.8 警告 Amazon.com, Inc. - Amazon merchant SDK における SSL サーバを偽装される脆弱性 CWE-20
不適切な入力確認
CVE-2012-5780 2012-11-7 14:22 2012-11-4 Show GitHub Exploit DB Packet Storm
232089 5.8 警告 Apache Software Foundation - Apache Libcloud における SSL サーバを偽装される脆弱性 CWE-20
不適切な入力確認
CVE-2012-3446 2012-11-7 14:21 2012-11-4 Show GitHub Exploit DB Packet Storm
232090 4.3 警告 有限会社ビーグラフ - BeZIP 日本語対応版におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2012-5171 2012-11-7 14:00 2012-11-7 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 11, 2026, 4:09 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
292711 - sayakbanerjee sticky_notes Cross-site scripting (XSS) vulnerability in admin/login.php in Sticky Notes 0.3.09062012.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the username parameter. CWE-79
Cross-site Scripting
CVE-2012-3999 2024-11-21 10:42 2012-07-13 Show GitHub Exploit DB Packet Storm
292712 - sayakbanerjee sticky_notes Multiple SQL injection vulnerabilities in Sticky Notes before 0.2.27052012.5 allow remote attackers to execute arbitrary SQL commands via the (1) paste id in admin/modules/mod_pastes.php or (2) show.… CWE-89
SQL Injection
CVE-2012-3998 2024-11-21 10:42 2012-07-13 Show GitHub Exploit DB Packet Storm
292713 - sayakbanerjee sticky_notes Multiple cross-site scripting (XSS) vulnerabilities in Sticky Notes before 0.2.27052012.5 allow remote attackers to inject arbitrary web script or HTML via the (1) paste_user or (2) paste_lang parame… CWE-79
Cross-site Scripting
CVE-2012-3997 2024-11-21 10:42 2012-07-13 Show GitHub Exploit DB Packet Storm
292714 - tiki tikiwiki_cms\/groupware TikiWiki CMS/Groupware 8.3 and earlier allows remote attackers to obtain the installation path via a direct request to (1) admin/include_calendar.php, (2) tiki-rss_error.php, or (3) tiki-watershed_se… CWE-200
Information Exposure
CVE-2012-3996 2024-11-21 10:42 2012-07-13 Show GitHub Exploit DB Packet Storm
292715 4.3 MEDIUM
Network
arialsoftware campaign_enterprise A Security Bypass vulnerability exists in the activate.asp page in Arial Software Campaign Enterprise 11.0.551, which could let a remote malicious user modify the SerialNumber field. CWE-863
 Incorrect Authorization
CVE-2012-3821 2024-11-21 10:41 2020-01-11 Show GitHub Exploit DB Packet Storm
292716 7.5 HIGH
Network
arialsoftware campaign_enterprise In Arial Campaign Enterprise before 11.0.551, multiple pages are accessible without authentication or authorization. CWE-287
Improper Authentication
CVE-2012-3824 2024-11-21 10:41 2020-01-11 Show GitHub Exploit DB Packet Storm
292717 7.5 HIGH
Network
arialsoftware campaign_enterprise Arial Campaign Enterprise before 11.0.551 stores passwords in clear text and these may be retrieved. CWE-522
 Insufficiently Protected Credentials
CVE-2012-3823 2024-11-21 10:41 2020-01-11 Show GitHub Exploit DB Packet Storm
292718 7.5 HIGH
Network
arialsoftware campaign_enterprise Arial Campaign Enterprise before 11.0.551 has unauthorized access to the User-Edit.asp page, which allows remote attackers to enumerate users' credentials. CWE-863
 Incorrect Authorization
CVE-2012-3822 2024-11-21 10:41 2020-01-11 Show GitHub Exploit DB Packet Storm
292719 7.5 HIGH
Network
samsung kies Samsung Kies before 2.5.0.12094_27_11 has registry modification. NVD-CWE-noinfo
CVE-2012-3810 2024-11-21 10:41 2020-01-10 Show GitHub Exploit DB Packet Storm
292720 7.5 HIGH
Network
samsung kies Samsung Kies before 2.5.0.12094_27_11 has arbitrary directory modification. NVD-CWE-noinfo
CVE-2012-3809 2024-11-21 10:41 2020-01-10 Show GitHub Exploit DB Packet Storm