Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 19, 2026, 4 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
232341	6.8	警告	mamboxchange	-	Mambo 用の LoudMouth コンポーネントにおける PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2006-3748	2012-12-20 18:02	2006-07-21	Show	GitHub Exploit DB Packet Storm

232342	4.3	警告	swsoft	-	SWsoft Plesk のコントロールパネルにおけるクロスサイトスクリプティングの脆弱性	-	CVE-2006-3737	2012-12-20 18:02	2006-07-21	Show	GitHub Exploit DB Packet Storm

232343	7.5	危険	Mambo Foundation	-	Mambo 用の VideoDB コンポーネントにおける PHP リモートファイルインクルージョンの脆弱性	-	CVE-2006-3736	2012-12-20 18:02	2006-07-10	Show	GitHub Exploit DB Packet Storm

232344	5.1	警告	mail2forum	-	phpBB 用の Mail2Forum モジュールにおける PHP リモートファイルインクルージョンの脆弱性	-	CVE-2006-3735	2012-12-20 18:02	2006-07-21	Show	GitHub Exploit DB Packet Storm

232345	7.2	危険	シスコシステムズ	-	CS-MARS 用の CLI におけるルート権限で任意のコマンドを実行される脆弱性	-	CVE-2006-3734	2012-12-20 18:02	2006-07-19	Show	GitHub Exploit DB Packet Storm

232346	7.5	危険	シスコシステムズ	-	Jboss Web アプリケーションサーバーの jmx-console における権限を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2006-3733	2012-12-20 18:02	2006-07-19	Show	GitHub Exploit DB Packet Storm

232347	5	警告	シスコシステムズ	-	CS-MARS における重要な情報を取得される脆弱性	-	CVE-2006-3732	2012-12-20 18:02	2006-07-19	Show	GitHub Exploit DB Packet Storm

232348	2.6	注意	Mozilla Foundation	-	Mozilla Firefox におけるサービス運用妨害 (DoS) の脆弱性	-	CVE-2006-3731	2012-12-20 18:02	2006-07-21	Show	GitHub Exploit DB Packet Storm

232349	2.6	注意	マイクロソフト	-	Internet Explorer 6 の DataSourceControl におけるサービス運用妨害 (クラッシュ) の脆弱性	-	CVE-2006-3729	2012-12-20 18:02	2006-07-21	Show	GitHub Exploit DB Packet Storm

232350	7.5	危険	eskolar cms	-	Eskolar CMS における SQL インジェクションの脆弱性	-	CVE-2006-3727	2012-12-20 18:02	2006-07-21	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 19, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
293391	4.3	MEDIUM Network	basic_webmail_project	basic_webmail	The Basic webmail module 6.x-1.x before 6.x-1.2 for Drupal allows remote authenticated users with the "access basic_webmail" permission to read arbitrary users' email addresses.	CWE-200 Information Exposure	CVE-2012-5570	2024-11-21 10:44	2020-02-9	Show	GitHub Exploit DB Packet Storm

293392	9.8	CRITICAL Network	ushahidi	ushahidi	Ushahidi before 2.6.1 has insufficient entropy for forgot-password tokens.	CWE-640 Weak Password Recovery Mechanism for Forgotten Password	CVE-2012-5618	2024-11-21 10:44	2020-02-4	Show	GitHub Exploit DB Packet Storm

293393	7.5	HIGH Network	dart	powertcp_webserver_for_activex	NULL Pointer Dereference in PowerTCP WebServer for ActiveX 1.9.2 and earlier allows remote attackers to cause a denial of service (application crash) via a crafted HTTP request.	CWE-476 NULL Pointer Dereference	CVE-2012-5389	2024-11-21 10:44	2020-01-24	Show	GitHub Exploit DB Packet Storm

293394	7.8	HIGH Local	sumatrapdfreader artifex	sumatrapdf mupdf	SumatraPDF 2.1.1/MuPDF 1.0 allows remote attackers to cause an Integer Overflow in the lex_number() function via a corrupt PDF file.	CWE-190 Integer Overflow or Wraparound	CVE-2012-5340	2024-11-21 10:44	2020-01-24	Show	GitHub Exploit DB Packet Storm

293395	7.5	HIGH Network	redhat	jboss_operations_network jboss_enterprise_web_server jboss_enterprise_application_platform jboss_brms jboss_soa_platform jboss_portal	EJB method in Red Hat JBoss BRMS 5; Red Hat JBoss Enterprise Application Platform 5; Red Hat JBoss Operations Network 3.1; Red Hat JBoss Portal 4 and 5; Red Hat JBoss SOA Platform 4.2, 4.3, and 5; in…	NVD-CWE-noinfo	CVE-2012-5626	2024-11-21 10:44	2020-01-24	Show	GitHub Exploit DB Packet Storm

293396	9.8	CRITICAL Network	accusoft	prizm_content_connect	Prizm Content Connect 5.1 has an Arbitrary File Upload Vulnerability	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2012-5190	2024-11-21 10:44	2020-01-22	Show	GitHub Exploit DB Packet Storm

293397	4.8	MEDIUM Network	smileys_project smiley_project	smileys smiley	Cross-site scripting (XSS) vulnerability in the Smiley module 6.x-1.x versions prior to 6.x-1.1 and Smileys module 6.x-1.x versions prior to 6.x-1.1 for Drupal allows remote authenticated users with …	CWE-79 Cross-site Scripting	CVE-2012-5558	2024-11-21 10:44	2020-01-10	Show	GitHub Exploit DB Packet Storm

293398	5.5	MEDIUM Local	openstack debian	horizon debian_linux	Within the RHOS Essex Preview (2012.2) of the OpenStack dashboard package, the file /etc/quantum/quantum.conf is world readable which exposes the admin password and token value.	CWE-200 Information Exposure	CVE-2012-5476	2024-11-21 10:44	2019-12-31	Show	GitHub Exploit DB Packet Storm

293399	5.5	MEDIUM Local	redhat openstack debian fedoraproject	openstack horizon debian_linux fedora	The file /etc/openstack-dashboard/local_settings within Red Hat OpenStack Platform 2.0 and RHOS Essex Release (python-django-horizon package before 2012.1.1) is world readable and exposes the secret …	CWE-311 Missing Encryption of Sensitive Data	CVE-2012-5474	2024-11-21 10:44	2019-12-31	Show	GitHub Exploit DB Packet Storm

293400	7.8	HIGH Local	gksu-polkit_project fedoraproject	gksu-polkit fedora	gksu-polkit: permissive PolicyKit policy configuration file allows privilege escalation	CWE-269 Improper Privilege Management	CVE-2012-5617	2024-11-21 10:44	2019-11-25	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed