Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 21, 2026, 6:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
232371 5 警告 walter beschmout - Walter Beschmout PhpQuiz の back/upload_img.php などにおける任意の PHP コードをアップロードされる脆弱性 - CVE-2006-4977 2012-12-20 18:02 2006-09-24 Show GitHub Exploit DB Packet Storm
232372 2.6 注意 Yahoo! - WAP 用の Yahoo! Messenger における任意の Web スクリプトまたは HTML を挿入される脆弱性 - CVE-2006-4975 2012-12-20 18:02 2006-09-24 Show GitHub Exploit DB Packet Storm
232373 7.5 危険 wahm e-commerce - WAHM E-Commerce Pie Cart Pro の enc/content.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4970 2012-12-20 18:02 2006-09-24 Show GitHub Exploit DB Packet Storm
232374 7.5 危険 wahm e-commerce - WAHM E-Commerce Pie Cart Pro における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4969 2012-12-20 18:02 2006-09-24 Show GitHub Exploit DB Packet Storm
232375 7.5 危険 postnuke software foundation - PNphpBB の includes/functions_admin.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4968 2012-12-20 18:02 2006-09-24 Show GitHub Exploit DB Packet Storm
232376 5 警告 サン・マイクロシステムズ - SSGD におけるホスト名などを含む重要な情報を取得される脆弱性 - CVE-2006-4959 2012-12-20 18:02 2006-09-23 Show GitHub Exploit DB Packet Storm
232377 6.8 警告 サン・マイクロシステムズ - SSGD におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-4958 2012-12-20 18:02 2006-09-23 Show GitHub Exploit DB Packet Storm
232378 7.5 危険 the myreview system - MyReview の functions.php における SQL インジェクションの脆弱性 - CVE-2006-4957 2012-12-20 18:02 2006-09-23 Show GitHub Exploit DB Packet Storm
232379 7.5 危険 prosysinfo - ProSysInfo TFTP Server TFTPDWIN の tftpd.exe におけるスタックベースのバッファオーバーフローの脆弱性 - CVE-2006-4948 2012-12-20 18:02 2006-09-22 Show GitHub Exploit DB Packet Storm
232380 4.6 警告 シマンテック - Symantec AntiVirus などの製品で使用される NAVENG などのデバイスドライバにおける権限を取得される脆弱性 - CVE-2006-4927 2012-12-20 18:02 2006-10-4 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 22, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
293551 - vmware vcenter_server_appliance Directory traversal vulnerability in VMware vCenter Server Appliance (vCSA) 5.0 before Update 2 and 5.1 before Patch 1 allows remote authenticated users to read arbitrary files via unspecified vector… CWE-22
Path Traversal 		CVE-2012-6324 2024-11-21 10:46 2012-12-22 Show GitHub Exploit DB Packet Storm
293552 - samsung
meizu 		galaxy_note_2
mx
galaxy_s2 		The kernel in Samsung Galaxy S2, Galaxy Note 2, MEIZU MX, and possibly other Android devices, when running an Exynos 4210 or 4412 processor, uses weak permissions (0666) for /dev/exynos-mem, which al… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2012-6422 2024-11-21 10:46 2012-12-18 Show GitHub Exploit DB Packet Storm
293553 - xen xen Multiple HVM control operations in Xen 3.4 through 4.2 allow local HVM guest OS administrators to cause a denial of service (physical CPU consumption) via a large input. CWE-399
 Resource Management Errors 		CVE-2012-6333 2024-11-21 10:46 2012-12-13 Show GitHub Exploit DB Packet Storm
293554 - simple_gmail_login 1.1.2
1.1.3 		simple-gmail-login.php in the Simple Gmail Login plugin before 1.1.4 for WordPress allows remote attackers to obtain sensitive information via a request that lacks a timezone, leading to disclosure o… CWE-200
Information Exposure 		CVE-2012-6313 2024-11-21 10:46 2012-12-11 Show GitHub Exploit DB Packet Storm
293555 - video-lead-form uk-cookie Cross-site scripting (XSS) vulnerability in the Video Lead Form plugin for WordPress allows remote attackers to inject arbitrary web script or HTML via the errMsg parameter in a video-lead-form actio… CWE-79
Cross-site Scripting 		CVE-2012-6312 2024-11-21 10:46 2012-12-11 Show GitHub Exploit DB Packet Storm
293556 6.1 MEDIUM
Network 		arc2_project arc2 ARC (aka ARC2) through 2011-12-01 allows reflected XSS via the end_point.php query parameter in an output=htmltab action. CWE-79
Cross-site Scripting 		CVE-2012-5873 2024-11-21 10:45 2023-04-26 Show GitHub Exploit DB Packet Storm
293557 9.8 CRITICAL
Network 		arc2_project arc2 ARC (aka ARC2) through 2011-12-01 allows blind SQL Injection in getTriplePatternSQL in ARC2_StoreSelectQueryHandler.php via comments in a SPARQL WHERE clause. CWE-89
SQL Injection 		CVE-2012-5872 2024-11-21 10:45 2023-04-26 Show GitHub Exploit DB Packet Storm
293558 7.8 HIGH
Local 		ibm
symantec
hp 		notes
domino
data_loss_prevention_endpoint
data_loss_prevention_enforce\/detection_servers
messaging_gateway
mail_security
autonomy_keyview_idol 		Multiple unspecified vulnerabilities in Autonomy KeyView IDOL before 10.16, as used in Symantec Mail Security for Microsoft Exchange before 6.5.8, Symantec Mail Security for Domino before 8.1.1, Syma… NVD-CWE-noinfo
CVE-2012-6277 2024-11-21 10:45 2020-02-22 Show GitHub Exploit DB Packet Storm
293559 7.5 HIGH
Network 		magentocommerce magento Zend_XmlRpc Class in Magento before 1.7.0.2 contains an information disclosure vulnerability. CWE-200
Information Exposure 		CVE-2012-6091 2024-11-21 10:45 2020-02-14 Show GitHub Exploit DB Packet Storm
293560 6.5 MEDIUM
Network 		blackberry playbook_firmware BlackBerry PlayBook before 2.1 has an Information Disclosure Vulnerability via a Web browser component error CWE-200
Information Exposure 		CVE-2012-5828 2024-11-21 10:45 2020-02-11 Show GitHub Exploit DB Packet Storm