Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 6, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
242251 6.8 警告 Munin - Munin の cgi-bin/munin-cgi-graph における任意のコマンドを実行される脆弱性 CWE-20
不適切な入力確認
CVE-2012-2104 2012-08-29 10:56 2012-08-26 Show GitHub Exploit DB Packet Storm
242252 9.3 危険 Sitecom - Sitecom WLM-2501 におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2012-1921 2012-08-29 10:28 2012-08-26 Show GitHub Exploit DB Packet Storm
242253 4.3 警告 Elefant CMS - Elefant CMS の apps/admin/handlers/preview.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-1296 2012-08-29 10:26 2012-08-26 Show GitHub Exploit DB Packet Storm
242254 6.8 警告 GNU Project - GNU Gnash の libbase/GnashImage.h における整数オーバーフローの脆弱性 CWE-189
数値処理の問題
CVE-2012-1175 2012-08-28 16:58 2012-08-26 Show GitHub Exploit DB Packet Storm
242255 4.3 警告 PluXml - PluXml におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-4675 2012-08-28 16:47 2012-04-16 Show GitHub Exploit DB Packet Storm
242256 5 警告 PluXml - PluXml におけるインストールパスを取得される脆弱性性 CWE-200
情報漏えい
CVE-2012-4674 2012-08-28 16:46 2012-04-16 Show GitHub Exploit DB Packet Storm
242257 7.5 危険 PluXml - PluXml の update/index.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2012-2227 2012-08-28 16:44 2012-04-16 Show GitHub Exploit DB Packet Storm
242258 7.5 危険 Thomas Hunter - NeoInvoice の application/controllers/invoice.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2012-4673 2012-08-28 16:43 2012-08-26 Show GitHub Exploit DB Packet Storm
242259 7.5 危険 Thomas Hunter - NeoInvoice の signup_check.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2012-3477 2012-08-28 16:40 2012-08-26 Show GitHub Exploit DB Packet Storm
242260 7.5 危険 DELL EMC (旧 EMC Corporation) - EMC ApplicationXtender Desktop および ApplicationXtender Web Access .NET におけるファイルをアップロードされる脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-2289 2012-08-28 16:40 2012-08-26 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 6, 2026, 4:18 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2931 9.8 CRITICAL
Network
- - IBM Aspera High-Speed Transfer Endpoint 3.7.4 through 4.4.7 Fix Pack 1 and IBM Aspera High-Speed Transfer Server 3.7.4 through 4.4.7 Fix Pack 1 and IBM Aspera High-Speed Transfer Endpoint are affecte… CWE-122
Heap-based Buffer Overflow
CVE-2026-8175 2026-05-27 23:53 2026-05-27 Show GitHub Exploit DB Packet Storm
2932 8.8 HIGH
Network
- - IBM Aspera High-Speed Transfer Endpoint 3.7.4 through 4.4.7 Fix Pack 1 and IBM Aspera High-Speed Transfer Server 3.7.4 through 4.4.7 Fix Pack 1 and IBM Aspera High-Speed Transfer Endpoint are affecte… CWE-121
Stack-based Buffer Overflow
CVE-2026-8179 2026-05-27 23:53 2026-05-27 Show GitHub Exploit DB Packet Storm
2933 7.5 HIGH
Network
- - IBM Aspera High-Speed Transfer Endpoint 3.7.4 through 4.4.7 Fix Pack 1 and IBM Aspera High-Speed Transfer Server 3.7.4 through 4.4.7 Fix Pack 1 and IBM Aspera High-Speed Transfer Endpoint are affecte… CWE-476
 NULL Pointer Dereference
CVE-2026-8180 2026-05-27 23:53 2026-05-27 Show GitHub Exploit DB Packet Storm
2934 6.5 MEDIUM
Network
- - IBM Aspera High-Speed Transfer Endpoint 3.7.4 through 4.4.7 Fix Pack 1 and IBM Aspera High-Speed Transfer Server 3.7.4 through 4.4.7 Fix Pack 1 and IBM Aspera High-Speed Transfer Endpoint are affecte… CWE-22
Path Traversal
CVE-2026-9035 2026-05-27 23:53 2026-05-27 Show GitHub Exploit DB Packet Storm
2935 8.8 HIGH
Network
- - The Web-based Management allows a remote low privileged Engineer user to install additional APPs on the device downloaded from the PLCnext Store without implementing any data verification mechanism, … CWE-347
 Improper Verification of Cryptographic Signature
CVE-2025-41669 2026-05-27 23:53 2026-05-27 Show GitHub Exploit DB Packet Storm
2936 7.8 HIGH
Local
- - A local user with low privileges may be able to influence the behavior of a privileged system service by manipulating configuration or application-related files located in user-writable areas of the … CWE-427
 Uncontrolled Search Path Element
CVE-2025-41670 2026-05-27 23:53 2026-05-27 Show GitHub Exploit DB Packet Storm
2937 7.5 HIGH
Network
- - An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerability in the userinfo endpoint due to improper neutralization of special elements in a SQL SELECT command. This… CWE-89
SQL Injection
CVE-2026-40810 2026-05-27 23:53 2026-05-27 Show GitHub Exploit DB Packet Storm
2938 7.5 HIGH
Network
- - An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerability in the ssoabstractservice due to improper neutralization of special elements in a SQL SELECT command. Thi… CWE-89
SQL Injection
CVE-2026-40811 2026-05-27 23:53 2026-05-27 Show GitHub Exploit DB Packet Storm
2939 7.5 HIGH
Network
- - An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerability in the getLiveValues functions sn parameter due to improper neutralization of special elements in a SQL S… CWE-89
SQL Injection
CVE-2026-40812 2026-05-27 23:53 2026-05-27 Show GitHub Exploit DB Packet Storm
2940 7.5 HIGH
Network
- - An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerability in the getLiveValues functions tagid parameter due to improper neutralization of special elements in a SQ… CWE-89
SQL Injection
CVE-2026-40813 2026-05-27 23:53 2026-05-27 Show GitHub Exploit DB Packet Storm