Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":July 1, 2026, 2:01 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 250261 | 4.3 | 警告 | CA Technologies | - | CA eTrust Threat Management Console におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2007-6406 | 2012-06-26 15:54 | 2007-12-17 | Show | GitHub Exploit DB Packet Storm |
| 250262 | 6.5 | 警告 | ace image hosting script | - | Ace Image Hosting Script の albums.php における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2007-6393 | 2012-06-26 15:54 | 2007-12-17 | Show | GitHub Exploit DB Packet Storm |
| 250263 | 7.5 | 危険 | dominion web | - | DWdirectory における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2007-6392 | 2012-06-26 15:54 | 2007-12-17 | Show | GitHub Exploit DB Packet Storm |
| 250264 | 2.1 | 注意 | GNOME Project | - | GNOME screensaver の通知機能におけるクリップボードの内容などを読まれる脆弱性 |
CWE-DesignError
|
CVE-2007-6389 | 2012-06-26 15:54 | 2007-12-11 | Show | GitHub Exploit DB Packet Storm |
| 250265 | 7.5 | 危険 | BEAシステムズ | - | BEA WebLogic Mobility Server の Image Converter 機能におけるアプリケーションファイルおよびリソースアクセス権を取得される脆弱性 |
CWE-287
不適切な認証 |
CVE-2007-6384 | 2012-06-26 15:54 | 2007-12-14 | Show | GitHub Exploit DB Packet Storm |
| 250266 | 5.5 | 警告 | chandler project | - | Cosmo のDAV コンポーネントにおける他ユーザのホームコレクションの任意のリソースを作成される脆弱性 |
CWE-264
認可・権限・アクセス制御 |
CVE-2007-6383 | 2012-06-26 15:54 | 2007-12-14 | Show | GitHub Exploit DB Packet Storm |
| 250267 | 7.5 | 危険 | e-xoops | - | exoops における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2007-6380 | 2012-06-26 15:54 | 2007-12-14 | Show | GitHub Exploit DB Packet Storm |
| 250268 | 5 | 警告 | badblue | - | BadBlue における重要な情報を取得される脆弱性 |
CWE-16
環境設定 |
CVE-2007-6379 | 2012-06-26 15:54 | 2007-12-14 | Show | GitHub Exploit DB Packet Storm |
| 250269 | 7.5 | 危険 | badblue | - | BadBlue の upload.dll におけるディレクトリトラバーサルの脆弱性 |
CWE-22
パス・トラバーサル |
CVE-2007-6378 | 2012-06-26 15:54 | 2007-12-14 | Show | GitHub Exploit DB Packet Storm |
| 250270 | 7.5 | 危険 | badblue | - | BadBlue の ext.dll の PassThru 機能におけるスタックベースのバッファオーバーフローの脆弱性 |
CWE-119
バッファエラー |
CVE-2007-6377 | 2012-06-26 15:54 | 2007-12-14 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:July 1, 2026, 4:27 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 253121 | 6.1 |
MEDIUM
Network |
ximdex | ximdex | The /edit URI in the DMS component in Ximdex 4.0 has XSS via the Ciudad or Nombre parameter. |
CWE-79
Cross-site Scripting |
CVE-2018-12273 | 2024-11-21 12:44 | 2018-06-13 | Show | GitHub Exploit DB Packet Storm |
| 253122 | 6.1 |
MEDIUM
Network |
ximdex | ximdex | xowl/request.php in Ximdex 4.0 has XSS via the content parameter. |
CWE-79
Cross-site Scripting |
CVE-2018-12272 | 2024-11-21 12:44 | 2018-06-13 | Show | GitHub Exploit DB Packet Storm |
| 253123 | 9.8 |
CRITICAL
Network |
acccheck_project | acccheck.pl | acccheck.pl in acccheck 0.2.1 allows Command Injection via shell metacharacters in a username or password file, as demonstrated by injection into an smbclient command line. |
CWE-78
OS Command |
CVE-2018-12268 | 2024-11-21 12:44 | 2018-06-13 | Show | GitHub Exploit DB Packet Storm |
| 253124 | 6.1 |
MEDIUM
Network |
hongcms_project | hongcms | system\errors\404.php in HongCMS 3.0.0 has XSS via crafted input that triggers a 404 HTTP status code. |
CWE-79
Cross-site Scripting |
CVE-2018-12266 | 2024-11-21 12:44 | 2018-06-13 | Show | GitHub Exploit DB Packet Storm |
| 253125 | 8.8 |
HIGH
Network |
exiv2 debian canonical |
exiv2 debian_linux ubuntu_linux |
Exiv2 0.26 has an integer overflow in the LoaderExifJpeg class in preview.cpp, leading to an out-of-bounds read in Exiv2::MemIo::read in basicio.cpp. |
CWE-125 CWE-190 Out-of-bounds Read Integer Overflow or Wraparound |
CVE-2018-12265 | 2024-11-21 12:44 | 2018-06-13 | Show | GitHub Exploit DB Packet Storm |
| 253126 | 8.8 |
HIGH
Network |
exiv2 debian canonical |
exiv2 debian_linux ubuntu_linux |
Exiv2 0.26 has integer overflows in LoaderTiff::getData() in preview.cpp, leading to an out-of-bounds read in Exiv2::ValueType::setDataArea in value.hpp. |
CWE-125 CWE-190 Out-of-bounds Read Integer Overflow or Wraparound |
CVE-2018-12264 | 2024-11-21 12:44 | 2018-06-13 | Show | GitHub Exploit DB Packet Storm |
| 253127 | 8.8 |
HIGH
Network |
portfoliocms_project | portfoliocms | portfolioCMS 1.0.5 allows upload of arbitrary .php files via the admin/portfolio.php?newpage=true URI. |
CWE-434
Unrestricted Upload of File with Dangerous Type |
CVE-2018-12263 | 2024-11-21 12:44 | 2018-06-13 | Show | GitHub Exploit DB Packet Storm |
| 253128 | 4.4 |
MEDIUM
Local |
apollotechnologiesinc | momentum_axel_720p_firmware | An issue was discovered on Momentum Axel 720P 5.1.8 devices. All processes run as root. |
CWE-269
Improper Privilege Management |
CVE-2018-12261 | 2024-11-21 12:44 | 2018-06-13 | Show | GitHub Exploit DB Packet Storm |
| 253129 | 6.7 |
MEDIUM
Local |
apollotechnologiesinc | momentum_axel_720p_firmware | An issue was discovered on Momentum Axel 720P 5.1.8 devices. The root password can be obtained in cleartext by issuing the command 'showKey' from the root CLI. This password may be the same on all de… |
CWE-522
Insufficiently Protected Credentials |
CVE-2018-12260 | 2024-11-21 12:44 | 2018-06-13 | Show | GitHub Exploit DB Packet Storm |
| 253130 | 6.8 |
MEDIUM
Physics |
apollotechnologiesinc | momentum_axel_720p_firmware | An issue was discovered on Momentum Axel 720P 5.1.8 devices. Root access can be obtained via UART pins without any restrictions, which leads to full system compromise. |
CWE-732
Incorrect Permission Assignment for Critical Resource |
CVE-2018-12259 | 2024-11-21 12:44 | 2018-06-13 | Show | GitHub Exploit DB Packet Storm |