Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 28, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
250481	6.8	警告	OrangeHRM	-	OrangeHRM におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2010-4798	2012-03-27 18:42	2011-04-26	Show	GitHub Exploit DB Packet Storm

250482	7.5	危険	truworthit	-	Truworth Flex Timesheet のログインフォームにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4797	2012-03-27 18:42	2011-04-26	Show	GitHub Exploit DB Packet Storm

250483	7.5	危険	phpyun	-	PHPYun における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4796	2012-03-27 18:42	2011-04-26	Show	GitHub Exploit DB Packet Storm

250484	7.5	危険	joomlaseller Joomla!	-	Joomla! の com_jscalendar コンポーネントにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4795	2012-03-27 18:42	2011-04-26	Show	GitHub Exploit DB Packet Storm

250485	4.3	警告	joomlaseller Joomla!	-	Joomla! の com_jscalendar コンポーネントにおけるクロスサイトスクリプティング脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-4794	2012-03-27 18:42	2011-04-26	Show	GitHub Exploit DB Packet Storm

250486	7.5	危険	site2nite	-	Site2Nite Auto e-Manager の detail.asp における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4793	2012-03-27 18:42	2011-04-26	Show	GitHub Exploit DB Packet Storm

250487	4.3	警告	openit	-	OPEN IT OverLook の title.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-4792	2012-03-27 18:42	2011-04-26	Show	GitHub Exploit DB Packet Storm

250488	4	警告	IBM	-	IBM WCM のオーサリングツールにおけるドラフト生成のアクセス制限を回避する脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-4806	2012-03-27 18:42	2010-11-16	Show	GitHub Exploit DB Packet Storm

250489	7.5	危険	marcusg	-	PHP-Fusion の MG User-Fotoalbum モジュールにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4791	2012-03-27 18:42	2011-04-26	Show	GitHub Exploit DB Packet Storm

250490	5.8	警告	in-mediakg	-	FilterFTP におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2010-4790	2012-03-27 18:42	2011-04-26	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 29, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
295351	9.8	CRITICAL Network	ht_editor_project	ht_editor	HT Editor 2.0.20 has a Remote Stack Buffer Overflow Vulnerability	CWE-787 Out-of-bounds Write	CVE-2012-5867	2024-11-21 10:45	2020-01-24	Show	GitHub Exploit DB Packet Storm

295352	9.8	CRITICAL Network	babygekko	babygekko	BabyGekko before 1.2.4 allows PHP file inclusion.	CWE-20 Improper Input Validation	CVE-2012-5699	2024-11-21 10:45	2020-01-24	Show	GitHub Exploit DB Packet Storm

295353	8.8	HIGH Network	babygekko	babygekko	BabyGekko before 1.2.4 has SQL injection.	CWE-89 SQL Injection	CVE-2012-5698	2024-11-21 10:45	2020-01-24	Show	GitHub Exploit DB Packet Storm

295354	9.8	CRITICAL Network	bulbsecurity	smartphone_pentest_framework	Bulb Security Smartphone Pentest Framework (SPF) 0.1.2 through 0.1.4 allows remote attackers to execute arbitrary commands via shell metacharacters in the hostingPath parameter to (1) SEAttack.pl or …	CWE-78 OS Command	CVE-2012-5878	2024-11-21 10:45	2020-01-4	Show	GitHub Exploit DB Packet Storm

295355	8.8	HIGH Adjacent	bulbsecurity	smartphone_pentest_framework	Bulb Security Smartphone Pentest Framework (SPF) before 0.1.3 allows remote attackers to execute arbitrary commands via shell metacharacters in the ipAddressTB parameter to (1) remoteAttack.pl or (2)…	CWE-78 OS Command	CVE-2012-5693	2024-11-21 10:45	2020-01-4	Show	GitHub Exploit DB Packet Storm

295356	7.5	HIGH Network	openbsd	textproc\/isearch	The isearch package (textproc/isearch) before 1.47.01nb1 uses the tempnam() function to create insecure temporary files into a publicly-writable area (/tmp).	CWE-269 CWE-459 Improper Privilege Management Incomplete Cleanup	CVE-2012-5663	2024-11-21 10:45	2019-12-31	Show	GitHub Exploit DB Packet Storm

295357	7.5	HIGH Network	freeciv fedoraproject	freeciv fedora	A denial of service flaw was found in the way the server component of Freeciv before 2.3.4 processed certain packets. A remote attacker could send a specially-crafted packet that, when processed woul…	CWE-400 Uncontrolled Resource Consumption	CVE-2012-5645	2024-11-21 10:45	2019-12-31	Show	GitHub Exploit DB Packet Storm

295358	7.5	HIGH Network	gnome debian	gnome_keyring debian_linux	gnome-keyring does not discard stored secrets when using gnome_keyring_lock_all_sync function	CWE-20 Improper Input Validation	CVE-2012-6111	2024-11-21 10:45	2019-12-21	Show	GitHub Exploit DB Packet Storm

295359	9.8	CRITICAL Network	apple debian	cups debian_linux	cups (Common Unix Printing System) 'Listen localhost:631' option not honored correctly which could provide unauthorized access to the system	CWE-863 Incorrect Authorization	CVE-2012-6094	2024-11-21 10:45	2019-12-21	Show	GitHub Exploit DB Packet Storm

295360	6.5	MEDIUM Network	libreoffice debian apache	libreoffice debian_linux openoffice	LibreOffice and OpenOffice automatically open embedded content	CWE-668 Exposure of Resource to Wrong Sphere	CVE-2012-5639	2024-11-21 10:45	2019-12-20	Show	GitHub Exploit DB Packet Storm