Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 18, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
251111 7.5 危険 ASP indir - xWeblog の oku.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-4855 2012-02-9 11:02 2011-10-5 Show GitHub Exploit DB Packet Storm
251112 6.8 警告 Zuitu - Zuitu の ajax/coupon.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-4854 2012-02-9 11:02 2011-10-5 Show GitHub Exploit DB Packet Storm
251113 7.5 危険 Chill Creations - Joomla! 用 ccInvoices コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-4853 2012-02-9 11:01 2011-10-5 Show GitHub Exploit DB Packet Storm
251114 7.5 危険 Netshine Software - Joomla! 用 nBill コンポーネントの netinvoice.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-7302 2012-02-9 11:01 2008-06-27 Show GitHub Exploit DB Packet Storm
251115 7.5 危険 Sclek - jSite の admin/login.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-7301 2012-02-9 11:00 2011-10-5 Show GitHub Exploit DB Packet Storm
251116 8.5 危険 サン・マイクロシステムズ - Sun Solaris および OpenSolaris における MAC のポリシーを回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-7300 2012-02-9 10:59 2011-10-5 Show GitHub Exploit DB Packet Storm
251117 2.1 注意 Apache Software Foundation - Apache JServ における JDBC パスワードまたはその他の重要な情報を見つけられる脆弱性 CWE-16
環境設定 		CVE-2000-1247 2012-02-9 10:58 2011-10-5 Show GitHub Exploit DB Packet Storm
251118 4.3 警告 Apache Software Foundation - Apache Struts におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-1007 2012-02-8 16:35 2012-02-7 Show GitHub Exploit DB Packet Storm
251119 4.3 警告 Apache Software Foundation - Apache Struts におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-1006 2012-02-8 16:34 2012-02-7 Show GitHub Exploit DB Packet Storm
251120 10 危険 シマンテック - Symantec pcAnywhere 製品におけるクライアントへアクセスされる脆弱性 CWE-noinfo
情報不足 		CVE-2012-0290 2012-02-8 16:33 2012-01-24 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 18, 2026, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
295441 - cisco webex_recording_format_player Heap-based buffer overflow in the Cisco WebEx Recording Format (WRF) player T27 L through SP11 EP26, T27 LB through SP21 EP10, T27 LC before SP25 EP11, T27 LD before SP32 CP2, and T28 L10N before SP1… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2012-3054 2024-11-21 10:40 2012-06-29 Show GitHub Exploit DB Packet Storm
295442 - cisco webex_advanced_recording_format_player Buffer overflow in the Cisco WebEx Advanced Recording Format (ARF) player T27 L through SP11 EP26, T27 LB through SP21 EP10, T27 LC before SP25 EP11, T27 LD before SP32 CP2, and T28 L10N before SP1 a… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2012-3053 2024-11-21 10:40 2012-06-29 Show GitHub Exploit DB Packet Storm
295443 - webatall web\@all Multiple cross-site request forgery (CSRF) vulnerabilities in web@all 2.0, as downloaded before May 30, 2012, allow remote attackers to hijack the authentication of administrators for requests that a… CWE-352
 Origin Validation Error 		CVE-2012-3231 2024-11-21 10:40 2012-06-28 Show GitHub Exploit DB Packet Storm
295444 - cisco application_control_engine_software Cisco Application Control Engine (ACE) before A4(2.3) and A5 before A5(1.1), when multicontext mode is enabled, does not properly share a management IP address among multiple contexts, which allows r… CWE-362
Race Condition 		CVE-2012-3063 2024-11-21 10:40 2012-06-21 Show GitHub Exploit DB Packet Storm
295445 - cisco adaptive_security_appliance_software
5500_series_adaptive_security_appliance
catalyst_6500
catalyst_6503-e
catalyst_6504-e
catalyst_6506-e
catalyst_6509-e
catalyst_6509-neb-a
… 		Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services Module (ASASM) in Cisco Catalyst 6500 series devices, with software 8.4 before 8.4(4.1), 8.5 before 8.5(1.11), and 8… NVD-CWE-noinfo
CVE-2012-3058 2024-11-21 10:40 2012-06-21 Show GitHub Exploit DB Packet Storm
295446 - innominate mguard_firmware The Innominate mGuard Smart HW before HW-101130 and BD before BD-101030, mGuard industrial RS, mGuard delta HW before HW-103060 and BD before BD-211010, mGuard PCI, mGuard blade, and EAGLE mGuard app… CWE-310
Cryptographic Issues 		CVE-2012-3006 2024-11-21 10:40 2012-06-20 Show GitHub Exploit DB Packet Storm
295447 - ioquake3 ioquake3_engine ioquake3 before r2253 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/ioq3.pid temporary file. CWE-59
Link Following 		CVE-2012-3345 2024-11-21 10:40 2012-06-15 Show GitHub Exploit DB Packet Storm
295448 - vmware workstation
player
esx
esxi 		VMware Workstation 8.x before 8.0.4, VMware Player 4.x before 4.0.4, VMware ESXi 3.5 through 5.0, and VMware ESX 3.5 through 4.1 allow remote attackers to cause a denial of service (guest OS crash) v… CWE-94
Code Injection 		CVE-2012-3289 2024-11-21 10:40 2012-06-15 Show GitHub Exploit DB Packet Storm
295449 - vmware workstation
player
fusion
esx
esxi 		VMware Workstation 7.x before 7.1.6 and 8.x before 8.0.4, VMware Player 3.x before 3.1.6 and 4.x before 4.0.4, VMware Fusion 4.x before 4.1.3, VMware ESXi 3.5 through 5.0, and VMware ESX 3.5 through … CWE-20
 Improper Input Validation  		CVE-2012-3288 2024-11-21 10:40 2012-06-15 Show GitHub Exploit DB Packet Storm
295450 - efstechnology autoform_pdm_archive AutoFORM PDM Archive before 7.0 implements user accounts in a way that allows for JMX Console authentication, which allows remote authenticated users to bypass intended access restrictions via the /j… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2012-3347 2024-11-21 10:40 2012-06-14 Show GitHub Exploit DB Packet Storm