Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 10, 2026, 2 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
251271 4.3 警告 getontracks - Tracks の app/controllers/todos_controller.rb におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-1671 2012-03-27 18:43 2011-04-9 Show GitHub Exploit DB Packet Storm
251272 4.3 警告 a.kulikov - InTerra Blog Machine におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-1670 2012-03-27 18:43 2011-04-9 Show GitHub Exploit DB Packet Storm
251273 5 警告 mikoviny - WordPress の WP Custom Pages モジュールにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2011-1669 2012-03-27 18:43 2011-04-9 Show GitHub Exploit DB Packet Storm
251274 4.3 警告 awcm - AWCM におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-1668 2012-03-27 18:43 2011-04-9 Show GitHub Exploit DB Packet Storm
251275 7.5 危険 xmedien - Anzeigenmarkt の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2011-1667 2012-03-27 18:43 2011-04-9 Show GitHub Exploit DB Packet Storm
251276 5 警告 nicholas thompson - Drupal 用の Node Quick Find モジュールにおけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2011-1661 2012-03-27 18:43 2011-04-6 Show GitHub Exploit DB Packet Storm
251277 4.3 警告 grapecity - GrapeCity Data Dynamics Reports の DataDynamics.Reports.Web クラスライブラリにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-1660 2012-03-27 18:43 2011-04-9 Show GitHub Exploit DB Packet Storm
251278 7.5 危険 CA Technologies - CA TD の UNC Server の management.asmx モジュールにおけるデータベース資格情報を取得される脆弱性 CWE-310
暗号の問題
CVE-2011-1655 2012-03-27 18:43 2011-04-13 Show GitHub Exploit DB Packet Storm
251279 7.5 危険 CA Technologies - CA Total Defense の Management Server の Heartbeat Web Service におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2011-1654 2012-03-27 18:43 2011-04-13 Show GitHub Exploit DB Packet Storm
251280 10 危険 CA Technologies - CA TD の UNC Server における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2011-1653 2012-03-27 18:43 2011-04-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 10, 2026, 5 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
300961 6.1 MEDIUM
Network
prestashop prestashop Cross-site scripting (XSS) vulnerability in PrestaShop before 1.4.9 allows remote attackers to inject arbitrary web script or HTML via the index of the product[] parameter to ajax.php. CWE-79
Cross-site Scripting
CVE-2012-2517 2024-11-21 10:39 2020-02-12 Show GitHub Exploit DB Packet Storm
300962 6.1 MEDIUM
Network
pragmamx pragmamx Multiple cross-site scripting (XSS) vulnerabilities in pragmaMx 1.x before 1.12.2 allow remote attackers to inject arbitrary web script or HTML via the (1) name parameter to modules.php or (2) img_ur… CWE-79
Cross-site Scripting
CVE-2012-2452 2024-11-21 10:39 2020-02-12 Show GitHub Exploit DB Packet Storm
300963 6.1 MEDIUM
Network
atmail atmail Cross-site scripting (XSS) vulnerability in the administrative interface in Atmail Webmail Server 6.4 allows remote attackers to inject arbitrary web script or HTML via the Date field of an email. CWE-79
Cross-site Scripting
CVE-2012-2593 2024-11-21 10:39 2020-02-6 Show GitHub Exploit DB Packet Storm
300964 7.2 HIGH
Network
tinywebgallery tinywebgallery PHP code injection in TinyWebGallery before 1.8.8 allows remote authenticated users with admin privileges to inject arbitrary code into the .htusers.php file. CWE-74
Injection
CVE-2012-2931 2024-11-21 10:39 2020-01-10 Show GitHub Exploit DB Packet Storm
300965 5.3 MEDIUM
Network
md-systems simplenews The Simplenews module 6.x-1.x before 6.x-1.4, 6.x-2.x before 6.x-2.0-alpha4, and 7.x-1.x before 7.x-1.0-rc1 for Drupal reveals the email addresses of new mailing list subscribers when confirmation is… CWE-200
Information Exposure
CVE-2012-2724 2024-11-21 10:39 2020-01-10 Show GitHub Exploit DB Packet Storm
300966 9.8 CRITICAL
Network
browserid_project browserid The BrowserID (Mozilla Persona) module 7.x-1.x before 7.x-1.3 for Drupal allows remote attackers to hijack the authentication of arbitrary users via the audience identifier. CWE-287
Improper Authentication
CVE-2012-2714 2024-11-21 10:39 2020-01-10 Show GitHub Exploit DB Packet Storm
300967 4.4 MEDIUM
Local
gnome
debian
canonical
opensuse
networkmanager
debian_linux
ubuntu_linux
opensuse
In NetworkManager 0.9.2.0, when a new wireless network was created with WPA/WPA2 security in AdHoc mode, it created an open/insecure network. CWE-306
Missing Authentication for Critical Function
CVE-2012-2736 2024-11-21 10:39 2019-12-27 Show GitHub Exploit DB Packet Storm
300968 7.5 HIGH
Network
talend restlet An XML eXternal Entity (XXE) issue exists in Restlet 1.1.10 in an endpoint using XML transport, which lets a remote attacker obtain sensitive information. CWE-611
XXE
CVE-2012-2656 2024-11-21 10:39 2019-12-19 Show GitHub Exploit DB Packet Storm
300969 9.8 CRITICAL
Network
solarwinds backup_profiler
storage_profiler
storage_manager
SQL injection vulnerability in the LoginServlet page in SolarWinds Storage Manager before 5.1.2, SolarWinds Storage Profiler before 5.1.2, and SolarWinds Backup Profiler before 5.1.2 allows remote at… CWE-89
SQL Injection
CVE-2012-2576 2024-11-21 10:39 2017-12-21 Show GitHub Exploit DB Packet Storm
300970 7.5 HIGH
Network
ffmpeg ffmpeg Unspecified vulnerability in FFMPEG 0.10 allows remote attackers to cause a denial of service. CWE-404
 Improper Resource Shutdown or Release
CVE-2012-2805 2024-11-21 10:39 2017-08-29 Show GitHub Exploit DB Packet Storm