Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 19, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
251381	4.3	警告	chillyCMS	-	chillyCMS の core/showsite.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-4895	2012-01-19 11:38	2011-10-8	Show	GitHub Exploit DB Packet Storm

251382	7.5	危険	chillyCMS	-	chillyCMS の core/showsite.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4894	2012-01-19 11:37	2011-10-8	Show	GitHub Exploit DB Packet Storm

251383	4.3	警告	Skypanther Studios	-	FestOS の foodvendors.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-4893	2012-01-19 11:23	2011-10-8	Show	GitHub Exploit DB Packet Storm

251384	4.3	警告	Alex Kellner	-	TYPO3 用の powermail におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-4892	2012-01-19 11:20	2010-10-26	Show	GitHub Exploit DB Packet Storm

251385	7.5	危険	Andreas Kiefer	-	TYPO3 用の Yet Another Calendar における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4891	2012-01-19 11:20	2010-09-2	Show	GitHub Exploit DB Packet Storm

251386	4.3	警告	Andreas Kiefer	-	TYPO3 用の Yet Another Calendar におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-4890	2012-01-19 11:19	2010-09-2	Show	GitHub Exploit DB Packet Storm

251387	10	危険	Marco Hezel	-	TYPO3 用の Tiny Market における任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2010-4889	2012-01-19 11:18	2010-09-2	Show	GitHub Exploit DB Packet Storm

251388	7.5	危険	Marco Hezel	-	TYPO3 用の Tiny Market における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4888	2012-01-19 11:17	2010-09-2	Show	GitHub Exploit DB Packet Storm

251389	7.5	危険	Raphael Zschorsch	-	TYPO3 用の Commenting system Backend Module における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4887	2012-01-19 11:17	2010-09-2	Show	GitHub Exploit DB Packet Storm

251390	4.3	警告	Peter Proell	-	TYPO3 用の official twitter tweet button for your page におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-4886	2012-01-19 11:10	2010-09-2	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 19, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
297251	-		wordpress	wordpress	wp-admin/setup-config.php in the installation component in WordPress 3.3.1 and earlier does not limit the number of MySQL queries sent to external MySQL database servers, which allows remote attacker…	NVD-CWE-noinfo	CVE-2012-0937	2024-11-21 10:36	2012-01-31	Show	GitHub Exploit DB Packet Storm

297252	-		opennms.org	opennms	Cross-site scripting (XSS) vulnerability in web/springframework/security/SecurityAuthenticationEventOnmsEventBuilder.java in OpenNMS 1.8.x before 1.8.17, 1.9.93 and earlier, and 1.10.x before 1.10.1 …	CWE-79 Cross-site Scripting	CVE-2012-0936	2024-11-21 10:36	2012-01-29	Show	GitHub Exploit DB Packet Storm

297253	-		aryadad	aryadad_cms	SQL injection vulnerability in Default.aspx in Aryadad CMS allows remote attackers to execute arbitrary SQL commands via the PageID parameter.	CWE-89 SQL Injection	CVE-2012-0935	2024-11-21 10:36	2012-01-29	Show	GitHub Exploit DB Packet Storm

297254	-		zingiri	theme_tuner_plugin	PHP remote file inclusion vulnerability in ajax/savetag.php in the Theme Tuner plugin for WordPress before 0.8 allows remote attackers to execute arbitrary PHP code via a URL in the tt-abspath parame…	CWE-94 Code Injection	CVE-2012-0934	2024-11-21 10:36	2012-01-29	Show	GitHub Exploit DB Packet Storm

297255	7.5	HIGH Network	cloudbees jenkins	jenkins	Hash collision attack vulnerability in Jenkins before 1.447, Jenkins LTS before 1.424.2, and Jenkins Enterprise by CloudBees 1.424.x before 1.424.2.1 and 1.400.x before 1.400.0.11 could allow remote …	CWE-400 Uncontrolled Resource Consumption	CVE-2012-0785	2024-11-21 10:35	2020-02-25	Show	GitHub Exploit DB Packet Storm

297256	5.5	MEDIUM Local	netsurf-browser debian	netsurf debian_linux	Information-disclosure vulnerability in Netsurf through 2.8 due to a world-readable cookie jar.	CWE-200 Information Exposure	CVE-2012-0844	2024-11-21 10:35	2020-02-22	Show	GitHub Exploit DB Packet Storm

297257	9.8	CRITICAL Network	xchat-wdk xchat gnome	xchat-wdk xchat gtk	Heap-based buffer overflow in Xchat-WDK before 1499-4 (2012-01-18) xchat 2.8.6 on Maemo architecture could allow remote attackers to cause a denial of service (xchat client crash) or execute arbitrar…	CWE-787 Out-of-bounds Write	CVE-2012-0828	2024-11-21 10:35	2020-02-22	Show	GitHub Exploit DB Packet Storm

297258	5.4	MEDIUM Network	ibm	tivoli_endpoint_manager	IBM Tivoli Endpoint Manager 8 does not set the HttpOnly flag on cookies.	NVD-CWE-Other	CVE-2012-0718	2024-11-21 10:35	2020-02-19	Show	GitHub Exploit DB Packet Storm

297259	5.5	MEDIUM Local	linux	linux_kernel	The int3 handler in the Linux kernel before 3.3 relies on a per-CPU debug stack, which allows local users to cause a denial of service (stack corruption and panic) via a crafted application that trig…	CWE-400 Uncontrolled Resource Consumption	CVE-2012-0810	2024-11-21 10:35	2020-02-12	Show	GitHub Exploit DB Packet Storm

297260	7.5	HIGH Network	python redhat	pyxml enterprise_linux enterprise_virtualization_hypervisor	PyXML: Hash table collisions CPU usage Denial of Service	CWE-400 Uncontrolled Resource Consumption	CVE-2012-0877	2024-11-21 10:35	2019-11-23	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed