Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 28, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
251681 4.3 警告 IBM - IBM Maximo Asset Management および Maximo Asset Management Essentials におけるオープンリダイレクトの脆弱性 CWE-20
不適切な入力確認
CVE-2011-4818 2012-03-14 16:06 2012-02-14 Show GitHub Exploit DB Packet Storm
251682 4.3 警告 IBM - IBM Maximo Asset Management および Maximo Asset Management Essentials におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-4819 2012-03-14 16:05 2012-02-14 Show GitHub Exploit DB Packet Storm
251683 4.3 警告 IBM - 複数の IBM 製品におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-0195 2012-03-14 16:04 2012-02-14 Show GitHub Exploit DB Packet Storm
251684 5 警告 アップル - Apple Safari の WebKit における認証情報をキャプチャされる脆弱性 CWE-200
情報漏えい
CVE-2012-0647 2012-03-14 15:52 2012-03-12 Show GitHub Exploit DB Packet Storm
251685 5 警告 アップル - Apple Safari の WebKit におけるユーザを追跡される脆弱性 CWE-200
情報漏えい
CVE-2012-0640 2012-03-14 15:52 2012-03-12 Show GitHub Exploit DB Packet Storm
251686 6.4 警告 アップル - Windows 上で稼働する Apple Safari の IDN 機能におけるドメイン名を偽装される脆弱性 CWE-20
不適切な入力確認
CVE-2012-0584 2012-03-14 15:34 2012-03-12 Show GitHub Exploit DB Packet Storm
251687 6.4 警告 VMware - VMware vCenter Chargeback Manager における任意のファイルを読まれる脆弱性 CWE-20
不適切な入力確認
CVE-2012-1472 2012-03-14 15:15 2012-03-8 Show GitHub Exploit DB Packet Storm
251688 5 警告 yaSSL - yaSSL CyaSSL におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2012-1558 2012-03-14 11:53 2012-03-12 Show GitHub Exploit DB Packet Storm
251689 7.5 危険 Parallels - Parallels Plesk Panel の admin/plib/api-rpc/Agent.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2012-1557 2012-03-14 11:52 2012-03-12 Show GitHub Exploit DB Packet Storm
251690 4.3 警告 Ruby on Rails project - Ruby on Rails の select helper におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-1099 2012-03-14 11:51 2012-03-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
247221 8.8 HIGH
Network
iscripts eswap iScripts eSwap v2.4 has CSRF via "registration_settings.php" in the Admin Panel. CWE-352
 Origin Validation Error
CVE-2018-10048 2024-11-21 12:40 2018-04-12 Show GitHub Exploit DB Packet Storm
247222 4.8 MEDIUM
Network
cmsmadesimple cms_made_simple CMS Made Simple (aka CMSMS) 2.2.7 has Stored XSS in admin/siteprefs.php via the metadata parameter. CWE-79
Cross-site Scripting
CVE-2018-10033 2024-11-21 12:40 2018-04-12 Show GitHub Exploit DB Packet Storm
247223 4.8 MEDIUM
Network
cmsmadesimple cms_made_simple CMS Made Simple (aka CMSMS) 2.2.7 has Reflected XSS in admin/moduleinterface.php via the m1_version parameter. CWE-79
Cross-site Scripting
CVE-2018-10032 2024-11-21 12:40 2018-04-12 Show GitHub Exploit DB Packet Storm
247224 8.8 HIGH
Network
cmsmadesimple cms_made_simple CMS Made Simple (aka CMSMS) 2.2.7 has CSRF in admin/moduleinterface.php. CWE-352
 Origin Validation Error
CVE-2018-10031 2024-11-21 12:40 2018-04-12 Show GitHub Exploit DB Packet Storm
247225 8.8 HIGH
Network
cmsmadesimple cms_made_simple CMS Made Simple (aka CMSMS) 2.2.7 has CSRF in admin/siteprefs.php. CWE-352
 Origin Validation Error
CVE-2018-10030 2024-11-21 12:40 2018-04-12 Show GitHub Exploit DB Packet Storm
247226 4.8 MEDIUM
Network
cmsmadesimple cms_made_simple CMS Made Simple (aka CMSMS) 2.2.7 has Reflected XSS in admin/moduleinterface.php via the m1_name parameter, related to moduledepends, a different vulnerability than CVE-2017-16799. CWE-79
Cross-site Scripting
CVE-2018-10029 2024-11-21 12:40 2018-04-12 Show GitHub Exploit DB Packet Storm
247227 5.3 MEDIUM
Network
joyplus-cms_project joyplus-cms joyplus-cms 1.6.0 allows remote attackers to obtain sensitive information via a direct request to the install/ or log/ URI. CWE-200
Information Exposure
CVE-2018-10028 2024-11-21 12:40 2018-04-12 Show GitHub Exploit DB Packet Storm
247228 4.8 MEDIUM
Network
yzmcms yzmcms The WeChat module in YzmCMS 3.7.1 has reflected XSS via the admin/module/init.html echostr parameter, related to the valid function in application/wechat/controller/index.class.php. CWE-79
Cross-site Scripting
CVE-2018-10026 2024-11-21 12:40 2018-04-12 Show GitHub Exploit DB Packet Storm
247229 9.8 CRITICAL
Network
ubiquoss vp5208a_firmware ubiQuoss Switch VP5208A creates a bcm_password file at /cgi-bin/ with the user credentials in cleartext when a failed login attempt occurs. The file can be reached via an HTTP request. The credential… CWE-522
 Insufficiently Protected Credentials
CVE-2018-10024 2024-11-21 12:40 2018-04-12 Show GitHub Exploit DB Packet Storm
247230 5.4 MEDIUM
Network
catfish-cms catfish_cms Catfish CMS V4.7.21 allows XSS via the pinglun parameter to cat/index/index/pinglun (aka an authenticated comment). CWE-79
Cross-site Scripting
CVE-2018-10023 2024-11-21 12:40 2018-04-12 Show GitHub Exploit DB Packet Storm