Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 27, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
251831 4.3 警告 EPiServer - EPiServer CMS の 管理インタフェースにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-1034 2012-02-10 15:04 2012-02-8 Show GitHub Exploit DB Packet Storm
251832 6 警告 EPiServer - EPiServer CMS における WebAdmins のアクセス権を取得される脆弱性 CWE-noinfo
情報不足
CVE-2012-1031 2012-02-10 15:04 2012-02-8 Show GitHub Exploit DB Packet Storm
251833 5 警告 OfficeSIP Communications - OfficeSIP Server におけるサービス運用妨害 (デーモンクラッシュ) の脆弱性 CWE-20
不適切な入力確認
CVE-2012-1008 2012-02-10 15:03 2012-02-8 Show GitHub Exploit DB Packet Storm
251834 2.1 注意 Foswiki - Foswiki の UI/Register.pm におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-1004 2012-02-10 15:02 2012-02-8 Show GitHub Exploit DB Packet Storm
251835 10 危険 Zakon Group - OpenConf における詳細不明な脆弱性 CWE-noinfo
情報不足
CVE-2012-1002 2012-02-10 15:01 2012-02-2 Show GitHub Exploit DB Packet Storm
251836 7.5 危険 Tube Ace - Tube Ace の mobile/search/index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2012-1029 2012-02-10 15:00 2012-02-8 Show GitHub Exploit DB Packet Storm
251837 4.3 警告 Simple Groupware Solutions - SimpleGroupware の bin/index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-1028 2012-02-10 14:59 2012-02-2 Show GitHub Exploit DB Packet Storm
251838 7.5 危険 Johannes Ekberg - XRay CMS の login2.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2012-1026 2012-02-10 14:15 2012-02-8 Show GitHub Exploit DB Packet Storm
251839 5 警告 Dream Property GmbH - Enigma2 Webinterface のファイルにおける絶対パストラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2012-1025 2012-02-10 14:01 2012-02-8 Show GitHub Exploit DB Packet Storm
251840 5 警告 Dream Property GmbH - Enigma2 Webinterface のファイルにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2012-1024 2012-02-10 14:00 2012-02-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
247021 10.0 CRITICAL
Network
eclipse rdf4j Eclipse RDF4j version < 2.4.0 Milestone 2 contains a XML External Entity (XXE) vulnerability in RDF4j XML parser parsing RDF files that can result in the disclosure of confidential data, denial of se… CWE-611
XXE
CVE-2018-1000644 2024-11-21 12:40 2018-08-21 Show GitHub Exploit DB Packet Storm
247022 6.1 MEDIUM
Network
flightairmap flightairmap FlightAirMap version <=v1.0-beta.21 contains a Cross Site Scripting (XSS) vulnerability in GET variable used within registration sub menu page that can result in unauthorised actions and access to da… CWE-79
Cross-site Scripting
CVE-2018-1000642 2024-11-21 12:40 2018-08-21 Show GitHub Exploit DB Packet Storm
247023 9.8 CRITICAL
Network
yeswiki yeswiki YesWiki version <= cercopitheque beta 1 contains a PHP Object Injection vulnerability in Unserialising user entered parameter in i18n.inc.php that can result in execution of code, disclosure of infor… CWE-502
 Deserialization of Untrusted Data
CVE-2018-1000641 2024-11-21 12:40 2018-08-21 Show GitHub Exploit DB Packet Storm
247024 6.1 MEDIUM
Network
villagedefrance opencart-overclocked OpenCart-Overclocked version <=1.11.1 contains a Cross Site Scripting (XSS) vulnerability in User input entered unsanitised within JS function in the template that can result in Unauthorised actions … CWE-79
Cross-site Scripting
CVE-2018-1000640 2024-11-21 12:40 2018-08-21 Show GitHub Exploit DB Packet Storm
247025 9.6 CRITICAL
Network
latexdraw_project latexdraw LatexDraw version <=4.0 contains a XML External Entity (XXE) vulnerability in SVG parsing functionality that can result in disclosure of data, server side request forgery, port scanning, possible rce… CWE-611
XXE
CVE-2018-1000639 2024-11-21 12:40 2018-08-21 Show GitHub Exploit DB Packet Storm
247026 6.1 MEDIUM
Network
1234n minicms MiniCMS version 1.1 contains a Cross Site Scripting (XSS) vulnerability in http://example.org/mc-admin/page.php?date={payload} that can result in code injection. CWE-79
Cross-site Scripting
CVE-2018-1000638 2024-11-21 12:40 2018-08-21 Show GitHub Exploit DB Packet Storm
247027 7.8 HIGH
Local
nongnu
debian
zutils
debian_linux
zutils version prior to version 1.8-pre2 contains a Buffer Overflow vulnerability in zcat that can result in Potential denial of service or arbitrary code execution. This attack appear to be exploita… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2018-1000637 2024-11-21 12:40 2018-08-21 Show GitHub Exploit DB Packet Storm
247028 6.7 MEDIUM
Local
openmicroscopy omero The Open Microscopy Environment OMERO.server version 5.4.0 to 5.4.6 contains a Information Exposure Through Sent Data vulnerability in OMERO.server that can result in an Attacker gaining full adminis… CWE-200
Information Exposure
CVE-2018-1000635 2024-11-21 12:40 2018-08-21 Show GitHub Exploit DB Packet Storm
247029 7.2 HIGH
Network
openmicroscopy omero The Open Microscopy Environment OMERO.server version 5.4.0 to 5.4.6 contains an Improper Access Control vulnerability in User management that can result in administrative user with privilege restrict… CWE-269
 Improper Privilege Management
CVE-2018-1000634 2024-11-21 12:40 2018-08-21 Show GitHub Exploit DB Packet Storm
247030 6.5 MEDIUM
Network
jerryscript jerryscript JerryScript version Tested on commit f86d7459d195c8ba58479d1861b0cc726c8b3793. Analysing history it seems that the issue has been present since commit 64a340ffeb8809b2b66bbe32fd443a8b79fdd860 contain… CWE-476
 NULL Pointer Dereference
CVE-2018-1000636 2024-11-21 12:40 2018-08-21 Show GitHub Exploit DB Packet Storm