Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 2, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
251961 7.5 危険 alanft - WordPress 用 Relocate Upload プラグインにおける PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2012-1205 2012-02-27 15:35 2012-02-24 Show GitHub Exploit DB Packet Storm
251962 4.3 警告 LEPTON Project - LEPTON におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-1000 2012-02-27 15:25 2012-02-24 Show GitHub Exploit DB Packet Storm
251963 7.5 危険 LEPTON Project - LEPTON の modules/news/rss.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2012-0999 2012-02-27 15:24 2012-02-24 Show GitHub Exploit DB Packet Storm
251964 7.5 危険 LEPTON Project - LEPTON の account/preferences.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2012-0998 2012-02-27 15:24 2012-02-24 Show GitHub Exploit DB Packet Storm
251965 6.8 警告 11in1 - 11in1 の admin/index.php におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2012-0997 2012-02-27 15:23 2012-02-24 Show GitHub Exploit DB Packet Storm
251966 5 警告 11in1 - 11in1 におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2012-0996 2012-02-27 15:21 2012-02-24 Show GitHub Exploit DB Packet Storm
251967 7.5 危険 CONTIMEX - CONTIMEX Impulsio CMS における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2012-1294 2012-02-27 15:20 2011-02-23 Show GitHub Exploit DB Packet Storm
251968 4.3 警告 BoonEx - Boonex Dolphin におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-0873 2012-02-27 15:20 2011-02-23 Show GitHub Exploit DB Packet Storm
251969 5 警告 John Koleszar - VP8 Codec SDK (libvpx) におけるサービス運用妨害 (アプリケーションクラッシュ)の脆弱性 CWE-20
不適切な入力確認 		CVE-2012-0823 2012-02-27 15:19 2012-02-23 Show GitHub Exploit DB Packet Storm
251970 5 警告 SAP - SAP NetWeaver における MessagingSystem Performance Data についての重要な情報を取得される脆弱性 CWE-noinfo
情報不足 		CVE-2012-1292 2012-02-27 13:49 2012-02-23 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 3, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
246681 7.4 HIGH
Network 		ecos system_management_appliance Authentication Bypass by Spoofing vulnerability in ECOS System Management Appliance (aka SMA) 5.2.68 allows a man-in-the-middle attacker to compromise authentication keys and configurations via IP sp… CWE-290
 Authentication Bypass by Spoofing 		CVE-2018-12331 2024-11-21 12:45 2018-06-18 Show GitHub Exploit DB Packet Storm
246682 8.1 HIGH
Network 		ecos secure_boot_stick_firmware Protection Mechanism Failure in ECOS Secure Boot Stick (aka SBS) 5.6.5 allows an attacker to compromise authentication and encryption keys via compromised firmware. NVD-CWE-noinfo
CVE-2018-12330 2024-11-21 12:45 2018-06-18 Show GitHub Exploit DB Packet Storm
246683 5.9 MEDIUM
Network 		ecos secure_boot_stick_firmware Protection Mechanism Failure in ECOS Secure Boot Stick (aka SBS) 5.6.5 allows a local attacker to duplicate an authentication factor via cloning. CWE-200
Information Exposure 		CVE-2018-12329 2024-11-21 12:45 2018-06-18 Show GitHub Exploit DB Packet Storm
246684 7.5 HIGH
Network 		1000guess 1000_guess The _addguess function of a simplelottery smart contract implementation for 1000 Guess, an Ethereum gambling game, generates a random value with publicly readable variables such as the current block … CWE-338
 Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) 		CVE-2018-12454 2024-11-21 12:45 2018-06-17 Show GitHub Exploit DB Packet Storm
246685 7.5 HIGH
Network 		redislabs redis Type confusion in the xgroupCommand function in t_stream.c in redis-server in Redis before 5.0 allows remote attackers to cause denial-of-service via an XGROUP command in which the key is not a strea… CWE-704
 Incorrect Type Conversion or Cast 		CVE-2018-12453 2024-11-21 12:45 2018-06-17 Show GitHub Exploit DB Packet Storm
246686 7.5 HIGH
Network 		tinyexr_project tinyexr tinyexr 0.9.5 has an assertion failure in ComputeChannelLayout in tinyexr.h. CWE-617
 Reachable Assertion 		CVE-2018-12504 2024-11-21 12:45 2018-06-17 Show GitHub Exploit DB Packet Storm
246687 9.8 CRITICAL
Network 		tinyexr_project tinyexr tinyexr 0.9.5 has a heap-based buffer over-read in LoadEXRImageFromMemory in tinyexr.h. CWE-125
Out-of-bounds Read 		CVE-2018-12503 2024-11-21 12:45 2018-06-17 Show GitHub Exploit DB Packet Storm
246688 6.1 MEDIUM
Network 		nagios fusion Nagios Fusion before 4.1.4 has XSS, aka TPS#13332-13335. CWE-79
Cross-site Scripting 		CVE-2018-12501 2024-11-21 12:45 2018-06-16 Show GitHub Exploit DB Packet Storm
246689 9.8 CRITICAL
Network 		icmsdev icms spider.admincp.php in iCMS v7.0.8 has SQL Injection via the id parameter in an app=spider&do=batch request to admincp.php. CWE-89
SQL Injection 		CVE-2018-12498 2024-11-21 12:45 2018-06-16 Show GitHub Exploit DB Packet Storm
246690 5.5 MEDIUM
Local 		discount_project
debian 		discount
debian_linux 		The quoteblock function in markdown.c in libmarkdown.a in DISCOUNT 2.2.3a allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted file. CWE-125
Out-of-bounds Read 		CVE-2018-12495 2024-11-21 12:45 2018-06-16 Show GitHub Exploit DB Packet Storm