Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 1, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
252091	7.5	危険	Robert Gonda	-	TYPO3 用 Documents download エクステンションにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2012-1075	2012-02-17 14:33	2012-02-14	Show	GitHub Exploit DB Packet Storm

252092	7.5	危険	White Papers	-	TYPO3 用 White Papers エクステンションにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2012-1074	2012-02-17 14:33	2012-02-14	Show	GitHub Exploit DB Packet Storm

252093	4.3	警告	Category-System	-	TYPO3 用 Category-System エクステンションにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-1073	2012-02-17 14:31	2012-02-14	Show	GitHub Exploit DB Packet Storm

252094	7.5	危険	Category-System	-	TYPO3 用 Category-System エクステンションにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2012-1072	2012-02-17 14:31	2012-02-14	Show	GitHub Exploit DB Packet Storm

252095	7.5	危険	Mathieu Vidal	-	TYPO3 用 Kitchen recipe エクステンションにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2012-1071	2012-02-17 14:29	2012-02-14	Show	GitHub Exploit DB Packet Storm

252096	4.3	警告	Netcreators	-	TYPO3 用 Modern FAQ エクステンションにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-1070	2012-02-17 14:29	2012-02-14	Show	GitHub Exploit DB Packet Storm

252097	4.3	警告	Juergen Furrer	-	TYPO3 用 Additional TCA Forms エクステンションにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-5080	2012-02-17 14:27	2012-02-14	Show	GitHub Exploit DB Packet Storm

252098	5	警告	NetSarang	-	NetSarang の Xlpd および Xmanager Enterprise におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2012-1009	2012-02-17 11:54	2012-02-14	Show	GitHub Exploit DB Packet Storm

252099	4.3	警告	Instant Php	-	lknSupport の module/kb/search_word におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-1069	2012-02-17 11:17	2012-02-14	Show	GitHub Exploit DB Packet Storm

252100	4.3	警告	mg12	-	WordPress 用 WP-RecentComments プラグインの rc_ajax 関数におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-1068	2012-02-17 11:17	2012-02-14	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 1, 2026, 4:12 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
246731	9.8	CRITICAL Network	ribboncommunications	sonus_sbc_1000_firmware sonus_sbc_2000_firmware sbc_swe_lite_firmware	A Remote Command Execution (RCE) vulnerability in the Sonus SBC 1000 / SBC 2000 / SBC SWe Lite web interface allows for the execution of arbitrary commands via an unspecified vector. It affects the 1…	NVD-CWE-noinfo	CVE-2018-11542	2024-11-21 12:43	2018-07-9	Show	GitHub Exploit DB Packet Storm

246732	9.8	CRITICAL Network	ribboncommunications	sonus_sbc_1000_firmware sonus_sbc_2000_firmware sbc_swe_lite_web	A root privilege escalation vulnerability in the Sonus SBC 1000 / SBC 2000 / SBC SWe Lite web interface allows unauthorised access to privileged content via an unspecified vector. It affects the 1000…	CWE-862 Missing Authorization	CVE-2018-11541	2024-11-21 12:43	2018-07-9	Show	GitHub Exploit DB Packet Storm

246733	6.1	MEDIUM Network	jirafeau	jirafeau	script.php in Jirafeau before 3.4.1 is affected by two stored Cross-Site Scripting (XSS) vulnerabilities. These are stored within the shared files description file and allow the execution of a JavaSc…	CWE-79 Cross-site Scripting	CVE-2018-11351	2024-11-21 12:43	2018-07-8	Show	GitHub Exploit DB Packet Storm

246734	6.1	MEDIUM Network	jirafeau	jirafeau	An issue was discovered in Jirafeau before 3.4.1. The file "search by name" form is affected by one Cross-Site Scripting vulnerability via the name parameter.	CWE-79 Cross-site Scripting	CVE-2018-11350	2024-11-21 12:43	2018-07-8	Show	GitHub Exploit DB Packet Storm

246735	8.8	HIGH Network	jirafeau	jirafeau	The administration panel of Jirafeau before 3.4.1 is vulnerable to three CSRF attacks on search functionalities: search_by_name, search_by_hash, and search_link.	CWE-352 Origin Validation Error	CVE-2018-11349	2024-11-21 12:43	2018-07-8	Show	GitHub Exploit DB Packet Storm

246736	7.8	HIGH Local	google	android	Possible buffer overflow in msm_adsp_stream_callback_put due to lack of input validation of user-provided data that leads to integer overflow in all Android releases(Android for MSM, Firefox OS for M…	CWE-190 Integer Overflow or Wraparound	CVE-2018-11304	2024-11-21 12:43	2018-07-7	Show	GitHub Exploit DB Packet Storm

246737	7.7	HIGH Local	qualcomm	mdm9206_firmware mdm9607_firmware mdm9635m_firmware mdm9640_firmware mdm9650_firmware mdm9655_firmware msm8909w_firmware msm8996au_firmware sd_210_firmware sd_212_firmware<…	Due to Improper Access Control of NAND-based EFS in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear, From fastboot on a NAND-based device, the EFS partition can be erased. Apps processor…	CWE-732 Incorrect Permission Assignment for Critical Resource	CVE-2018-11259	2024-11-21 12:43	2018-07-7	Show	GitHub Exploit DB Packet Storm

246738	7.8	HIGH Local	qualcomm	sd_210_firmware sd_212_firmware sd_205_firmware sd_845_firmware sd_850_firmware	Permissions, Privileges, and Access Controls in TA in Snapdragon Mobile has an options that allows RPMB erase for secure devices in versions SD 210/SD 212/SD 205, SD 845, SD 850.	NVD-CWE-noinfo	CVE-2018-11257	2024-11-21 12:43	2018-07-7	Show	GitHub Exploit DB Packet Storm

246739	7.8	HIGH Local	qualcomm	mdm9206_firmware mdm9607_firmware mdm9650_firmware msm8909w_firmware msm8996au_firmware sd_210_firmware sd_212_firmware sd_205_firmware sd_425_firmware sd_450_firmware s…	In ADSP RPC in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear, a Use After Free condition can occur in versions MDM9206, MDM9607, MDM9650, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD …	CWE-416 Use After Free	CVE-2018-11258	2024-11-21 12:43	2018-07-7	Show	GitHub Exploit DB Packet Storm

246740	7.5	HIGH Network	atlant	atlant	ATLANT (ATL) is a smart contract running on Ethereum. The mint function has an integer overflow that allows minted tokens to be arbitrarily retrieved by the contract owner.	CWE-190 Integer Overflow or Wraparound	CVE-2018-11429	2024-11-21 12:43	2018-07-4	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed