Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 30, 2026, 2 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
252111 10 危険 アドビシステムズ - Adobe Shockwave Player における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2012-0759 2012-02-16 11:05 2012-02-14 Show GitHub Exploit DB Packet Storm
252112 10 危険 アドビシステムズ - Adobe Shockwave Player におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2012-0758 2012-02-16 11:02 2012-02-14 Show GitHub Exploit DB Packet Storm
252113 10 危険 アドビシステムズ - Adobe Shockwave Player の Shockwave 3D Asset コンポーネントにおける任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2012-0757 2012-02-16 11:00 2012-02-14 Show GitHub Exploit DB Packet Storm
252114 6.4 警告 富士通 - Fujitsu Interstage Application Server の Interstage 管理コンソールにおける任意のファイル読込/削除の脆弱性 CWE-noinfo
情報不足
CVE-2008-2674 2012-02-15 18:12 2008-06-10 Show GitHub Exploit DB Packet Storm
252115 - - 日本電気
PNG Development Group
フェンリル株式会社
- libpng における sCAL チャンクの処理に脆弱性 - - 2012-02-15 16:45 2011-07-8 Show GitHub Exploit DB Packet Storm
252116 5.8 警告 Netcreators - TYPO3 用 Modern FAQ エクステンションにおけるオープンリダイレクトの脆弱性 CWE-20
不適切な入力確認
CVE-2011-5079 2012-02-15 16:04 2012-02-14 Show GitHub Exploit DB Packet Storm
252117 5 警告 The PHP Group - PHP のタイムゾーン機能におけるサービス運用妨害 (メモリ破損) の脆弱性 CWE-399
リソース管理の問題
CVE-2012-0789 2012-02-15 16:03 2012-01-10 Show GitHub Exploit DB Packet Storm
252118 5 警告 The PHP Group - PHP の PDORow 実装におけるサービス運用妨害 (アプリケーションクラッシュ) の脆弱性 CWE-20
不適切な入力確認
CVE-2012-0788 2012-02-15 16:02 2012-01-10 Show GitHub Exploit DB Packet Storm
252119 7.5 危険 Zoho Corporation - ManageEngine Applications Manager における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2012-1063 2012-02-15 15:55 2012-02-14 Show GitHub Exploit DB Packet Storm
252120 4.3 警告 Zoho Corporation - ManageEngine Applications Manager におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-1062 2012-02-15 15:55 2012-02-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 30, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
246841 4.3 MEDIUM
Network
asustor as6202t_firmware An insecure direct object reference vulnerability in download.cgi in ASUSTOR AS6202T ADM 3.1.0.RFQ3 allows the ability to reference the "download_sys_settings" action and then specify files arbitrari… CWE-425
 Direct Request ('Forced Browsing')
CVE-2018-11346 2024-11-21 12:43 2018-05-22 Show GitHub Exploit DB Packet Storm
246842 8.8 HIGH
Network
asustor as6202t_firmware An unrestricted file upload vulnerability in upload.cgi in ASUSTOR AS6202T ADM 3.1.0.RFQ3 allows attackers to upload supplied data via the POST parameter filename. This can be used to place attacker … CWE-434
 Unrestricted Upload of File with Dangerous Type 
CVE-2018-11345 2024-11-21 12:43 2018-05-22 Show GitHub Exploit DB Packet Storm
246843 6.5 MEDIUM
Network
asustor as6202t_firmware A path traversal vulnerability in download.cgi in ASUSTOR AS6202T ADM 3.1.0.RFQ3 allows attackers to arbitrarily specify a file on the system to download via the file1 parameter. CWE-22
Path Traversal
CVE-2018-11344 2024-11-21 12:43 2018-05-22 Show GitHub Exploit DB Packet Storm
246844 5.4 MEDIUM
Network
asustor soundsgood A persistent cross site scripting vulnerability in playlistmanger.cgi in the ASUSTOR SoundsGood application allows attackers to store cross site scripting payloads via the 'playlist' POST parameter. CWE-79
Cross-site Scripting
CVE-2018-11343 2024-11-21 12:43 2018-05-22 Show GitHub Exploit DB Packet Storm
246845 4.3 MEDIUM
Network
asustor as6202t_firmware A path traversal vulnerability in fileExplorer.cgi in ASUSTOR AS6202T ADM 3.1.0.RFQ3 allows attackers to arbitrarily specify a path to a file on the system to create folders via the dest_folder param… CWE-22
Path Traversal
CVE-2018-11342 2024-11-21 12:43 2018-05-22 Show GitHub Exploit DB Packet Storm
246846 7.2 HIGH
Network
asustor as6202t_firmware Directory traversal in importuser.cgi in ASUSTOR AS6202T ADM 3.1.0.RFQ3 allows attackers to navigate the file system via the filename parameter. CWE-22
Path Traversal
CVE-2018-11341 2024-11-21 12:43 2018-05-22 Show GitHub Exploit DB Packet Storm
246847 7.2 HIGH
Network
asustor as6202t_firmware An unrestricted file upload vulnerability in importuser.cgi in ASUSTOR AS6202T ADM 3.1.0.RFQ3 allows attackers to upload supplied data to a specified filename. This can be used to place attacker cont… CWE-434
 Unrestricted Upload of File with Dangerous Type 
CVE-2018-11340 2024-11-21 12:43 2018-05-22 Show GitHub Exploit DB Packet Storm
246848 6.1 MEDIUM
Network
frappe erpnext An XSS issue was discovered in Frappe ERPNext v11.x.x-develop b1036e5 via a comment. CWE-79
Cross-site Scripting
CVE-2018-11339 2024-11-21 12:43 2018-05-22 Show GitHub Exploit DB Packet Storm
246849 9.8 CRITICAL
Network
pluck-cms pluck An issue was discovered in Pluck before 4.7.6. Remote PHP code execution is possible because the set of disallowed filetypes for uploads in missing some applicable ones such as .phtml and .htaccess. CWE-434
 Unrestricted Upload of File with Dangerous Type 
CVE-2018-11331 2024-11-21 12:43 2018-05-22 Show GitHub Exploit DB Packet Storm
246850 4.8 MEDIUM
Network
pluck-cms pluck An issue was discovered in Pluck before 4.7.6. There is authenticated stored XSS because the character set for filenames is not properly restricted. CWE-79
Cross-site Scripting
CVE-2018-11330 2024-11-21 12:43 2018-05-22 Show GitHub Exploit DB Packet Storm