Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 7, 2026, 2:09 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
252191 5 警告 The PHP Group - PHP の mt_rand 関数における整数オーバーフローの脆弱性 CWE-189
数値処理の問題
CVE-2011-0755 2011-03-1 15:57 2010-12-9 Show GitHub Exploit DB Packet Storm
252192 4.4 警告 The PHP Group - PHP の SplFileInfo::getType 関数におけるシンボリックリンク攻撃の脆弱性 CWE-59
リンク解釈の問題
CVE-2011-0754 2011-03-1 15:55 2010-12-9 Show GitHub Exploit DB Packet Storm
252193 4.3 警告 The PHP Group - PHP の PCNTL 拡張におけるサービス運用妨害 (DoS) の脆弱性 CWE-362
競合状態
CVE-2011-0753 2011-03-1 15:54 2010-12-9 Show GitHub Exploit DB Packet Storm
252194 5 警告 The PHP Group - PHP の extract 関数におけるアクセス制限を回避される脆弱性 CWE-20
不適切な入力確認
CVE-2011-0752 2011-03-1 15:52 2010-12-8 Show GitHub Exploit DB Packet Storm
252195 5 警告 日立 - JP1/NETM/DM におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足
- 2011-03-1 15:26 2011-01-31 Show GitHub Exploit DB Packet Storm
252196 7.5 危険 IBM - IBM DB2 の DB2 Administration Server コンポーネントにおける任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2011-0731 2011-03-1 15:17 2011-01-28 Show GitHub Exploit DB Packet Storm
252197 7.8 危険 ISC, Inc.
レッドハット
- ISC DHCPv6 にサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2011-0413 2011-03-1 15:10 2011-01-28 Show GitHub Exploit DB Packet Storm
252198 7.5 危険 Google - Google Android SDK の BMP::readFromStream メソッドにおける整数オーバーフロー脆弱性 CWE-189
数値処理の問題
CVE-2008-0986 2011-03-1 14:58 2008-03-6 Show GitHub Exploit DB Packet Storm
252199 6.8 警告 Google - Google Android SDK の GIF ライブラリにおけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2008-0985 2011-03-1 14:56 2008-03-6 Show GitHub Exploit DB Packet Storm
252200 7.2 危険 サイバートラスト株式会社
VMware
Linux
レッドハット
- 64-bit プラットフォーム上で稼働している Linux kernel の compat_alloc_user_space 関数における権限昇格の脆弱性 CWE-119
バッファエラー
CVE-2010-3081 2011-03-1 14:46 2010-09-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 7, 2026, 4:22 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
290341 - neocrome seditio Neocrome Seditio build 161 and earlier allows remote attackers to obtain sensitive information via direct request to (1) view.php, (2) plugins/contact/lang/contact.en.lang.php, (3) system/lang/en/mai… CWE-200
Information Exposure
CVE-2012-5915 2024-11-21 10:45 2012-11-18 Show GitHub Exploit DB Packet Storm
290342 - neocrome seditio Multiple cross-site scripting (XSS) vulnerabilities in the sed_import function in system/functions.php in Neocrome Seditio build 160 and 161 allow remote attackers to inject arbitrary web script or H… CWE-79
Cross-site Scripting
CVE-2012-5914 2024-11-21 10:45 2012-11-18 Show GitHub Exploit DB Packet Storm
290343 - wordpress_integrator_project wordpress_integrator Cross-site scripting (XSS) vulnerability in wp-integrator.php in the WordPress Integrator module 1.32 for WordPress allows remote attackers to inject arbitrary web script or HTML via the redirect_to … CWE-79
Cross-site Scripting
CVE-2012-5913 2024-11-21 10:45 2012-11-18 Show GitHub Exploit DB Packet Storm
290344 - pico picopublisher Multiple SQL injection vulnerabilities in PicoPublisher 2.0 allow remote attackers to execute arbitrary SQL commands via the id parameter to (1) page.php or (2) single.php. CWE-89
SQL Injection
CVE-2012-5912 2024-11-21 10:45 2012-11-18 Show GitHub Exploit DB Packet Storm
290345 - b2evolution b2evolution Cross-site scripting (XSS) vulnerability in blogs/blog1.php in b2evolution 4.1.3 allows remote attackers to inject arbitrary web script or HTML via the message body. CWE-79
Cross-site Scripting
CVE-2012-5911 2024-11-21 10:45 2012-11-18 Show GitHub Exploit DB Packet Storm
290346 - b2evolution b2evolution SQL injection vulnerability in blogs/htsrv/viewfile.php in b2evolution 4.1.3 allows remote authenticated users to execute arbitrary SQL commands via the root parameter. CWE-89
SQL Injection
CVE-2012-5910 2024-11-21 10:45 2012-11-18 Show GitHub Exploit DB Packet Storm
290347 - mybb mybb SQL injection vulnerability in admin/modules/user/users.php in MyBB (aka MyBulletinBoard) 1.6.6 allows remote attackers to execute arbitrary SQL commands via the conditions[usergroup][] parameter in … CWE-89
SQL Injection
CVE-2012-5909 2024-11-21 10:45 2012-11-18 Show GitHub Exploit DB Packet Storm
290348 - mybb mybb Cross-site scripting (XSS) vulnerability in admin/modules/user/users.php in MyBB (aka MyBulletinBoard) 1.6.6 allows remote attackers to inject arbitrary web script or HTML via the conditions[usergrou… CWE-79
Cross-site Scripting
CVE-2012-5908 2024-11-21 10:45 2012-11-18 Show GitHub Exploit DB Packet Storm
290349 - tomatocart tomatocart Directory traversal vulnerability in json.php in TomatoCart 1.2.0 Alpha 2 and possibly earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the module parameter in a "3" acti… CWE-22
Path Traversal
CVE-2012-5907 2024-11-21 10:45 2012-11-18 Show GitHub Exploit DB Packet Storm
290350 - morequick greenbrowser Multiple cross-site scripting (XSS) vulnerabilities in GreenBrowser 6.1.0117 and 6.1.0216 allow remote attackers to inject arbitrary web script or HTML via (1) the URI in an about: page or (2) the la… CWE-79
Cross-site Scripting
CVE-2012-5906 2024-11-21 10:45 2012-11-18 Show GitHub Exploit DB Packet Storm