Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":June 9, 2026, 6 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 253171 | 5 | 警告 | LANDesk | - | Lenovo ThinkManagement Console におけるディレクトリトラバーサルの脆弱性 |
CWE-22
パス・トラバーサル |
CVE-2012-1196 | 2012-02-21 16:44 | 2012-02-18 | Show | GitHub Exploit DB Packet Storm |
| 253172 | 7.5 | 危険 | LANDesk | - | Lenovo ThinkManagement Console の ServerSetup web サービスにおける任意のコードを実行される脆弱性 |
CWE-264
認可・権限・アクセス制御 |
CVE-2012-1195 | 2012-02-21 16:43 | 2012-02-18 | Show | GitHub Exploit DB Packet Storm |
| 253173 | 4.3 | 警告 | Craig Barratt | - | BackupPC の RestoreFile.pm におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2011-5081 | 2012-02-21 16:42 | 2012-02-18 | Show | GitHub Exploit DB Packet Storm |
| 253174 | 4.3 | 警告 | Craig Barratt | - | BackupPC の View.pm におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2011-4923 | 2012-02-21 16:41 | 2012-02-18 | Show | GitHub Exploit DB Packet Storm |
| 253175 | 9.3 | 危険 | TYPO3 Association | - | TYPO3 の workspaces system エクステンションにおける PHP リモートファイルインクルージョンの脆弱性 |
CWE-94
コード・インジェクション |
CVE-2011-4614 | 2012-02-21 16:40 | 2011-12-16 | Show | GitHub Exploit DB Packet Storm |
| 253176 | 4.3 | 警告 | Craig Barratt | - | BackupPC の CGI/Browse.pm におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2011-3361 | 2012-02-21 16:34 | 2012-02-18 | Show | GitHub Exploit DB Packet Storm |
| 253177 | 7.5 | 危険 | Earl Miles | - | Drupal 用 Views モジュールにおける SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2011-4113 | 2012-02-21 16:33 | 2012-02-17 | Show | GitHub Exploit DB Packet Storm |
| 253178 | 2.1 | 注意 | Robert Ancell | - | LightDM における任意のファイルの所有権を変更される脆弱性 |
CWE-264
認可・権限・アクセス制御 |
CVE-2011-4105 | 2012-02-21 16:26 | 2012-02-17 | Show | GitHub Exploit DB Packet Storm |
| 253179 | 6.4 | 警告 | マイクロソフト | - | Microsoft Windows Server 2008 における無効なドメイン名の継続的な名前解決を可能にされる脆弱性 |
CWE-Other
その他 |
CVE-2012-1194 | 2012-02-21 16:25 | 2012-02-17 | Show | GitHub Exploit DB Packet Storm |
| 253180 | 6.4 | 警告 | PowerDNS | - | PowerDNS における無効なドメイン名の継続的な名前解決を可能にされる脆弱性 |
CWE-DesignError
|
CVE-2012-1193 | 2012-02-21 16:24 | 2012-02-17 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:June 9, 2026, 4:16 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 246071 | 5.4 |
MEDIUM
Network |
advanced_real_estate_script_project | advanced_real_estate_script | PHP Scripts Mall advanced-real-estate-script has XSS via the Name field of a profile. |
CWE-79
Cross-site Scripting |
CVE-2018-15189 | 2024-11-21 12:50 | 2018-08-11 | Show | GitHub Exploit DB Packet Storm |
| 246072 | 6.5 |
MEDIUM
Network |
advanced_real_estate_script_project | advanced_real_estate_script | PHP Scripts Mall advanced-real-estate-script 4.0.9 allows remote attackers to cause a denial of service (page structure loss) via crafted JavaScript code in the Name field of a profile. |
CWE-119
Incorrect Access of Indexable Resource ('Range Error') |
CVE-2018-15188 | 2024-11-21 12:50 | 2018-08-11 | Show | GitHub Exploit DB Packet Storm |
| 246073 | 8.0 |
HIGH
Network |
advanced_real_estate_script_project | advanced_real_estate_script | PHP Scripts Mall advanced-real-estate-script 4.0.9 has CSRF via edit-profile.php. |
CWE-352
Origin Validation Error |
CVE-2018-15187 | 2024-11-21 12:50 | 2018-08-11 | Show | GitHub Exploit DB Packet Storm |
| 246074 | 8.8 |
HIGH
Network |
chartered_accountant_\ | _auditor_website_project | PHP Scripts Mall Chartered Accountant : Auditor Website 2.0.1 has CSRF via client/auditor/updprofile.php. |
CWE-352
Origin Validation Error |
CVE-2018-15186 | 2024-11-21 12:50 | 2018-08-11 | Show | GitHub Exploit DB Packet Storm |
| 246075 | 6.5 |
MEDIUM
Network |
naukri_clone_script_project | naukri_clone_script | PHP Scripts Mall Naukri / Shine / Jobsite Clone Script 3.0.4 allows remote attackers to cause a denial of service (page update outage) via crafted PHP and JavaScript code in the "Current Position" fi… |
CWE-20
Improper Input Validation |
CVE-2018-15185 | 2024-11-21 12:50 | 2018-08-11 | Show | GitHub Exploit DB Packet Storm |
| 246076 | 5.4 |
MEDIUM
Network |
naukri_clone_script_project | naukri_clone_script | PHP Scripts Mall Naukri / Shine / Jobsite Clone Script 3.0.4 has Stored XSS via the USERNAME field, a related issue to CVE-2018-6795. |
CWE-79
Cross-site Scripting |
CVE-2018-15184 | 2024-11-21 12:50 | 2018-08-10 | Show | GitHub Exploit DB Packet Storm |
| 246077 | 6.1 |
MEDIUM
Network |
myperfectresume_\/_jobhero_\/_resume_clone_script_project | myperfectresume_\/_jobhero_\/_resume_clone_script | PHP Scripts Mall Myperfectresume / JobHero / Resume Clone Script 2.0.6 has Stored XSS via the Full Name and Title fields. |
CWE-79
Cross-site Scripting |
CVE-2018-15183 | 2024-11-21 12:50 | 2018-08-10 | Show | GitHub Exploit DB Packet Storm |
| 246078 | 5.4 |
MEDIUM
Network |
car_rental_script_project | car_rental_script | PHP Scripts Mall Car Rental Script 2.0.8 has XSS via the FirstName and LastName fields. |
CWE-79
Cross-site Scripting |
CVE-2018-15182 | 2024-11-21 12:50 | 2018-08-10 | Show | GitHub Exploit DB Packet Storm |
| 246079 | 6.5 |
MEDIUM
Network |
jio | 4g_hotspot_m2s_firmware | JioFi 4G Hotspot M2S devices allow attackers to cause a denial of service (secure configuration outage) via an XSS payload in the SSID name and Security Key fields. |
CWE-79
Cross-site Scripting |
CVE-2018-15181 | 2024-11-21 12:50 | 2018-08-10 | Show | GitHub Exploit DB Packet Storm |
| 246080 | 8.1 |
HIGH
Network |
laravel | laravel | In Laravel Framework through 5.5.40 and 5.6.x through 5.6.29, remote code execution might occur as a result of an unserialize call on a potentially untrusted X-XSRF-TOKEN value. This involves the dec… |
CWE-502
Deserialization of Untrusted Data |
CVE-2018-15133 | 2024-11-21 12:50 | 2018-08-10 | Show | GitHub Exploit DB Packet Storm |