|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
Update Date":June 9, 2026, 6 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 253181 | 6.4 | 警告 | Stichting NLnet Labs | - | Unbound における無効なドメイン名の継続的な名前解決を可能にされる脆弱性 |
CWE-DesignError
|
CVE-2012-1192 | 2012-02-21 16:22 | 2012-02-17 | Show | GitHub Exploit DB Packet Storm |
| 253182 | 6.4 | 警告 | Daniel J. Bernstein | - | Daniel J. Bernstein djbdns における無効なドメイン名の継続的な名前解決を可能にされる脆弱性 |
CWE-20 CWE-DesignError |
CVE-2012-1191 | 2012-02-21 16:20 | 2012-02-17 | Show | GitHub Exploit DB Packet Storm |
| 253183 | 5 | 警告 | PowerDNS | - | PowerDNS Authoritative Server の common_startup.cc におけるサービス運用妨害 (DoS) の脆弱性 |
CWE-399
リソース管理の問題 |
CVE-2012-0206 | 2012-02-21 15:50 | 2012-01-10 | Show | GitHub Exploit DB Packet Storm |
| 253184 | 7.2 | 危険 | マイクロソフト | - | Microsoft Windows のカーネルモードドライバにおける権限昇格の脆弱性 |
CWE-399
リソース管理の問題 |
CVE-2012-0154 | 2012-02-20 18:30 | 2012-02-14 | Show | GitHub Exploit DB Packet Storm |
| 253185 | 7.2 | 危険 | マイクロソフト | - | Microsoft Windows の afd.sys における権限昇格の脆弱性 |
CWE-20
不適切な入力確認 |
CVE-2012-0148 | 2012-02-20 18:28 | 2012-02-14 | Show | GitHub Exploit DB Packet Storm |
| 253186 | 7.2 | 危険 | マイクロソフト | - | Microsoft Windows Server 2003 の afd.sys における権限昇格の脆弱性 |
CWE-20
不適切な入力確認 |
CVE-2012-0149 | 2012-02-20 18:27 | 2012-02-14 | Show | GitHub Exploit DB Packet Storm |
| 253187 | 4.3 | 警告 | マイクロソフト | - | Microsoft Internet Explorer 6 から 9 におけるコンテンツを読まれる脆弱性 |
CWE-200
情報漏えい |
CVE-2012-0010 | 2012-02-20 18:24 | 2012-02-14 | Show | GitHub Exploit DB Packet Storm |
| 253188 | 9.3 | 危険 | マイクロソフト | - | Microsoft Internet Explorer 7 から 9 における任意のコードを実行される脆弱性 |
CWE-94
コード・インジェクション |
CVE-2012-0011 | 2012-02-20 18:22 | 2012-02-14 | Show | GitHub Exploit DB Packet Storm |
| 253189 | 4.3 | 警告 | マイクロソフト | - | Microsoft Internet Explorer 9 におけるデータを読まれる脆弱性 |
CWE-200
情報漏えい |
CVE-2012-0012 | 2012-02-20 18:20 | 2012-02-14 | Show | GitHub Exploit DB Packet Storm |
| 253190 | 9.3 | 危険 | マイクロソフト | - | Microsoft Internet Explorer 9 における任意のコードを実行される脆弱性 |
CWE-94
コード・インジェクション |
CVE-2012-0155 | 2012-02-20 18:18 | 2012-02-14 | Show | GitHub Exploit DB Packet Storm |
Update Date:June 9, 2026, 4:16 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 246071 | 5.4 |
MEDIUM
Network |
advanced_real_estate_script_project | advanced_real_estate_script | PHP Scripts Mall advanced-real-estate-script has XSS via the Name field of a profile. |
CWE-79
Cross-site Scripting |
CVE-2018-15189 | 2024-11-21 12:50 | 2018-08-11 | Show | GitHub Exploit DB Packet Storm |
| 246072 | 6.5 |
MEDIUM
Network |
advanced_real_estate_script_project | advanced_real_estate_script | PHP Scripts Mall advanced-real-estate-script 4.0.9 allows remote attackers to cause a denial of service (page structure loss) via crafted JavaScript code in the Name field of a profile. |
CWE-119
Incorrect Access of Indexable Resource ('Range Error') |
CVE-2018-15188 | 2024-11-21 12:50 | 2018-08-11 | Show | GitHub Exploit DB Packet Storm |
| 246073 | 8.0 |
HIGH
Network |
advanced_real_estate_script_project | advanced_real_estate_script | PHP Scripts Mall advanced-real-estate-script 4.0.9 has CSRF via edit-profile.php. |
CWE-352
Origin Validation Error |
CVE-2018-15187 | 2024-11-21 12:50 | 2018-08-11 | Show | GitHub Exploit DB Packet Storm |
| 246074 | 8.8 |
HIGH
Network |
chartered_accountant_\ | _auditor_website_project | PHP Scripts Mall Chartered Accountant : Auditor Website 2.0.1 has CSRF via client/auditor/updprofile.php. |
CWE-352
Origin Validation Error |
CVE-2018-15186 | 2024-11-21 12:50 | 2018-08-11 | Show | GitHub Exploit DB Packet Storm |
| 246075 | 6.5 |
MEDIUM
Network |
naukri_clone_script_project | naukri_clone_script | PHP Scripts Mall Naukri / Shine / Jobsite Clone Script 3.0.4 allows remote attackers to cause a denial of service (page update outage) via crafted PHP and JavaScript code in the "Current Position" fi… |
CWE-20
Improper Input Validation |
CVE-2018-15185 | 2024-11-21 12:50 | 2018-08-11 | Show | GitHub Exploit DB Packet Storm |
| 246076 | 5.4 |
MEDIUM
Network |
naukri_clone_script_project | naukri_clone_script | PHP Scripts Mall Naukri / Shine / Jobsite Clone Script 3.0.4 has Stored XSS via the USERNAME field, a related issue to CVE-2018-6795. |
CWE-79
Cross-site Scripting |
CVE-2018-15184 | 2024-11-21 12:50 | 2018-08-10 | Show | GitHub Exploit DB Packet Storm |
| 246077 | 6.1 |
MEDIUM
Network |
myperfectresume_\/_jobhero_\/_resume_clone_script_project | myperfectresume_\/_jobhero_\/_resume_clone_script | PHP Scripts Mall Myperfectresume / JobHero / Resume Clone Script 2.0.6 has Stored XSS via the Full Name and Title fields. |
CWE-79
Cross-site Scripting |
CVE-2018-15183 | 2024-11-21 12:50 | 2018-08-10 | Show | GitHub Exploit DB Packet Storm |
| 246078 | 5.4 |
MEDIUM
Network |
car_rental_script_project | car_rental_script | PHP Scripts Mall Car Rental Script 2.0.8 has XSS via the FirstName and LastName fields. |
CWE-79
Cross-site Scripting |
CVE-2018-15182 | 2024-11-21 12:50 | 2018-08-10 | Show | GitHub Exploit DB Packet Storm |
| 246079 | 6.5 |
MEDIUM
Network |
jio | 4g_hotspot_m2s_firmware | JioFi 4G Hotspot M2S devices allow attackers to cause a denial of service (secure configuration outage) via an XSS payload in the SSID name and Security Key fields. |
CWE-79
Cross-site Scripting |
CVE-2018-15181 | 2024-11-21 12:50 | 2018-08-10 | Show | GitHub Exploit DB Packet Storm |
| 246080 | 8.1 |
HIGH
Network |
laravel | laravel | In Laravel Framework through 5.5.40 and 5.6.x through 5.6.29, remote code execution might occur as a result of an unserialize call on a potentially untrusted X-XSRF-TOKEN value. This involves the dec… |
CWE-502
Deserialization of Untrusted Data |
CVE-2018-15133 | 2024-11-21 12:50 | 2018-08-10 | Show | GitHub Exploit DB Packet Storm |