Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":July 1, 2026, 4:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
253381 9.3 危険 XnSoft - XnViewer における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2012-0685 2012-05-10 18:21 2012-05-9 Show GitHub Exploit DB Packet Storm
253382 9.3 危険 XnSoft - XnViewer における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2012-0684 2012-05-10 18:21 2012-05-9 Show GitHub Exploit DB Packet Storm
253383 9.3 危険 FFmpeg - FFmpeg の asfrtp_parse_packet 関数における整数アンダーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2011-4031 2012-05-10 18:19 2012-05-9 Show GitHub Exploit DB Packet Storm
253384 9.3 危険 マイクロソフト - Microsoft .NET Framework における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2012-0161 2012-05-10 18:16 2012-05-8 Show GitHub Exploit DB Packet Storm
253385 9.3 危険 マイクロソフト - Microsoft .NET Framework における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2012-0160 2012-05-10 18:15 2012-05-8 Show GitHub Exploit DB Packet Storm
253386 9.3 危険 マイクロソフト - Microsoft Windows のカーネルモードドライバ内の win32k.sys における権限昇格の脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-1848 2012-05-10 18:13 2012-05-8 Show GitHub Exploit DB Packet Storm
253387 10 危険 マイクロソフト - Microsoft Windows のカーネルモードドライバ内の win32k.sys における権限昇格の脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-0181 2012-05-10 18:12 2012-05-8 Show GitHub Exploit DB Packet Storm
253388 7.2 危険 マイクロソフト - Microsoft Windows のカーネルモードドライバ内の win32k.sys における権限昇格の脆弱性 CWE-20
不適切な入力確認 		CVE-2012-0180 2012-05-10 18:11 2012-05-8 Show GitHub Exploit DB Packet Storm
253389 9.3 危険 マイクロソフト - Windows 上で稼働する Microsoft Silverlight におけるメモリ二重解放の脆弱性 CWE-399
リソース管理の問題 		CVE-2012-0176 2012-05-10 18:09 2012-05-8 Show GitHub Exploit DB Packet Storm
253390 9.3 危険 マイクロソフト - Microsoft Office 2003 および 2007 におけるヒープベースのバッファオーバーフローの脆弱性 CWE-20
不適切な入力確認 		CVE-2012-0167 2012-05-10 18:08 2012-05-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:July 1, 2026, 4:27 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
246151 6.5 MEDIUM
Network 		basic_b2b_script_project basic_b2b_script PHP Scripts Mall Basic B2B Script 2.0.9 has has directory traversal via a direct request for a listing of an image directory such as an uploads/ directory. CWE-22
Path Traversal 		CVE-2018-20646 2024-11-21 13:01 2019-03-22 Show GitHub Exploit DB Packet Storm
246152 5.4 MEDIUM
Network 		basic_b2b_script_project basic_b2b_script PHP Scripts Mall Basic B2B Script 2.0.9 has HTML injection via the First Name or Last Name field. CWE-79
Cross-site Scripting 		CVE-2018-20645 2024-11-21 13:01 2019-03-22 Show GitHub Exploit DB Packet Storm
246153 8.8 HIGH
Network 		basic_b2b_script_project basic_b2b_script PHP Scripts Mall Basic B2B Script 2.0.9 has Cross-Site Request Forgery (CSRF) via the Edit profile feature. CWE-352
 Origin Validation Error 		CVE-2018-20644 2024-11-21 13:01 2019-03-22 Show GitHub Exploit DB Packet Storm
246154 6.5 MEDIUM
Network 		entrepreneur_job_portal_script_project entrepreneur_job_portal_script PHP Scripts Mall Entrepreneur Job Portal Script 3.0.1 has directory traversal via a direct request for a listing of an image directory such as an assets/ directory. CWE-22
Path Traversal 		CVE-2018-20643 2024-11-21 13:01 2019-03-22 Show GitHub Exploit DB Packet Storm
246155 6.5 MEDIUM
Network 		entrepreneur_job_portal_script_project entrepreneur_job_portal_script PHP Scripts Mall Entrepreneur Job Portal Script 3.0.1 allows remote attackers to cause a denial of service (outage of profile editing) via crafted JavaScript code in the KeySkills field. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2018-20642 2024-11-21 13:01 2019-03-22 Show GitHub Exploit DB Packet Storm
246156 8.8 HIGH
Network 		entrepreneur_job_portal_script_project entrepreneur_job_portal_script PHP Scripts Mall Entrepreneur Job Portal Script 3.0.1 has Cross-Site Request Forgery (CSRF) via the Edit Profile feature. CWE-352
 Origin Validation Error 		CVE-2018-20641 2024-11-21 13:01 2019-03-22 Show GitHub Exploit DB Packet Storm
246157 5.4 MEDIUM
Network 		entrepreneur_job_portal_script_project entrepreneur_job_portal_script PHP Scripts Mall Entrepreneur Job Portal Script 3.0.1 has stored Cross-Site Scripting (XSS) via the Full Name field. CWE-79
Cross-site Scripting 		CVE-2018-20640 2024-11-21 13:01 2019-03-22 Show GitHub Exploit DB Packet Storm
246158 6.1 MEDIUM
Network 		entrepreneur_job_portal_script_project entrepreneur_job_portal_script PHP Scripts Mall Entrepreneur Job Portal Script 3.0.1 has HTML injection via the Search Bar. CWE-79
Cross-site Scripting 		CVE-2018-20639 2024-11-21 13:01 2019-03-22 Show GitHub Exploit DB Packet Storm
246159 6.5 MEDIUM
Network 		chartered_accountant_\ _auditor_website_project PHP Scripts Mall Chartered Accountant : Auditor Website 2.0.1 has directory traversal via a direct request for a listing of an image directory such as an assets/ directory. CWE-22
Path Traversal 		CVE-2018-20638 2024-11-21 13:01 2019-03-22 Show GitHub Exploit DB Packet Storm
246160 6.5 MEDIUM
Network 		chartered_accountant_\ _auditor_website_project PHP Scripts Mall Chartered Accountant : Auditor Website 2.0.1 allows remote attackers to cause a denial of service (unrecoverable blank profile) via crafted JavaScript code in the First Name and Last… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2018-20637 2024-11-21 13:01 2019-03-22 Show GitHub Exploit DB Packet Storm