Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":July 1, 2026, 2:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
253741 7.5 危険 F5 Networks - F5 FirePass の my.activation.php3 における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2012-1777 2012-04-6 15:43 2012-03-14 Show GitHub Exploit DB Packet Storm
253742 9.3 危険 シスコシステムズ - Cisco WebEx Recording Format (WRF) Player におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2012-1337 2012-04-6 15:41 2012-04-4 Show GitHub Exploit DB Packet Storm
253743 9.3 危険 シスコシステムズ - Cisco WebEx Recording Format (WRF) Player におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2012-1336 2012-04-6 15:41 2012-04-4 Show GitHub Exploit DB Packet Storm
253744 9.3 危険 シスコシステムズ - Cisco WebEx Recording Format (WRF) Player におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2012-1335 2012-04-6 15:40 2012-04-4 Show GitHub Exploit DB Packet Storm
253745 5.8 警告 株式会社アイシーズ - せん茶SNS におけるセッション固定の脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-1238 2012-04-5 14:03 2012-04-5 Show GitHub Exploit DB Packet Storm
253746 2.6 注意 株式会社アイシーズ - せん茶SNS におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2012-1237 2012-04-5 14:02 2012-04-5 Show GitHub Exploit DB Packet Storm
253747 6.4 警告 東芝テック - 東芝テック製 e-Studio シリーズにおける認証回避の脆弱性 CWE-287
不適切な認証 		CVE-2012-1239 2012-04-5 14:01 2012-04-5 Show GitHub Exploit DB Packet Storm
253748 6.8 警告 Scadatec Limited
TurboPower Abbrevia		 - TurboPower Abbrevia におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2011-4535 2012-04-4 16:46 2011-12-28 Show GitHub Exploit DB Packet Storm
253749 4.3 警告 ARC Informatique - 複数の ARC Informatique 製品の ActiveX コントロールにおけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2011-4045 2012-04-4 16:44 2011-09-28 Show GitHub Exploit DB Packet Storm
253750 5.8 警告 ARC Informatique - 複数の ARC Informatique 製品の ActiveX コントロールにおけるファイルを変更される脆弱性 CWE-noinfo
情報不足 		CVE-2011-4044 2012-04-4 16:40 2011-09-28 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:July 1, 2026, 4:27 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
246121 9.8 CRITICAL
Network 		sahipro sahi_pro An issue was discovered in Tyto Sahi Pro through 7.x.x and 8.0.0. A parameter in the web reports module is vulnerable to h2 SQL injection. This can be exploited to inject SQL queries and run standard… CWE-89
SQL Injection 		CVE-2018-20469 2024-11-21 13:01 2019-06-17 Show GitHub Exploit DB Packet Storm
246122 8.8 HIGH
Network 		sahipro sahi_pro An issue was discovered in Tyto Sahi Pro through 7.x.x and 8.0.0. A web reports module has "export to excel features" that are vulnerable to CSV injection. An attacker can embed Excel formulas inside… CWE-1236
 Improper Neutralization of Formula Elements in a CSV File 		CVE-2018-20468 2024-11-21 13:01 2019-06-17 Show GitHub Exploit DB Packet Storm
246123 9.8 CRITICAL
Network 		whatsapp whatsapp When receiving calls using WhatsApp for iOS, a missing size check when parsing a sender-provided packet allowed for a stack-based overflow. This issue affects WhatsApp for iOS prior to v2.18.90.24 an… CWE-787
 Out-of-bounds Write 		CVE-2018-20655 2024-11-21 13:01 2019-06-15 Show GitHub Exploit DB Packet Storm
246124 9.8 CRITICAL
Network 		cesanta mongoose An invalid read of 8 bytes due to a use-after-free vulnerability in the mg_http_free_proto_data_cgi function call in mongoose.c in Cesanta Mongoose Embedded Web Server Library 6.13 and earlier allows… CWE-416
 Use After Free 		CVE-2018-20356 2024-11-21 13:01 2019-06-11 Show GitHub Exploit DB Packet Storm
246125 9.8 CRITICAL
Network 		cesanta mongoose An invalid write of 8 bytes due to a use-after-free vulnerability in the mg_http_free_proto_data_cgi function call in mongoose.c in Cesanta Mongoose Embedded Web Server Library 6.13 and earlier allow… CWE-416
 Use After Free 		CVE-2018-20355 2024-11-21 13:01 2019-06-11 Show GitHub Exploit DB Packet Storm
246126 9.8 CRITICAL
Network 		cesanta mongoose An invalid read of 8 bytes due to a use-after-free vulnerability during a "return" in the mg_http_get_proto_data function in mongoose.c in Cesanta Mongoose Embedded Web Server Library 6.13 and earlie… CWE-416
 Use After Free 		CVE-2018-20354 2024-11-21 13:01 2019-06-11 Show GitHub Exploit DB Packet Storm
246127 9.8 CRITICAL
Network 		cesanta mongoose An invalid read of 8 bytes due to a use-after-free vulnerability during a "NULL test" in the mg_http_get_proto_data function in mongoose.c in Cesanta Mongoose Embedded Web Server Library 6.13 and ear… CWE-416
 Use After Free 		CVE-2018-20353 2024-11-21 13:01 2019-06-11 Show GitHub Exploit DB Packet Storm
246128 8.8 HIGH
Network 		cesanta mongoose_embedded_web_server_library Use-after-free vulnerability in the mg_cgi_ev_handler function in mongoose.c in Cesanta Mongoose Embedded Web Server Library 6.13 and earlier allows a denial of service (application crash) or remote … CWE-416
 Use After Free 		CVE-2018-20352 2024-11-21 13:01 2019-06-11 Show GitHub Exploit DB Packet Storm
246129 5.3 MEDIUM
Network 		mi stock_browser
redmi_7_firmware
redmi_note_7_firmware
redmi_note_6_pro_firmware
redmi_6_firmware
redmi_6a_firmware
redmi_s2_firmware
redmi_note_5_pro_firmware
redmi_k20_pro_fir… 		Xiaomi Stock Browser 10.2.4.g on Xiaomi Redmi Note 5 Pro devices and other Redmi Android phones allows content provider injection. In other words, a third-party application can read the user's cleart… CWE-77
Command Injection 		CVE-2018-20523 2024-11-21 13:01 2019-06-8 Show GitHub Exploit DB Packet Storm
246130 7.5 HIGH
Network 		gitlab gitlab An insecure permissions issue was discovered in GitLab Community and Enterprise Edition 9.4 and later but before 11.4.13, 11.5.x before 11.5.6, and 11.6.x before 11.6.1. The runner registration token… CWE-732
 Incorrect Permission Assignment for Critical Resource 		CVE-2018-20500 2024-11-21 13:01 2019-05-18 Show GitHub Exploit DB Packet Storm