Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":April 30, 2026, 4 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
253761	6.8	警告	マイクロソフト	-	Microsoft Windows の kernel における権限を取得される脆弱性	CWE-20 不適切な入力確認	CVE-2009-1127	2010-01-4 15:24	2009-11-10	Show	GitHub Exploit DB Packet Storm

253762	10	危険	マイクロソフト	-	Microsoft Windows の License Logging Server (llssrv.exe) における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2009-2523	2010-01-4 15:24	2009-11-10	Show	GitHub Exploit DB Packet Storm

253763	9.3	危険	マイクロソフト	-	Microsoft Windows の Web Services on Devices API (WSDAPI) における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2009-2512	2010-01-4 15:23	2009-11-10	Show	GitHub Exploit DB Packet Storm

253764	10	危険	アップル VMware サン・マイクロシステムズ	-	Sun Java SE の Provider クラスにおける詳細不明な脆弱性	CWE-noinfo 情報不足	CVE-2009-2722	2010-01-4 14:56	2009-08-10	Show	GitHub Exploit DB Packet Storm

253765	10	危険	アップル VMware サン・マイクロシステムズ	-	Sun Java SE の Provider クラスにおける詳細不明な脆弱性	CWE-noinfo 情報不足	CVE-2009-2723	2010-01-4 14:55	2009-08-10	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:April 30, 2026, 4:58 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
291051	-	oracle	database_server primavera_p6_enterprise_project_portfolio_management	The authentication protocol in Oracle Database Server 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, and 11.2.0.3 allows remote attackers to obtain the session key and salt for arbitrary users, wh…	CWE-287 Improper Authentication	CVE-2012-3137	2024-11-21 10:40	2012-09-22	Show	GitHub Exploit DB Packet Storm

291052	-	apache	wicket	Cross-site scripting (XSS) vulnerability in Apache Wicket 1.4.x before 1.4.21 and 1.5.x before 1.5.8 allows remote attackers to inject arbitrary web script or HTML via vectors involving a %00 sequenc…	CWE-79 Cross-site Scripting	CVE-2012-3373	2024-11-21 10:40	2012-09-20	Show	GitHub Exploit DB Packet Storm

291053	-	oscommerce paypal	online_merchant website_payments_standard_module	The PayPal (aka MODULE_PAYMENT_PAYPAL_STANDARD) module before 1.1 in osCommerce Online Merchant before 2.3.4 allows remote attackers to set the payment recipient via a modified value of the merchant'…	NVD-CWE-Other	CVE-2012-2991	2024-11-21 10:40	2012-09-20	Show	GitHub Exploit DB Packet Storm

291054	-	hp	operations_orchestration	Unspecified vulnerability in HP Operations Orchestration 9.0 before 9.03 allows remote attackers to execute arbitrary code via unknown vectors.	NVD-CWE-noinfo	CVE-2012-3258	2024-11-21 10:40	2012-09-19	Show	GitHub Exploit DB Packet Storm

291055	-	siemens	simatic_pcs7 wincc	WebNavigator in Siemens WinCC 7.0 SP3 and earlier, as used in SIMATIC PCS7 and other products, allows remote attackers to discover a username and password via crafted parameters to unspecified method…	CWE-200 Information Exposure	CVE-2012-3034	2024-11-21 10:40	2012-09-18	Show	GitHub Exploit DB Packet Storm

291056	-	siemens	simatic_pcs7 wincc	SQL injection vulnerability in WebNavigator in Siemens WinCC 7.0 SP3 and earlier, as used in SIMATIC PCS7 and other products, allows remote attackers to execute arbitrary SQL commands via a crafted S…	CWE-89 SQL Injection	CVE-2012-3032	2024-11-21 10:40	2012-09-18	Show	GitHub Exploit DB Packet Storm

291057	-	siemens	simatic_pcs7 wincc	Multiple cross-site scripting (XSS) vulnerabilities in WebNavigator in Siemens WinCC 7.0 SP3 and earlier, as used in SIMATIC PCS7 and other products, allow remote attackers to inject arbitrary web sc…	CWE-79 Cross-site Scripting	CVE-2012-3031	2024-11-21 10:40	2012-09-18	Show	GitHub Exploit DB Packet Storm

291058	-	siemens	simatic_pcs7 wincc	WebNavigator in Siemens WinCC 7.0 SP3 and earlier, as used in SIMATIC PCS7 and other products, stores sensitive information under the web root with insufficient access control, which allows remote at…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2012-3030	2024-11-21 10:40	2012-09-18	Show	GitHub Exploit DB Packet Storm

291059	-	siemens	simatic_pcs7 wincc	Cross-site request forgery (CSRF) vulnerability in WebNavigator in Siemens WinCC 7.0 SP3 and earlier, as used in SIMATIC PCS7 and other products, allows remote attackers to hijack the authentication …	CWE-352 Origin Validation Error	CVE-2012-3028	2024-11-21 10:40	2012-09-18	Show	GitHub Exploit DB Packet Storm

291060	-	cososys	endpoint_protector_appliace_4	The CoSoSys Endpoint Protector 4 appliance establishes an EPProot password based entirely on the appliance serial number, which makes it easier for remote attackers to obtain access via a brute-force…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2012-2994	2024-11-21 10:40	2012-09-18	Show	GitHub Exploit DB Packet Storm