Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 14, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
254061 2.6 注意 HTC Corporation - HTC 製 Android 端末に Wi-Fi 認証情報漏えいの脆弱性 CWE-200
情報漏えい 		CVE-2011-4872 2012-02-7 16:21 2012-02-2 Show GitHub Exploit DB Packet Storm
254062 7.5 危険 Scriptsez.net - Scriptsez.net の Ez Album における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2012-0983 2012-02-7 16:19 2012-02-2 Show GitHub Exploit DB Packet Storm
254063 7.5 危険 Vastal I-Tech & Co. - Vastal I-Tech Agent Zone の search.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2012-0982 2012-02-7 16:18 2012-02-2 Show GitHub Exploit DB Packet Storm
254064 5 警告 KYBERNETIKA - phpShowtime における任意のディレクトリおよびイメージファイルをリストアップされる脆弱性 CWE-22
パス・トラバーサル 		CVE-2012-0981 2012-02-7 16:17 2012-02-2 Show GitHub Exploit DB Packet Storm
254065 7.5 危険 phux Development - phux Download Manager の download.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2012-0980 2012-02-7 16:16 2012-02-2 Show GitHub Exploit DB Packet Storm
254066 4.3 警告 TWiki - TWiki におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-0979 2012-02-7 16:14 2012-02-2 Show GitHub Exploit DB Packet Storm
254067 6.8 警告 LuraTech - LuraWave JP2 Browser Plug-In におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2012-0978 2012-02-7 16:13 2012-02-2 Show GitHub Exploit DB Packet Storm
254068 9.3 危険 LuraTech - LuraWave JP2 ActiveX Control におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2012-0977 2012-02-7 16:12 2012-02-2 Show GitHub Exploit DB Packet Storm
254069 2.1 注意 SilverStripe - SilverStripe の admin/EditForm におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-0976 2012-02-7 16:10 2012-02-2 Show GitHub Exploit DB Packet Storm
254070 4.3 警告 Clixint Technologies - Image Hosting Script DPI の misc.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-0975 2012-02-7 16:00 2012-02-2 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 15, 2026, 4:10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
246201 5.4 MEDIUM
Network 		getkirby kirby panel/pages/home/edit in Kirby v2.5.12 allows XSS via the title of a new page. CWE-79
Cross-site Scripting 		CVE-2018-16624 2024-11-21 12:53 2019-05-13 Show GitHub Exploit DB Packet Storm
246202 4.8 MEDIUM
Network 		getkirby kirby Kirby V2.5.12 is prone to a Persistent XSS attack via the Title of the "Site options" in the admin panel dashboard dropdown. CWE-79
Cross-site Scripting 		CVE-2018-16623 2024-11-21 12:53 2019-05-13 Show GitHub Exploit DB Packet Storm
246203 9.8 CRITICAL
Network 		xdmod open_xdmod An issue was discovered in Open XDMoD through 7.5.0. An authentication bypass (account takeover) exists due to a weak password reset mechanism. A brute-force attack against an MD5 rid value requires … CWE-640
 Weak Password Recovery Mechanism for Forgotten Password 		CVE-2018-16988 2024-11-21 12:53 2019-05-3 Show GitHub Exploit DB Packet Storm
246204 7.5 HIGH
Network 		buffalo open_xdmod An issue was discovered in Open XDMoD through 7.5.0. html/gui/general/dl_publication.php allows Path traversal via the file parameter, allowing remote attackers to read PDF files in arbitrary directo… CWE-22
Path Traversal 		CVE-2018-16961 2024-11-21 12:53 2019-05-3 Show GitHub Exploit DB Packet Storm
246205 6.1 MEDIUM
Network 		buffalo open_xdmod An issue was discovered in Open XDMoD through 7.5.0. html/gui/general/login.php has Reflected XSS via the xd_user_formal_name parameter. CWE-79
Cross-site Scripting 		CVE-2018-16960 2024-11-21 12:53 2019-05-3 Show GitHub Exploit DB Packet Storm
246206 6.1 MEDIUM
Network 		nih ncbi_toolbox An XSS vulnerability exists in wwwblast.c in the 2.0.7 through 2.2.26 legacy versions of the NCBI ToolBox via a crafted -z1 argument. CWE-79
Cross-site Scripting 		CVE-2018-16718 2024-11-21 12:53 2019-05-3 Show GitHub Exploit DB Packet Storm
246207 9.8 CRITICAL
Network 		nih ncbi_toolbox A heap-based buffer overflow exists in nph-viewgif.cgi in the 2.0.7 through 2.2.26 legacy versions of the NCBI ToolBox. CWE-787
 Out-of-bounds Write 		CVE-2018-16717 2024-11-21 12:53 2019-05-3 Show GitHub Exploit DB Packet Storm
246208 9.1 CRITICAL
Network 		nih ncbi_toolbox A path traversal vulnerability exists in viewcgi.c in the 2.0.7 through 2.2.26 legacy versions of the NCBI ToolBox, which may result in reading of arbitrary files (i.e., significant information discl… CWE-22
Path Traversal 		CVE-2018-16716 2024-11-21 12:53 2019-05-3 Show GitHub Exploit DB Packet Storm
246209 8.8 HIGH
Network 		imperva securesphere A command injection vulnerability in PWS in Imperva SecureSphere 13.0.0.10 and 13.1.0.10 Gateway allows an attacker with authenticated access to execute arbitrary OS commands on a vulnerable installa… CWE-78
OS Command  		CVE-2018-16660 2024-11-21 12:53 2019-04-26 Show GitHub Exploit DB Packet Storm
246210 7.7 HIGH
Network 		printeron printeron An XML external entity (XXE) vulnerability in PrinterOn version 4.1.4 and lower allows remote authenticated users to read arbitrary files or conduct server-side request forgery (SSRF) attacks via a c… CWE-611
XXE 		CVE-2018-17169 2024-11-21 12:53 2019-04-23 Show GitHub Exploit DB Packet Storm