Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 20, 2026, 4 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
254561 4.3 警告 4homepages - 4images の admin/categories.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-1021 2012-02-10 10:35 2012-02-8 Show GitHub Exploit DB Packet Storm
254562 4.3 警告 Overseas - NexorONE Online Banking の login.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-1020 2012-02-10 10:29 2012-02-8 Show GitHub Exploit DB Packet Storm
254563 4.3 警告 XWiki - XWiki Enterprise におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-1019 2012-02-10 10:16 2012-02-8 Show GitHub Exploit DB Packet Storm
254564 4.3 警告 D-Mack Media - Joomla! 用 D-Mack Media Currency Converter モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-1018 2012-02-10 10:15 2012-02-8 Show GitHub Exploit DB Packet Storm
254565 7.5 危険 Secure Ideas - Basic Analysis and Security Engine の base_qry_main.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2012-1017 2012-02-10 10:14 2012-02-8 Show GitHub Exploit DB Packet Storm
254566 4.3 警告 ]project-open[ - Project Open にクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-1027 2012-02-9 18:34 2012-02-6 Show GitHub Exploit DB Packet Storm
254567 4.3 警告 Sphinx Software - Sphinx Software Mobile Web Server におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-1005 2012-02-9 16:52 2012-02-7 Show GitHub Exploit DB Packet Storm
254568 7.5 危険 Hudong - HDWiki の attachement.php における任意のコードを実行される脆弱性 CWE-Other
その他
CVE-2011-5077 2012-02-9 16:01 2012-02-8 Show GitHub Exploit DB Packet Storm
254569 7.5 危険 Hudong - HDWiki の model/comment.class.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2011-5076 2012-02-9 16:00 2012-02-8 Show GitHub Exploit DB Packet Storm
254570 7.5 危険 Likno Software Inc. - WordPress 用 AllWebMenus プラグインの actions.php における任意の PHP コードを実行される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-1011 2012-02-9 15:59 2012-02-7 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 20, 2026, 4:01 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
246271 8.8 HIGH
Network
verint quality_management_platform
collaboration_compliance
Verba Collaboration Compliance and Quality Management Platform before 9.2.1.5545 has Insecure Permissions. CWE-732
 Incorrect Permission Assignment for Critical Resource
CVE-2018-17872 2024-11-21 12:55 2018-10-5 Show GitHub Exploit DB Packet Storm
246272 6.5 MEDIUM
Network
verint verba_collaboration_compliance_and_quality_management_platform Verba Collaboration Compliance and Quality Management Platform before 9.2.1.5545 has Incorrect Access Control. CWE-522
 Insufficiently Protected Credentials
CVE-2018-17871 2024-11-21 12:55 2018-10-5 Show GitHub Exploit DB Packet Storm
246273 5.5 MEDIUM
Local
broadcom tcpreplay An issue was discovered in Tcpreplay 4.3.0 beta1. A heap-based buffer over-read was triggered in the function dlt_en10mb_encode() of the file plugins/dlt_en10mb/en10mb.c, due to inappropriate values … CWE-125
Out-of-bounds Read
CVE-2018-17974 2024-11-21 12:55 2018-10-4 Show GitHub Exploit DB Packet Storm
246274 9.8 CRITICAL
Network
d-link dir-823g_firmware On D-Link DIR-823G 2018-09-19 devices, the GoAhead configuration allows /HNAP1 SetPasswdSettings commands without authentication to trigger an admin password change. CWE-640
 Weak Password Recovery Mechanism for Forgotten Password
CVE-2018-17881 2024-11-21 12:55 2018-10-4 Show GitHub Exploit DB Packet Storm
246275 7.5 HIGH
Network
d-link dir-823g_firmware On D-Link DIR-823G 2018-09-19 devices, the GoAhead configuration allows /HNAP1 RunReboot commands without authentication to trigger a reboot. CWE-306
Missing Authentication for Critical Function
CVE-2018-17880 2024-11-21 12:55 2018-10-4 Show GitHub Exploit DB Packet Storm
246276 9.8 CRITICAL
Network
samsung scx-6545x_firmware Samsung SCX-6545X V2.00.03.01 03-23-2012 devices allows remote attackers to discover cleartext credentials via iso.3.6.1.4.1.236.11.5.11.81.10.1.5.0 and iso.3.6.1.4.1.236.11.5.11.81.10.1.6.0 SNMP req… CWE-522
 Insufficiently Protected Credentials
CVE-2018-17969 2024-11-21 12:55 2018-10-4 Show GitHub Exploit DB Packet Storm
246277 6.5 MEDIUM
Network
imagemagick imagemagick ImageMagick 7.0.7-28 has a memory leak vulnerability in ReadBGRImage in coders/bgr.c. CWE-772
 Missing Release of Resource after Effective Lifetime
CVE-2018-17967 2024-11-21 12:55 2018-10-4 Show GitHub Exploit DB Packet Storm
246278 6.5 MEDIUM
Network
imagemagick imagemagick ImageMagick 7.0.7-28 has a memory leak vulnerability in WritePDBImage in coders/pdb.c. CWE-772
 Missing Release of Resource after Effective Lifetime
CVE-2018-17966 2024-11-21 12:55 2018-10-4 Show GitHub Exploit DB Packet Storm
246279 6.5 MEDIUM
Network
imagemagick imagemagick ImageMagick 7.0.7-28 has a memory leak vulnerability in WriteSGIImage in coders/sgi.c. CWE-772
 Missing Release of Resource after Effective Lifetime
CVE-2018-17965 2024-11-21 12:55 2018-10-4 Show GitHub Exploit DB Packet Storm
246280 6.1 MEDIUM
Network
atmist snazzy_maps The Snazzy Maps plugin before 1.1.5 for WordPress has XSS via the text or tab parameter. CWE-79
Cross-site Scripting
CVE-2018-17947 2024-11-21 12:55 2018-10-3 Show GitHub Exploit DB Packet Storm