Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 18, 2026, 4:01 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
255371 7.8 危険 サイバートラスト株式会社
Avahi
レッドハット
- Avahi の originates_from_local_legacy_unicast_socket 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2009-0758 2010-08-10 18:49 2009-03-3 Show GitHub Exploit DB Packet Storm
255372 6.8 警告 サン・マイクロシステムズ
68k.org
- audiofile の msadpcm.c におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2008-5824 2010-08-10 18:49 2009-01-2 Show GitHub Exploit DB Packet Storm
255373 2.4 注意 オラクル - Oracle Sun Java System Application Server および Oracle GlassFish Enterprise Server の GUI における脆弱性 CWE-noinfo
情報不足
CVE-2010-2397 2010-08-9 16:49 2010-07-13 Show GitHub Exploit DB Packet Storm
255374 3 注意 オラクル - Oracle Solaris Studio における脆弱性 CWE-noinfo
情報不足
CVE-2010-2374 2010-08-9 16:49 2010-07-13 Show GitHub Exploit DB Packet Storm
255375 4.3 警告 オラクル - Oracle OpenSSO Enterprise における脆弱性 CWE-noinfo
情報不足
CVE-2009-3762 2010-08-9 16:49 2010-07-13 Show GitHub Exploit DB Packet Storm
255376 4.3 警告 オラクル - Oracle OpenSSO Enterprise の OpenSSO コンポーネントにおける脆弱性 CWE-noinfo
情報不足
CVE-2009-3764 2010-08-9 16:48 2010-07-13 Show GitHub Exploit DB Packet Storm
255377 4.3 警告 オラクル - Oracle OpenSSO Enterprise の Access Manager / OpenSSO コンポーネントにおける脆弱性 CWE-noinfo
情報不足
CVE-2009-3763 2010-08-9 16:48 2010-07-13 Show GitHub Exploit DB Packet Storm
255378 5 警告 オラクル - Oracle Sun Convergence における脆弱性 CWE-noinfo
情報不足
CVE-2010-0914 2010-08-9 16:48 2010-07-13 Show GitHub Exploit DB Packet Storm
255379 5.8 警告 オラクル - Oracle Sun Java System Web Proxy Server の管理サーバにおける脆弱性 CWE-noinfo
情報不足
CVE-2010-2385 2010-08-9 16:48 2010-07-13 Show GitHub Exploit DB Packet Storm
255380 2.1 注意 オラクル - Oracle PeopleSoft and JDEdwards Suite の PeopleSoft Enterprise Campus Solutions コンポーネントにおける脆弱性 CWE-noinfo
情報不足
CVE-2010-2403 2010-08-6 18:29 2010-07-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 18, 2026, 4:12 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
294541 - itechscripts proman_xpress Cross-site scripting (XSS) vulnerability in client_details.php in Proman Xpress 5.0.1 allows remote attackers to inject arbitrary web script or HTML via the cl_comments parameter. NOTE: some of thes… CWE-79
Cross-site Scripting
CVE-2012-4266 2024-11-21 10:42 2012-08-14 Show GitHub Exploit DB Packet Storm
294542 - itechscripts proman_xpress SQL injection vulnerability in category_edit.php in Proman Xpress 5.0.1 allows remote attackers to execute arbitrary SQL commands via the cid parameter. CWE-89
SQL Injection
CVE-2012-4265 2024-11-21 10:42 2012-08-14 Show GitHub Exploit DB Packet Storm
294543 - bit51 better-wp-security Multiple cross-site scripting (XSS) vulnerabilities in the Better WP Security (better_wp_security) plugin before 3.2.5 for WordPress allow remote attackers to inject arbitrary web script or HTML via … CWE-79
Cross-site Scripting
CVE-2012-4264 2024-11-21 10:42 2012-08-14 Show GitHub Exploit DB Packet Storm
294544 - bit51 better-wp-security Cross-site scripting (XSS) vulnerability in inc/admin/content.php in the Better WP Security (better_wp_security) plugin before 3.2.5 for WordPress allows remote attackers to inject arbitrary web scri… CWE-79
Cross-site Scripting
CVE-2012-4263 2024-11-21 10:42 2012-08-14 Show GitHub Exploit DB Packet Storm
294545 - hccgmbh mycare2x Multiple cross-site scripting (XSS) vulnerabilities in myCare2x allow remote attackers to inject arbitrary web script or HTML via the (1) name_last, (2) name_first, (3) name_middle, or (4) name_maide… CWE-79
Cross-site Scripting
CVE-2012-4262 2024-11-21 10:42 2012-08-14 Show GitHub Exploit DB Packet Storm
294546 - hccgmbh mycare2x SQL injection vulnerability in modules/patient/mycare2x_pat_info.php in myCare2x allows remote attackers to execute arbitrary SQL commands via the lang parameter. CWE-89
SQL Injection
CVE-2012-4261 2024-11-21 10:42 2012-08-14 Show GitHub Exploit DB Packet Storm
294547 - hccgmbh mycare2x Multiple SQL injection vulnerabilities in myCare2x allow remote attackers to execute arbitrary SQL commands via the (1) aktion or (2) callurl parameter to modules/patient/mycare2x_pat_info.php; (3) d… CWE-89
SQL Injection
CVE-2012-4260 2024-11-21 10:42 2012-08-14 Show GitHub Exploit DB Packet Storm
294548 - c4b xphone_unified_communications_2011 Cross-site scripting (XSS) vulnerability in the contacts in (1) XPhone UC Web and the (2) web frontend for XPhone Virtual Directory in C4B XPhone Unified Communications (UC) 2011 Web 4.1.890S R1 allo… CWE-79
Cross-site Scripting
CVE-2012-4259 2024-11-21 10:42 2012-08-14 Show GitHub Exploit DB Packet Storm
294549 - myrephp myre_real_estate_software Multiple SQL injection vulnerabilities in MYRE Real Estate Software (2012 Q2) allow remote attackers to execute arbitrary SQL commands via the (1) link_idd parameter to 1_mobile/listings.php or (2) u… CWE-89
SQL Injection
CVE-2012-4258 2024-11-21 10:42 2012-08-14 Show GitHub Exploit DB Packet Storm
294550 - george_karpouzas yet_another_question_\&_answer_system Yaqas (Yet Another Question & Answer System) 1.0 Alpha 1 allows remote attackers to obtain sensitive information via an invalid character in the PHPSESSID, which reveals the installation path in an e… CWE-200
Information Exposure
CVE-2012-4257 2024-11-21 10:42 2012-08-14 Show GitHub Exploit DB Packet Storm