Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228971 6.5 警告 ATutor - ATutor AContent の user/index_inline_editor_submit.php における任意のユーザパスワードを変更される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-5454 2012-10-24 16:42 2012-10-22 Show GitHub Exploit DB Packet Storm
228972 6.5 警告 ATutor - ATutor AContent の user/index_inline_editor_submit.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2012-5453 2012-10-24 16:42 2012-10-22 Show GitHub Exploit DB Packet Storm
228973 4.3 警告 Intelliants - Subrion CMS におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-5452 2012-10-24 16:41 2012-10-22 Show GitHub Exploit DB Packet Storm
228974 4.3 警告 ATutor - ATutor AContent の file_manager/preview_top.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-5169 2012-10-24 16:41 2012-10-12 Show GitHub Exploit DB Packet Storm
228975 7.5 危険 ATutor - ATutor AContent における任意のユーザのパスワードまたはカテゴリ名を変更される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-5168 2012-10-24 16:40 2012-10-12 Show GitHub Exploit DB Packet Storm
228976 7.5 危険 ATutor - ATutor AContent における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2012-5167 2012-10-24 16:39 2012-10-12 Show GitHub Exploit DB Packet Storm
228977 7.5 危険 OpenX - OpenX の admin/campaign-zone-link.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2012-4990 2012-10-24 16:39 2012-10-22 Show GitHub Exploit DB Packet Storm
228978 4.3 警告 OpenX - OpenX の admin/plugin-index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-4989 2012-10-24 16:38 2012-10-22 Show GitHub Exploit DB Packet Storm
228979 6.8 警告 Intelliants - Subrion CMS におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2012-4773 2012-10-24 16:37 2012-10-22 Show GitHub Exploit DB Packet Storm
228980 7.5 危険 Intelliants - Subrion CMS の register/ における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2012-4772 2012-10-24 16:37 2012-10-22 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 25, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
198811 8.8 HIGH
Network 		cisco unified_customer_voice_portal A vulnerability in the Operations, Administration, Maintenance, and Provisioning (OAMP) credential reset functionality for Cisco Unified Customer Voice Portal (CVP) could allow an authenticated, remo… CWE-20
 Improper Input Validation  		CVE-2017-12214 2024-11-21 12:09 2017-09-21 Show GitHub Exploit DB Packet Storm
198812 9.8 CRITICAL
Network 		apache struts In Apache Struts 2.0.0 through 2.3.33 and 2.5 through 2.5.10.1, using an unintentional expression in a Freemarker tag instead of string literals can lead to a RCE attack. CWE-20
 Improper Input Validation  		CVE-2017-12611 2024-11-21 12:09 2017-09-21 Show GitHub Exploit DB Packet Storm
198813 7.5 HIGH
Network 		apache tomcat When using a VirtualDirContext with Apache Tomcat 7.0.0 to 7.0.80 it was possible to bypass security constraints and/or view the source code of JSPs for resources served by the VirtualDirContext usin… CWE-200
Information Exposure 		CVE-2017-12616 2024-11-21 12:09 2017-09-19 Show GitHub Exploit DB Packet Storm
198814 8.1 HIGH
Network 		apache
netapp
redhat 		tomcat
oncommand_balance
oncommand_shift
7-mode_transition_tool
enterprise_linux_desktop
enterprise_linux_workstation
enterprise_linux_for_scientific_computing
enterprise_linux_s… 		When running Apache Tomcat 7.0.0 to 7.0.79 on Windows with HTTP PUTs enabled (e.g. via setting the readonly initialisation parameter of the Default to false) it was possible to upload a JSP file to t… CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2017-12615 2024-11-21 12:09 2017-09-19 Show GitHub Exploit DB Packet Storm
198815 9.1 CRITICAL
Network 		cisco meeting_server A vulnerability in the Traversal Using Relay NAT (TURN) server included with Cisco Meeting Server (CMS) could allow an authenticated, remote attacker to gain unauthenticated or unauthorized access to… CWE-668
 Exposure of Resource to Wrong Sphere 		CVE-2017-12249 2024-11-21 12:09 2017-09-14 Show GitHub Exploit DB Packet Storm
198816 7.8 HIGH
Local 		apache spark In Apache Spark 1.6.0 until 2.1.1, the launcher API performs unsafe deserialization of data received by its socket. This makes applications launched programmatically using the launcher API potentiall… CWE-502
 Deserialization of Untrusted Data 		CVE-2017-12612 2024-11-21 12:09 2017-09-14 Show GitHub Exploit DB Packet Storm
198817 5.4 MEDIUM
Network 		cisco emergency_responder A vulnerability in the SQL database interface for Cisco Emergency Responder could allow an authenticated, remote attacker to conduct a blind SQL injection attack. The vulnerability is due to a failur… CWE-89
SQL Injection 		CVE-2017-12227 2024-11-21 12:09 2017-09-8 Show GitHub Exploit DB Packet Storm
198818 6.5 MEDIUM
Network 		cisco prime_lan_management_solution A vulnerability in the web functionality of the Cisco Prime LAN Management Solution could allow an authenticated, remote attacker to hijack another user's administrative session, aka a Session Fixati… CWE-384
 Session Fixation 		CVE-2017-12225 2024-11-21 12:09 2017-09-8 Show GitHub Exploit DB Packet Storm
198819 6.5 MEDIUM
Network 		cisco meeting_server A vulnerability in the ability for guest users to join meetings via a hyperlink with Cisco Meeting Server could allow an authenticated, remote attacker to enter a meeting with a hyperlink URL, even t… CWE-200
Information Exposure 		CVE-2017-12224 2024-11-21 12:09 2017-09-8 Show GitHub Exploit DB Packet Storm
198820 6.4 MEDIUM
Physics 		cisco ir800_integrated_services_router_firmware A vulnerability in the ROM Monitor (ROMMON) code of Cisco IR800 Integrated Services Router Software could allow an unauthenticated, local attacker to boot an unsigned Hypervisor on an affected device… CWE-20
 Improper Input Validation  		CVE-2017-12223 2024-11-21 12:09 2017-09-8 Show GitHub Exploit DB Packet Storm