Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 10, 2026, 4:07 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
250861 9.3 危険 シスコシステムズ - Cisco WebEx Recording Format (WRF) Player におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2012-1337 2012-04-6 15:41 2012-04-4 Show GitHub Exploit DB Packet Storm
250862 9.3 危険 シスコシステムズ - Cisco WebEx Recording Format (WRF) Player におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2012-1336 2012-04-6 15:41 2012-04-4 Show GitHub Exploit DB Packet Storm
250863 9.3 危険 シスコシステムズ - Cisco WebEx Recording Format (WRF) Player におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2012-1335 2012-04-6 15:40 2012-04-4 Show GitHub Exploit DB Packet Storm
250864 5.8 警告 株式会社アイシーズ - せん茶SNS におけるセッション固定の脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-1238 2012-04-5 14:03 2012-04-5 Show GitHub Exploit DB Packet Storm
250865 2.6 注意 株式会社アイシーズ - せん茶SNS におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2012-1237 2012-04-5 14:02 2012-04-5 Show GitHub Exploit DB Packet Storm
250866 6.4 警告 東芝テック - 東芝テック製 e-Studio シリーズにおける認証回避の脆弱性 CWE-287
不適切な認証 		CVE-2012-1239 2012-04-5 14:01 2012-04-5 Show GitHub Exploit DB Packet Storm
250867 6.8 警告 Scadatec Limited
TurboPower Abbrevia		 - TurboPower Abbrevia におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2011-4535 2012-04-4 16:46 2011-12-28 Show GitHub Exploit DB Packet Storm
250868 4.3 警告 ARC Informatique - 複数の ARC Informatique 製品の ActiveX コントロールにおけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2011-4045 2012-04-4 16:44 2011-09-28 Show GitHub Exploit DB Packet Storm
250869 5.8 警告 ARC Informatique - 複数の ARC Informatique 製品の ActiveX コントロールにおけるファイルを変更される脆弱性 CWE-noinfo
情報不足 		CVE-2011-4044 2012-04-4 16:40 2011-09-28 Show GitHub Exploit DB Packet Storm
250870 9.3 危険 ARC Informatique - 複数の ARC Informatique 製品の ActiveX コントロールにおける整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2011-4043 2012-04-4 16:40 2011-09-28 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 10, 2026, 5 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
255401 5.5 MEDIUM
Local 		libimobiledevice libplist The parse_dict_node function in bplist.c in libplist allows attackers to cause a denial of service (out-of-bounds heap read and crash) via a crafted file. CWE-125
Out-of-bounds Read 		CVE-2017-5834 2024-11-21 12:28 2017-03-4 Show GitHub Exploit DB Packet Storm
255402 6.1 MEDIUM
Network 		revive-adserver revive_adserver Cross-site scripting (XSS) vulnerability in the invocation code generation for interstitial zones in Revive Adserver before 4.0.1 allows remote attackers to inject arbitrary web script or HTML via un… CWE-79
Cross-site Scripting 		CVE-2017-5833 2024-11-21 12:28 2017-03-4 Show GitHub Exploit DB Packet Storm
255403 5.4 MEDIUM
Network 		revive-adserver revive_adserver Cross-site scripting (XSS) vulnerability in Revive Adserver before 4.0.1 allows remote authenticated users to inject arbitrary web script or HTML via the user's email address. CWE-79
Cross-site Scripting 		CVE-2017-5832 2024-11-21 12:28 2017-03-4 Show GitHub Exploit DB Packet Storm
255404 5.9 MEDIUM
Network 		revive-adserver revive_adserver Session fixation vulnerability in the forgot password mechanism in Revive Adserver before 4.0.1, when setting a new password, allows remote attackers to hijack web sessions via the session ID. CWE-384
 Session Fixation 		CVE-2017-5831 2024-11-21 12:28 2017-03-4 Show GitHub Exploit DB Packet Storm
255405 9.8 CRITICAL
Network 		revive-adserver revive_adserver Revive Adserver before 4.0.1 allows remote attackers to execute arbitrary code via serialized data in the cookies related to the delivery scripts. CWE-502
 Deserialization of Untrusted Data 		CVE-2017-5830 2024-11-21 12:28 2017-03-4 Show GitHub Exploit DB Packet Storm
255406 6.1 MEDIUM
Network 		cpanel cgiecho
cgiemail 		Cross-site scripting (XSS) vulnerability in cgiemail and cgiecho allows remote attackers to inject arbitrary web script or HTML via the addendum parameter. CWE-79
Cross-site Scripting 		CVE-2017-5616 2024-11-21 12:28 2017-03-4 Show GitHub Exploit DB Packet Storm
255407 6.1 MEDIUM
Network 		cpanel cgiecho
cgiemail 		cgiemail and cgiecho allow remote attackers to inject HTTP headers via a newline character in the redirect location. CWE-601
Open Redirect 		CVE-2017-5615 2024-11-21 12:28 2017-03-4 Show GitHub Exploit DB Packet Storm
255408 6.1 MEDIUM
Network 		cpanel cpanel Open redirect vulnerability in cgiemail and cgiecho allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via vectors involving the (1) success or (2) failure … CWE-601
Open Redirect 		CVE-2017-5614 2024-11-21 12:28 2017-03-4 Show GitHub Exploit DB Packet Storm
255409 7.8 HIGH
Local 		cpanel cgiecho
cgiemail 		Format string vulnerability in cgiemail and cgiecho allows remote attackers to execute arbitrary code via format string specifiers in a template file. CWE-134
Use of Externally-Controlled Format String 		CVE-2017-5613 2024-11-21 12:28 2017-03-4 Show GitHub Exploit DB Packet Storm
255410 7.5 HIGH
Network 		netapp ontap_select_deploy_administration_utility The NetApp ONTAP Select Deploy administration utility 2.0 through 2.2.1 might allow remote attackers to obtain sensitive information via unspecified vectors. CWE-200
Information Exposure 		CVE-2017-5995 2024-11-21 12:28 2017-03-2 Show GitHub Exploit DB Packet Storm