Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 26, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
251271	4	警告	IBM	-	IBM DB2 の XML 機能におけるサービス運用妨害 (無限ループ) の脆弱性	CWE-399 リソース管理の問題	CVE-2012-0712	2012-03-23 13:29	2012-02-13	Show	GitHub Exploit DB Packet Storm

251272	7.5	危険	IBM	-	IBM DB2 の DB2 Administration Server 内の db2dasrrm プロセスにおける整数符号エラーの脆弱性	CWE-189 数値処理の問題	CVE-2012-0711	2012-03-23 11:49	2012-01-19	Show	GitHub Exploit DB Packet Storm

251273	5	警告	IBM	-	IBM DB2 におけるサービス運用妨害 (デーモンクラッシュ) の脆弱性	CWE-20 不適切な入力確認	CVE-2012-0710	2012-03-23 11:47	2011-06-10	Show	GitHub Exploit DB Packet Storm

251274	6.3	警告	RSAセキュリティ	-	EMC RSA enVision におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2012-0403	2012-03-23 11:38	2012-03-20	Show	GitHub Exploit DB Packet Storm

251275	9.3	危険	RSAセキュリティ	-	EMC RSA enVision におけるアクセス権を取得される脆弱性	CWE-255 証明書・パスワード管理	CVE-2012-0402	2012-03-23 11:36	2012-03-20	Show	GitHub Exploit DB Packet Storm

251276	6.5	警告	RSAセキュリティ	-	EMC RSA enVision における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2012-0401	2012-03-23 11:28	2012-03-20	Show	GitHub Exploit DB Packet Storm

251277	7.9	危険	RSAセキュリティ	-	EMC RSA enVision におけるアクセス権を取得される脆弱性	CWE-287 不適切な認証	CVE-2012-0400	2012-03-23 11:26	2012-03-20	Show	GitHub Exploit DB Packet Storm

251278	4.3	警告	RSAセキュリティ	-	EMC RSA enVision におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-0399	2012-03-23 11:24	2012-03-20	Show	GitHub Exploit DB Packet Storm

251279	3.6	注意	Bdale Garbee	-	as31 におけるファイルを生成または削除される脆弱性	CWE-59 リンク解釈の問題	CVE-2012-0808	2012-03-22 18:35	2012-03-19	Show	GitHub Exploit DB Packet Storm

251280	5	警告	kylegilman	-	WordPress 用 Video Embed & Thumbnail Generator プラグインにおけるインストールパスを取得される脆弱性	CWE-200 情報漏えい	CVE-2012-1786	2012-03-22 17:48	2012-03-19	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 26, 2026, 4:05 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
257841	4.7	MEDIUM Local	x.org debian	xorg-server debian_linux	In X.Org Server (aka xserver and xorg-server) before 1.19.4, an attacker authenticated to an X server with the X shared memory extension enabled can cause aborts of the X server or replace shared mem…	CWE-269 Improper Privilege Management	CVE-2017-13721	2024-11-21 12:11	2017-10-10	Show	GitHub Exploit DB Packet Storm

257842	7.5	HIGH Network	loytec	lvis-3me_firmware	An Insufficiently Protected Credentials issue was discovered in LOYTEC LVIS-3ME versions prior to 6.2.0. The application does not sufficiently protect sensitive information from unauthorized access.	CWE-522 Insufficiently Protected Credentials	CVE-2017-13998	2024-11-21 12:11	2017-10-6	Show	GitHub Exploit DB Packet Storm

257843	8.8	HIGH Network	loytec	lvis-3me_firmware	A Relative Path Traversal issue was discovered in LOYTEC LVIS-3ME versions prior to 6.2.0. The web user interface fails to prevent access to critical files that non administrative users should not ha…	CWE-22 Path Traversal	CVE-2017-13996	2024-11-21 12:11	2017-10-6	Show	GitHub Exploit DB Packet Storm

257844	6.1	MEDIUM Network	loytec	lvis-3me_firmware	A Cross-site Scripting issue was discovered in LOYTEC LVIS-3ME versions prior to 6.2.0. The web interface lacks proper web request validation, which could allow XSS attacks to occur if an authenticat…	CWE-79 Cross-site Scripting	CVE-2017-13994	2024-11-21 12:11	2017-10-6	Show	GitHub Exploit DB Packet Storm

257845	8.1	HIGH Network	loytec	lvis-3me_firmware	An Insufficient Entropy issue was discovered in LOYTEC LVIS-3ME versions prior to 6.2.0. The application does not utilize sufficiently random number generation for the web interface authentication me…	CWE-331 Insufficient Entropy	CVE-2017-13992	2024-11-21 12:11	2017-10-6	Show	GitHub Exploit DB Packet Storm

257846	9.4	CRITICAL Network	ctekproducts	skyrouter_z4200_firmware skyrouter_z4400_firmware	An Improper Authentication issue was discovered in Ctek SkyRouter Series 4200 and 4400, all versions prior to V6.00.11. By accessing a specific uniform resource locator (URL) on the web server, a mal…	CWE-287 Improper Authentication	CVE-2017-14000	2024-11-21 12:11	2017-10-5	Show	GitHub Exploit DB Packet Storm

257847	10.0	CRITICAL Network	spidercontrol	ininet_webserver	An Improper Authentication issue was discovered in iniNet Solutions iniNet Webserver, all versions prior to V2.02.0100. The webserver does not properly authenticate users, which may allow a malicious…	CWE-287 Improper Authentication	CVE-2017-13995	2024-11-21 12:11	2017-10-5	Show	GitHub Exploit DB Packet Storm

257848	7.8	HIGH Local	i-sens	smartlog_diabetes_management_software	An Uncontrolled Search Path or Element issue was discovered in i-SENS SmartLog Diabetes Management Software, Version 2.4.0 and prior versions. An uncontrolled search path element vulnerability has be…	CWE-427 Uncontrolled Search Path Element	CVE-2017-13993	2024-11-21 12:11	2017-10-5	Show	GitHub Exploit DB Packet Storm

257849	7.5	HIGH Network	redhat debian novell canonical fedoraproject thekelleys	enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server debian_linux leap ubuntu_linux fedora dnsmasq	In dnsmasq before 2.78, if the DNS packet size does not match the expected size, the size parameter in a memset call gets a negative value. As it is an unsigned value, memset ends up writing up to 0x…	CWE-20 Improper Input Validation	CVE-2017-13704	2024-11-21 12:11	2017-10-3	Show	GitHub Exploit DB Packet Storm

257850	9.8	CRITICAL Network	schneider-electric	wonderware_intouch wonderware_indusoft_web_studio	A Missing Authentication for Critical Function issue was discovered in Schneider Electric InduSoft Web Studio v8.0 SP2 or prior, and InTouch Machine Edition v8.0 SP2 or prior. InduSoft Web Studio pro…	CWE-306 Missing Authentication for Critical Function	CVE-2017-13997	2024-11-21 12:11	2017-10-3	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed