Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 26, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
251301 4.3 警告 Dotclear - Dotclear におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-1039 2012-03-22 16:18 2012-03-19 Show GitHub Exploit DB Packet Storm
251302 4.3 警告 Oxwall - OxWall におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-0872 2012-03-22 16:17 2012-03-19 Show GitHub Exploit DB Packet Storm
251303 4.3 警告 SocialCMS - SocialCMS の ajax/commentajax.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-1781 2012-03-22 16:15 2012-03-19 Show GitHub Exploit DB Packet Storm
251304 7.5 危険 SocialCMS - SocialCMS の search.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2012-1780 2012-03-22 16:14 2012-03-19 Show GitHub Exploit DB Packet Storm
251305 9.3 危険 マイクロソフト - Microsoft Windows のリモートデスクトッププロトコルの実装における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2012-0002 2012-03-22 13:40 2012-03-13 Show GitHub Exploit DB Packet Storm
251306 9.3 危険 VideoLAN - VideoLAN VLC media player におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2012-1776 2012-03-21 16:50 2012-03-12 Show GitHub Exploit DB Packet Storm
251307 9.3 危険 VideoLAN - VideoLAN VLC media player におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2012-1775 2012-03-21 16:50 2012-03-12 Show GitHub Exploit DB Packet Storm
251308 10 危険 Gretech - Gretech GOM Media Player の Open URL 機能における脆弱性 CWE-noinfo
情報不足 		CVE-2012-1774 2012-03-21 16:38 2012-03-18 Show GitHub Exploit DB Packet Storm
251309 9.3 危険 Gretech - Gretech GOM Media Player における任意のコードを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2012-1264 2012-03-21 16:37 2012-03-18 Show GitHub Exploit DB Packet Storm
251310 6.8 警告 シマンテック - Symantec Altiris WISE Package Studio における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2012-0293 2012-03-21 16:35 2012-03-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 27, 2026, 4:52 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
247851 4.3 MEDIUM
Network 		apache geode When a cluster is operating in secure mode, a user with read privileges for specific data regions can use the gfsh command line utility to execute queries. In Apache Geode before 1.2.1, the query res… CWE-200
Information Exposure 		CVE-2017-9794 2024-11-21 12:36 2017-09-30 Show GitHub Exploit DB Packet Storm
247852 7.5 HIGH
Network 		apache mesos When handling a libprocess message wrapped in an HTTP request, libprocess in Apache Mesos before 1.1.3, 1.2.x before 1.2.2, 1.3.x before 1.3.1, and 1.4.0-dev crashes if the request path is empty, bec… CWE-416
 Use After Free 		CVE-2017-9790 2024-11-21 12:36 2017-09-29 Show GitHub Exploit DB Packet Storm
247853 6.1 MEDIUM
Network 		mahara mahara Mahara 15.04 before 15.04.14 and 16.04 before 16.04.8 and 16.10 before 16.10.5 and 17.04 before 17.04.3 are vulnerable to a user submitting potential dangerous payload, e.g. XSS code, to be saved as … CWE-79
Cross-site Scripting 		CVE-2017-9551 2024-11-21 12:36 2017-09-26 Show GitHub Exploit DB Packet Storm
247854 9.8 CRITICAL
Network 		ca identity_manager_virtual_appliance
identity_manager 		CA Identity Manager r12.6 to r12.6 SP8, 14.0, and 14.1 allows remote attackers to potentially identify passwords of locked accounts through an exhaustive search. CWE-200
Information Exposure 		CVE-2017-9393 2024-11-21 12:36 2017-09-22 Show GitHub Exploit DB Packet Storm
247855 7.8 HIGH
Local 		google android In all Qualcomm products with Android releases from CAF using the Linux kernel, during DMA allocation, due to wrong data type of size, allocation size gets truncated which makes allocation succeed wh… CWE-682
 Incorrect Calculation 		CVE-2017-9725 2024-11-21 12:36 2017-09-22 Show GitHub Exploit DB Packet Storm
247856 7.8 HIGH
Local 		google android In all Qualcomm products with Android releases from CAF using the Linux kernel, user-level permissions can be used to gain access to kernel memory, specifically the ION cache maintenance code is writ… CWE-269
 Improper Privilege Management 		CVE-2017-9724 2024-11-21 12:36 2017-09-22 Show GitHub Exploit DB Packet Storm
247857 7.8 HIGH
Local 		google android In all Qualcomm products with Android releases from CAF using the Linux kernel, due to an off-by-one error in a camera driver, an out-of-bounds read/write can occur. CWE-193
 Off-by-one Error 		CVE-2017-9720 2024-11-21 12:36 2017-09-22 Show GitHub Exploit DB Packet Storm
247858 7.8 HIGH
Local 		google android In all Qualcomm products with Android releases from CAF using the Linux kernel, in function msm_compr_ioctl_shared, variable "ddp->params_length" could be accessed and modified by multiple threads, w… CWE-119
CWE-362
Incorrect Access of Indexable Resource ('Range Error') 
Race Condition 		CVE-2017-9677 2024-11-21 12:36 2017-09-22 Show GitHub Exploit DB Packet Storm
247859 4.7 MEDIUM
Local 		google android In all Qualcomm products with Android releases from CAF using the Linux kernel, potential use after free scenarios and race conditions can occur when accessing global static variables without using a… CWE-200
CWE-362
CWE-416
Information Exposure
Race Condition
 Use After Free 		CVE-2017-9676 2024-11-21 12:36 2017-09-22 Show GitHub Exploit DB Packet Storm
247860 7.5 HIGH
Network 		apache struts In Apache Struts 2.3.7 through 2.3.33 and 2.5 through 2.5.12, if an application allows entering a URL in a form field and built-in URLValidator is used, it is possible to prepare a special URL which … CWE-20
 Improper Input Validation  		CVE-2017-9804 2024-11-21 12:36 2017-09-21 Show GitHub Exploit DB Packet Storm