Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 28, 2026, 10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
251311 9.3 危険 VideoLAN - VideoLAN VLC media player におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2012-1776 2012-03-21 16:50 2012-03-12 Show GitHub Exploit DB Packet Storm
251312 9.3 危険 VideoLAN - VideoLAN VLC media player におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2012-1775 2012-03-21 16:50 2012-03-12 Show GitHub Exploit DB Packet Storm
251313 10 危険 Gretech - Gretech GOM Media Player の Open URL 機能における脆弱性 CWE-noinfo
情報不足
CVE-2012-1774 2012-03-21 16:38 2012-03-18 Show GitHub Exploit DB Packet Storm
251314 9.3 危険 Gretech - Gretech GOM Media Player における任意のコードを実行される脆弱性 CWE-noinfo
情報不足
CVE-2012-1264 2012-03-21 16:37 2012-03-18 Show GitHub Exploit DB Packet Storm
251315 6.8 警告 シマンテック - Symantec Altiris WISE Package Studio における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2012-0293 2012-03-21 16:35 2012-03-14 Show GitHub Exploit DB Packet Storm
251316 6.8 警告 VMware - VMware vShield Manager におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2012-1514 2012-03-21 16:35 2012-03-15 Show GitHub Exploit DB Packet Storm
251317 4 警告 VMware - VMware vCenter Orchestrator の Web Configuration tool における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2012-1513 2012-03-21 16:34 2012-03-15 Show GitHub Exploit DB Packet Storm
251318 4.3 警告 VMware - VMware vSphere の vSphere Client にある内部ブラウザにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-1512 2012-03-21 16:33 2012-03-15 Show GitHub Exploit DB Packet Storm
251319 4.3 警告 VMware - VMware View の View Manager Portal におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-1511 2012-03-21 16:31 2012-03-15 Show GitHub Exploit DB Packet Storm
251320 7.2 危険 VMware - 複数の VMware 製品の WDDM ディスプレイドライバにおけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2012-1510 2012-03-21 16:30 2012-03-15 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
257341 7.5 HIGH
Network
http-proxy_project http-proxy Http-proxy is a proxying library. Because of the way errors are handled in versions before 0.7.0, an attacker that forces an error can crash the server, causing a denial of service. CWE-388
 7PK - Errors
CVE-2017-16014 2024-11-21 12:15 2018-06-5 Show GitHub Exploit DB Packet Storm
257342 7.5 HIGH
Network
hapijs hapi hapi is a web and services application framework. When hapi >= 15.0.0 <= 16.1.0 encounters a malformed `accept-encoding` header an uncaught exception is thrown. This may cause hapi to crash or to han… CWE-20
 Improper Input Validation 
CVE-2017-16013 2024-11-21 12:15 2018-06-5 Show GitHub Exploit DB Packet Storm
257343 6.1 MEDIUM
Network
ag-grid ag-grid ag-grid is an advanced data grid that is library agnostic. ag-grid is vulnerable to Cross-site Scripting (XSS) via Angular Expressions, if AngularJS is used in combination with ag-grid. CWE-79
Cross-site Scripting
CVE-2017-16009 2024-11-21 12:15 2018-06-5 Show GitHub Exploit DB Packet Storm
257344 6.1 MEDIUM
Network
i18next i18next i18next is a language translation framework. Because of how the interpolation is implemented, making replacements from the dictionary one at a time, untrusted user input can use the name of one of th… CWE-79
Cross-site Scripting
CVE-2017-16008 2024-11-21 12:15 2018-06-5 Show GitHub Exploit DB Packet Storm
257345 5.9 MEDIUM
Network
cisco node-jose node-jose is a JavaScript implementation of the JSON Object Signing and Encryption (JOSE) for current web browsers and node.js-based servers. node-jose earlier than version 0.9.3 is vulnerable to an … NVD-CWE-noinfo
CVE-2017-16007 2024-11-21 12:15 2018-06-5 Show GitHub Exploit DB Packet Storm
257346 6.1 MEDIUM
Network
remarkable_project remarkable Remarkable is a markdown parser. In versions 1.6.2 and lower, remarkable allows the use of `data:` URIs in links and can therefore execute javascript. CWE-79
Cross-site Scripting
CVE-2017-16006 2024-11-21 12:15 2018-06-5 Show GitHub Exploit DB Packet Storm
257347 7.5 HIGH
Network
joyent http-signature Http-signature is a "Reference implementation of Joyent's HTTP Signature Scheme". In versions <=0.9.11, http-signature signs only the header values, but not the header names. This makes http-signatur… CWE-347
 Improper Verification of Cryptographic Signature
CVE-2017-16005 2024-11-21 12:15 2018-06-5 Show GitHub Exploit DB Packet Storm
257348 7.5 HIGH
Network
gaoxuyan_project gaoxuyan gaoxuyan is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url. CWE-22
Path Traversal
CVE-2017-16153 2024-11-21 12:15 2018-05-30 Show GitHub Exploit DB Packet Storm
257349 7.5 HIGH
Network
node-tkinter_project node-tkinter node-tkinter was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm. CWE-200
Information Exposure
CVE-2017-16062 2024-11-21 12:15 2018-05-30 Show GitHub Exploit DB Packet Storm
257350 7.5 HIGH
Network
tkinter_package tkinter tkinter was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm. CWE-200
Information Exposure
CVE-2017-16061 2024-11-21 12:15 2018-05-30 Show GitHub Exploit DB Packet Storm