Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 23, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
251451	10	危険	UTC Fire & Security	-	UTC Fire & Security Master Clock の管理者パスワードがハードコードされている問題	CWE-255 証明書・パスワード管理	CVE-2012-1288	2012-02-24 15:59	2012-02-21	Show	GitHub Exploit DB Packet Storm

251452	4.3	警告	IBM	-	IBM WebSphere Lombardi Edition におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-0707	2012-02-24 15:27	2011-11-21	Show	GitHub Exploit DB Packet Storm

251453	5	警告	シマンテック	-	Symantec pcAnywhere 製品におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2012-0291	2012-02-23 15:27	2012-01-24	Show	GitHub Exploit DB Packet Storm

251454	9.3	危険	7-Technologies	-	7-Technologies TERMIS における権限を取得される脆弱性	CWE-Other その他	CVE-2012-0223	2012-02-23 15:09	2011-02-22	Show	GitHub Exploit DB Packet Storm

251455	5.8	警告	CubeCart Limited	-	CubeCart におけるオープンリダイレクトの脆弱性	CWE-20 不適切な入力確認	CVE-2012-0865	2012-02-23 15:00	2012-02-21	Show	GitHub Exploit DB Packet Storm

251456	5	警告	EasyVista	-	EasyVista に認証回避の脆弱性	CWE-287 不適切な認証	CVE-2012-1256	2012-02-23 14:49	2012-02-22	Show	GitHub Exploit DB Packet Storm

251457	6.4	警告	シックス・アパート株式会社	-	Movable Type におけるセッションハイジャックが可能な脆弱性	CWE-Other その他	CVE-2012-0320	2012-02-23 12:04	2012-02-23	Show	GitHub Exploit DB Packet Storm

251458	6.5	警告	シックス・アパート株式会社	-	Movable Type における OS コマンドインジェクションの脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2012-0319	2012-02-23 12:04	2012-02-23	Show	GitHub Exploit DB Packet Storm

251459	2.6	注意	シックス・アパート株式会社	-	Movable Type におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-0318	2012-02-23 12:03	2012-02-23	Show	GitHub Exploit DB Packet Storm

251460	4	警告	シックス・アパート株式会社	-	Movable Type におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2012-0317	2012-02-23 12:03	2012-02-23	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 23, 2026, 4:08 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
255241	5.4	MEDIUM Network	wordpress debian	wordpress debian_linux	wp-includes/functions.php in WordPress before 4.9.1 does not require the unfiltered_html capability for upload of .js files, which might allow remote attackers to conduct XSS attacks via a crafted fi…	CWE-79 Cross-site Scripting	CVE-2017-17092	2024-11-21 12:17	2017-12-2	Show	GitHub Exploit DB Packet Storm

255242	8.8	HIGH Network	wordpress	wordpress	wp-admin/user-new.php in WordPress before 4.9.1 sets the newbloguser key to a string that can be directly derived from the user ID, which allows remote attackers to bypass intended access restriction…	CWE-330 Use of Insufficiently Random Values	CVE-2017-17091	2024-11-21 12:17	2017-12-2	Show	GitHub Exploit DB Packet Storm

255243	7.5	HIGH Network	digium	certified_asterisk asterisk	An issue was discovered in chan_skinny.c in Asterisk Open Source 13.18.2 and older, 14.7.2 and older, and 15.1.2 and older, and Certified Asterisk 13.13-cert7 and older. If the chan_skinny (aka SCCP …	CWE-459 Incomplete Cleanup	CVE-2017-17090	2024-11-21 12:17	2017-12-2	Show	GitHub Exploit DB Packet Storm

255244	7.5	HIGH Network	zte	zxdsl_831cii_firmware	connoppp.cgi on ZTE ZXDSL 831CII devices does not require HTTP Basic Authentication, which allows remote attackers to modify the PPPoE configuration or set up a malicious configuration via a GET requ…	CWE-287 Improper Authentication	CVE-2017-16953	2024-11-21 12:17	2017-12-2	Show	GitHub Exploit DB Packet Storm

255245	7.8	HIGH Local	arqbackup	arq	The (1) arq_updater, (2) arqcommitter, (3) standardrestorer, (4) arqglacierrestorer, and (5) arqs3glacierrestorer helper apps in Arq 5.x before 5.10 for Mac allow local users to gain root privileges …	CWE-732 Incorrect Permission Assignment for Critical Resource	CVE-2017-16895	2024-11-21 12:17	2017-12-2	Show	GitHub Exploit DB Packet Storm

255246	6.5	MEDIUM Network	piwigo	piwigo	The application Piwigo is affected by an SQL injection vulnerability in version 2.9.2 and possibly prior. This vulnerability allows remote authenticated attackers to obtain information in the context…	CWE-89 SQL Injection	CVE-2017-16893	2024-11-21 12:17	2017-12-2	Show	GitHub Exploit DB Packet Storm

255247	5.5	MEDIUM Local	vim debian canonical	vim debian_linux ubuntu_linux	fileio.c in Vim prior to 8.0.1263 sets the group ownership of a .swp file to the editor's primary group (which may be different from the group ownership of the original file), which allows local user…	CWE-668 Exposure of Resource to Wrong Sphere	CVE-2017-17087	2024-11-21 12:17	2017-12-1	Show	GitHub Exploit DB Packet Storm

255248	9.8	CRITICAL Network	inedo	otter	Indeo Otter through 1.7.4 mishandles a "</script>" substring in an initial DP payload, which allows remote attackers to cause a denial of service (crash) or possibly have unspecified other impact, as…	CWE-20 Improper Input Validation	CVE-2017-17086	2024-11-21 12:17	2017-12-1	Show	GitHub Exploit DB Packet Storm

255249	7.5	HIGH Network	wireshark debian	wireshark debian_linux	In Wireshark 2.4.0 to 2.4.2 and 2.2.0 to 2.2.10, the CIP Safety dissector could crash. This was addressed in epan/dissectors/packet-cipsafety.c by validating the packet length.	CWE-754 Improper Check for Unusual or Exceptional Conditions	CVE-2017-17085	2024-11-21 12:17	2017-12-1	Show	GitHub Exploit DB Packet Storm

255250	7.5	HIGH Network	wireshark debian	wireshark debian_linux	In Wireshark 2.4.0 to 2.4.2 and 2.2.0 to 2.2.10, the IWARP_MPA dissector could crash. This was addressed in epan/dissectors/packet-iwarp-mpa.c by validating a ULPDU length.	CWE-754 Improper Check for Unusual or Exceptional Conditions	CVE-2017-17084	2024-11-21 12:17	2017-12-1	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed