Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 23, 2026, noon

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
251511 4.3 警告 Craig Barratt - BackupPC の View.pm におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-4923 2012-02-21 16:41 2012-02-18 Show GitHub Exploit DB Packet Storm
251512 9.3 危険 TYPO3 Association - TYPO3 の workspaces system エクステンションにおける PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2011-4614 2012-02-21 16:40 2011-12-16 Show GitHub Exploit DB Packet Storm
251513 4.3 警告 Craig Barratt - BackupPC の CGI/Browse.pm におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-3361 2012-02-21 16:34 2012-02-18 Show GitHub Exploit DB Packet Storm
251514 7.5 危険 Earl Miles - Drupal 用 Views モジュールにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2011-4113 2012-02-21 16:33 2012-02-17 Show GitHub Exploit DB Packet Storm
251515 2.1 注意 Robert Ancell - LightDM における任意のファイルの所有権を変更される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-4105 2012-02-21 16:26 2012-02-17 Show GitHub Exploit DB Packet Storm
251516 6.4 警告 マイクロソフト - Microsoft Windows Server 2008 における無効なドメイン名の継続的な名前解決を可能にされる脆弱性 CWE-Other
その他 		CVE-2012-1194 2012-02-21 16:25 2012-02-17 Show GitHub Exploit DB Packet Storm
251517 6.4 警告 PowerDNS - PowerDNS における無効なドメイン名の継続的な名前解決を可能にされる脆弱性 CWE-DesignError
CVE-2012-1193 2012-02-21 16:24 2012-02-17 Show GitHub Exploit DB Packet Storm
251518 6.4 警告 Stichting NLnet Labs - Unbound における無効なドメイン名の継続的な名前解決を可能にされる脆弱性 CWE-DesignError
CVE-2012-1192 2012-02-21 16:22 2012-02-17 Show GitHub Exploit DB Packet Storm
251519 6.4 警告 Daniel J. Bernstein - Daniel J. Bernstein djbdns における無効なドメイン名の継続的な名前解決を可能にされる脆弱性 CWE-20
CWE-DesignError
CVE-2012-1191 2012-02-21 16:20 2012-02-17 Show GitHub Exploit DB Packet Storm
251520 5 警告 PowerDNS - PowerDNS Authoritative Server の common_startup.cc におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2012-0206 2012-02-21 15:50 2012-01-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 23, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
255121 9.8 CRITICAL
Network 		quest netvault_backup This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12. Authentication is not required to exploit this vulnerability. The … CWE-89
SQL Injection 		CVE-2017-17412 2024-11-21 12:17 2018-02-9 Show GitHub Exploit DB Packet Storm
255122 9.8 CRITICAL
Network 		konakart konakart Path traversal vulnerability in the administrative panel in KonaKart eCommerce Platform version 8.7 and earlier could allow an attacker to download system files, as well as upload specially crafted J… CWE-22
Path Traversal 		CVE-2017-17108 2024-11-21 12:17 2018-02-4 Show GitHub Exploit DB Packet Storm
255123 9.8 CRITICAL
Network 		atlassian fisheye
crucible 		It was possible for double OGNL evaluation in certain redirect action and in WebWork URL and Anchor tags in JSP files to occur. An attacker who can access the web interface of Fisheye or Crucible or … NVD-CWE-noinfo
CVE-2017-16861 2024-11-21 12:17 2018-02-1 Show GitHub Exploit DB Packet Storm
255124 5.9 MEDIUM
Network 		linux linux_kernel The "stub_send_ret_submit()" function (drivers/usb/usbip/stub_tx.c) in the Linux Kernel before version 4.14.8, 4.9.71, 4.1.49, and 4.4.107 allows attackers to cause a denial of service (NULL pointer … CWE-476
 NULL Pointer Dereference 		CVE-2017-16914 2024-11-21 12:17 2018-02-1 Show GitHub Exploit DB Packet Storm
255125 5.9 MEDIUM
Network 		linux linux_kernel The "stub_recv_cmd_submit()" function (drivers/usb/usbip/stub_rx.c) in the Linux Kernel before version 4.14.8, 4.9.71, and 4.4.114 when handling CMD_SUBMIT packets allows attackers to cause a denial … CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2017-16913 2024-11-21 12:17 2018-02-1 Show GitHub Exploit DB Packet Storm
255126 5.9 MEDIUM
Network 		linux linux_kernel The "get_pipe()" function (drivers/usb/usbip/stub_rx.c) in the Linux Kernel before version 4.14.8, 4.9.71, and 4.4.114 allows attackers to cause a denial of service (out-of-bounds read) via a special… CWE-125
Out-of-bounds Read 		CVE-2017-16912 2024-11-21 12:17 2018-02-1 Show GitHub Exploit DB Packet Storm
255127 4.7 MEDIUM
Local 		linux linux_kernel The vhci_hcd driver in the Linux Kernel before version 4.14.8 and 4.4.114 allows allows local attackers to disclose kernel memory addresses. Successful exploitation requires that a USB device is atta… CWE-200
Information Exposure 		CVE-2017-16911 2024-11-21 12:17 2018-02-1 Show GitHub Exploit DB Packet Storm
255128 7.8 HIGH
Local 		haystacksoftware arq The standardrestorer binary in Arq 5.10 and earlier for Mac allows local users to write to arbitrary files and consequently gain root privileges via a crafted restore path. CWE-732
 Incorrect Permission Assignment for Critical Resource 		CVE-2017-16945 2024-11-21 12:17 2018-02-1 Show GitHub Exploit DB Packet Storm
255129 7.8 HIGH
Local 		haystacksoftware arq The arq_updater binary in Arq 5.10 and earlier for Mac allows local users to write to arbitrary files and consequently gain root privileges via a crafted update URL, as demonstrated by file:///tmp/bl… CWE-732
 Incorrect Permission Assignment for Critical Resource 		CVE-2017-16928 2024-11-21 12:17 2018-02-1 Show GitHub Exploit DB Packet Storm
255130 6.8 MEDIUM
Network 		atlassian crowd The 'crowd-application' plugin module (notably used by the Google Apps plugin) in Atlassian Crowd from version 1.5.0 before version 3.1.2 allowed an attacker to impersonate a Crowd user in REST reque… CWE-287
Improper Authentication 		CVE-2017-16858 2024-11-21 12:17 2018-01-31 Show GitHub Exploit DB Packet Storm