Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 30, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
251641 4.3 警告 Internet WorkShop - WebGlimpse の wgarcmin.cgi におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-5113 2012-03-22 16:40 2012-03-19 Show GitHub Exploit DB Packet Storm
251642 5 警告 Internet WorkShop - WebGlimpse の wgarcmin.cgi におけるインストールパスを取得される脆弱性 CWE-200
情報漏えい 		CVE-2009-5112 2012-03-22 16:39 2012-03-19 Show GitHub Exploit DB Packet Storm
251643 4.3 警告 OSQA - OSQA の questions/ask におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-1782 2012-03-22 16:33 2012-03-19 Show GitHub Exploit DB Packet Storm
251644 4.3 警告 Dotclear - Dotclear におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-1039 2012-03-22 16:18 2012-03-19 Show GitHub Exploit DB Packet Storm
251645 4.3 警告 Oxwall - OxWall におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-0872 2012-03-22 16:17 2012-03-19 Show GitHub Exploit DB Packet Storm
251646 4.3 警告 SocialCMS - SocialCMS の ajax/commentajax.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-1781 2012-03-22 16:15 2012-03-19 Show GitHub Exploit DB Packet Storm
251647 7.5 危険 SocialCMS - SocialCMS の search.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2012-1780 2012-03-22 16:14 2012-03-19 Show GitHub Exploit DB Packet Storm
251648 9.3 危険 マイクロソフト - Microsoft Windows のリモートデスクトッププロトコルの実装における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2012-0002 2012-03-22 13:40 2012-03-13 Show GitHub Exploit DB Packet Storm
251649 9.3 危険 VideoLAN - VideoLAN VLC media player におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2012-1776 2012-03-21 16:50 2012-03-12 Show GitHub Exploit DB Packet Storm
251650 9.3 危険 VideoLAN - VideoLAN VLC media player におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2012-1775 2012-03-21 16:50 2012-03-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 31, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
258821 7.8 HIGH
Local 		radare radare2 The wasm_dis function in libr/asm/arch/wasm/wasm.c in radare2 2.0.0 allows remote attackers to cause a denial of service (stack-based buffer over-read and application crash) or possibly have unspecif… CWE-125
Out-of-bounds Read 		CVE-2017-15368 2024-11-21 12:14 2017-10-16 Show GitHub Exploit DB Packet Storm
258822 6.1 MEDIUM
Network 		osticket osticket osTicket 1.10.1 allows arbitrary client-side JavaScript code execution on victims who click a crafted support/scp/tickets.php?status= link, aka XSS. Session ID and data theft may follow as well as th… CWE-79
Cross-site Scripting 		CVE-2017-15362 2024-11-21 12:14 2017-10-16 Show GitHub Exploit DB Packet Storm
258823 7.8 HIGH
Local 		cpuid cpu-z In CPUID CPU-Z before 1.43, there is an arbitrary memory write that results directly in elevation of privileges, because any program running on the local machine (while CPU-Z is running) can issue an… CWE-787
 Out-of-bounds Write 		CVE-2017-15303 2024-11-21 12:14 2017-10-16 Show GitHub Exploit DB Packet Storm
258824 5.5 MEDIUM
Local 		ccsv_project ccsv The foreach function in ext/ccsv.c in Ccsv 1.1.0 allows remote attackers to cause a denial of service (double free and application crash) or possibly have unspecified other impact via a crafted file. CWE-415
 Double Free 		CVE-2017-15364 2024-11-21 12:14 2017-10-16 Show GitHub Exploit DB Packet Storm
258825 7.5 HIGH
Network 		luracast restler Directory traversal vulnerability in public/examples/resources/getsource.php in Luracast Restler through 3.0.0, as used in the restler extension before 1.7.1 for TYPO3, allows remote attackers to rea… CWE-22
Path Traversal 		CVE-2017-15363 2024-11-21 12:14 2017-10-16 Show GitHub Exploit DB Packet Storm
258826 5.4 MEDIUM
Network 		paessler prtg_network_monitor PRTG Network Monitor version 17.3.33.2830 is vulnerable to stored Cross-Site Scripting on all group names created, related to incorrect error handling for an HTML encoded script. CWE-79
Cross-site Scripting 		CVE-2017-15360 2024-11-21 12:14 2017-10-16 Show GitHub Exploit DB Packet Storm
258827 5.3 MEDIUM
Network 		ewbf cuda_zcash_miner The miner statistics HTTP API in EWBF Cuda Zcash Miner Version 0.3.4b hangs on incoming TCP connections until some sort of request is made (such as "GET / HTTP/1.1"), which allows for a Denial of Ser… NVD-CWE-noinfo
CVE-2017-15300 2024-11-21 12:14 2017-10-15 Show GitHub Exploit DB Packet Storm
258828 6.1 MEDIUM
Network 		nexusphp_project nexusphp XSS exists in NexusPHP 1.5 via the keyword parameter to messages.php. CWE-79
Cross-site Scripting 		CVE-2017-15305 2024-11-21 12:14 2017-10-15 Show GitHub Exploit DB Packet Storm
258829 9.8 CRITICAL
Network 		airtame hdmi_dongle_firmware /bin/login.php in the Web Panel on the Airtame HDMI dongle with firmware before 3.0 allows an attacker to set his own session id via a "Cookie: PHPSESSID=" header. This can be used to achieve persist… CWE-384
 Session Fixation 		CVE-2017-15304 2024-11-21 12:14 2017-10-15 Show GitHub Exploit DB Packet Storm
258830 5.5 MEDIUM
Local 		linux linux_kernel The KEYS subsystem in the Linux kernel through 4.13.7 mishandles use of add_key for a key that already exists but is uninstantiated, which allows local users to cause a denial of service (NULL pointe… CWE-476
 NULL Pointer Dereference 		CVE-2017-15299 2024-11-21 12:14 2017-10-15 Show GitHub Exploit DB Packet Storm