Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 27, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
251651 7.5 危険 Broadwin
アドバンテック株式会社		 - Advantech/BroadWin WebAccess の opcImg.asp におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2012-0238 2012-02-23 11:29 2012-02-21 Show GitHub Exploit DB Packet Storm
251652 6.4 警告 Broadwin
アドバンテック株式会社		 - Advantech/BroadWin WebAccess における日付と時刻の同期設定を変更される脆弱性 CWE-119
バッファエラー 		CVE-2012-0237 2012-02-23 11:27 2012-02-21 Show GitHub Exploit DB Packet Storm
251653 5 警告 Broadwin
アドバンテック株式会社		 - Advantech/BroadWin WebAccess における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2012-0236 2012-02-23 11:23 2012-02-21 Show GitHub Exploit DB Packet Storm
251654 6 警告 Broadwin
アドバンテック株式会社		 - Advantech/BroadWin WebAccess におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2012-0235 2012-02-23 11:22 2012-02-21 Show GitHub Exploit DB Packet Storm
251655 7.5 危険 Broadwin
アドバンテック株式会社		 - Advantech/BroadWin WebAccess における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2012-0234 2012-02-23 11:21 2012-02-21 Show GitHub Exploit DB Packet Storm
251656 4.3 警告 Broadwin
アドバンテック株式会社		 - Advantech/BroadWin WebAccess におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-0233 2012-02-23 11:20 2012-02-21 Show GitHub Exploit DB Packet Storm
251657 10 危険 Broadwin
アドバンテック株式会社		 - Advantech/BroadWin WebAccess の ActiveX コントロールにおけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2011-4526 2012-02-23 11:19 2012-02-21 Show GitHub Exploit DB Packet Storm
251658 7.5 危険 Broadwin
アドバンテック株式会社		 - Advantech/BroadWin WebAccess における任意のコードを実行される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-4525 2012-02-23 11:18 2012-02-21 Show GitHub Exploit DB Packet Storm
251659 7.5 危険 Broadwin
アドバンテック株式会社		 - Advantech/BroadWin WebAccess におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2011-4524 2012-02-23 11:02 2012-02-21 Show GitHub Exploit DB Packet Storm
251660 4.3 警告 Broadwin
アドバンテック株式会社		 - Advantech/BroadWin WebAccess の bwview.asp におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-4523 2012-02-23 11:01 2012-02-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 27, 2026, 4:52 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
247371 7.5 HIGH
Network 		juniper junos A NULL Pointer Dereference vulnerability in Juniper Networks Junos OS allows an attacker to cause the Junos OS kernel to crash. Continued receipt of this specifically crafted malicious MPLS packet wi… CWE-476
 NULL Pointer Dereference 		CVE-2018-0049 2024-11-21 12:37 2018-10-11 Show GitHub Exploit DB Packet Storm
247372 8.8 HIGH
Adjacent 		juniper junos Receipt of a specific Draft-Rosen MVPN control packet may cause the routing protocol daemon (RPD) process to crash and restart or may lead to remote code execution. By continuously sending the same s… CWE-20
 Improper Input Validation  		CVE-2018-0045 2024-11-21 12:37 2018-10-11 Show GitHub Exploit DB Packet Storm
247373 8.8 HIGH
Adjacent 		juniper junos Receipt of a specific MPLS packet may cause the routing protocol daemon (RPD) process to crash and restart or may lead to remote code execution. By continuously sending specific MPLS packets, an atta… CWE-20
 Improper Input Validation  		CVE-2018-0043 2024-11-21 12:37 2018-10-11 Show GitHub Exploit DB Packet Storm
247374 6.5 MEDIUM
Adjacent 		cisco ios_xe
ios 		A vulnerability in the VLAN Trunking Protocol (VTP) subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to corrupt the internal VTP database on… CWE-20
 Improper Input Validation  		CVE-2018-0197 2024-11-21 12:37 2018-10-5 Show GitHub Exploit DB Packet Storm
247375 5.9 MEDIUM
Network 		cisco ios
ios_xe 		A vulnerability in the implementation of RSA-encrypted nonces in Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to obtain the encrypted nonces of an Inte… CWE-326
Inadequate Encryption Strength 		CVE-2018-0131 2024-11-21 12:37 2018-08-15 Show GitHub Exploit DB Packet Storm
247376 9.8 CRITICAL
Network 		juniper contrail_service_orchestration Juniper Networks CSO versions prior to 4.0.0 may log passwords in log files leading to an information disclosure vulnerability. CWE-532
 Inclusion of Sensitive Information in Log Files 		CVE-2018-0042 2024-11-21 12:37 2018-07-12 Show GitHub Exploit DB Packet Storm
247377 9.8 CRITICAL
Network 		juniper contrail_service_orchestration Juniper Networks Contrail Service Orchestration releases prior to 3.3.0 use hardcoded credentials to access Keystone service. These credentials allow network based attackers unauthorized access to in… CWE-798
 Use of Hard-coded Credentials 		CVE-2018-0041 2024-11-21 12:37 2018-07-12 Show GitHub Exploit DB Packet Storm
247378 9.8 CRITICAL
Network 		juniper contrail_service_orchestration Juniper Networks Contrail Service Orchestrator versions prior to 4.0.0 use hardcoded cryptographic certificates and keys in some cases, which may allow network based attackers to gain unauthorized ac… CWE-798
 Use of Hard-coded Credentials 		CVE-2018-0040 2024-11-21 12:37 2018-07-12 Show GitHub Exploit DB Packet Storm
247379 9.8 CRITICAL
Network 		juniper contrail_service_orchestration Juniper Networks Contrail Service Orchestration releases prior to 4.0.0 have Grafana service enabled by default with hardcoded credentials. These credentials allow network based attackers unauthorize… CWE-798
 Use of Hard-coded Credentials 		CVE-2018-0039 2024-11-21 12:37 2018-07-12 Show GitHub Exploit DB Packet Storm
247380 9.8 CRITICAL
Network 		juniper contrail_service_orchestration Juniper Networks Contrail Service Orchestration releases prior to 3.3.0 have Cassandra service enabled by default with hardcoded credentials. These credentials allow network based attackers unauthori… CWE-798
 Use of Hard-coded Credentials 		CVE-2018-0038 2024-11-21 12:37 2018-07-12 Show GitHub Exploit DB Packet Storm