Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 25, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
251651	10	危険	Broadwin アドバンテック株式会社	-	Advantech/BroadWin WebAccess の ActiveX コントロールにおけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2011-4526	2012-02-23 11:19	2012-02-21	Show	GitHub Exploit DB Packet Storm

251652	7.5	危険	Broadwin アドバンテック株式会社	-	Advantech/BroadWin WebAccess における任意のコードを実行される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-4525	2012-02-23 11:18	2012-02-21	Show	GitHub Exploit DB Packet Storm

251653	7.5	危険	Broadwin アドバンテック株式会社	-	Advantech/BroadWin WebAccess におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2011-4524	2012-02-23 11:02	2012-02-21	Show	GitHub Exploit DB Packet Storm

251654	4.3	警告	Broadwin アドバンテック株式会社	-	Advantech/BroadWin WebAccess の bwview.asp におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-4523	2012-02-23 11:01	2012-02-21	Show	GitHub Exploit DB Packet Storm

251655	4.3	警告	Broadwin アドバンテック株式会社	-	Advantech/BroadWin WebAccess の bwview.asp におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-4522	2012-02-23 10:48	2012-02-21	Show	GitHub Exploit DB Packet Storm

251656	7.5	危険	Broadwin アドバンテック株式会社	-	Advantech/BroadWin WebAccess における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2011-4521	2012-02-23 10:40	2012-02-21	Show	GitHub Exploit DB Packet Storm

251657	7.5	危険	アドバンテック株式会社	-	複数の Advantech OPC Server 製品の OPC Server ActiveX コントロールにおけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2011-1914	2012-02-23 10:38	2012-02-21	Show	GitHub Exploit DB Packet Storm

251658	10	危険	Novell	-	Windows 上で稼働する Novell iPrint Client におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2011-4187	2012-02-23 10:02	2012-02-9	Show	GitHub Exploit DB Packet Storm

251659	9.3	危険	Novell	-	Windows 上で稼働する Novell iPrint Client におけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2011-4186	2012-02-23 10:01	2012-02-9	Show	GitHub Exploit DB Packet Storm

251660	10	危険	Novell	-	Windows 上で稼働する Novell iPrint Client における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2011-4185	2012-02-23 10:01	2012-02-9	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 26, 2026, 4:05 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
247531	5.9	MEDIUM Network	gnupg	libgcrypt	In Libgcrypt before 1.7.7, an attacker who learns the EdDSA session key (from side-channel observation during the signing process) can easily recover the long-term secret key. 1.7.7 makes a cipher/ec…	CWE-200 Information Exposure	CVE-2017-9526	2024-11-21 12:36	2017-06-11	Show	GitHub Exploit DB Packet Storm

247532	6.7	MEDIUM Local	cron_project debian	cron debian_linux	In the cron package through 3.0pl1-128 on Debian, and through 3.0pl1-128ubuntu2 on Ubuntu, the postinst maintainer script allows for group-crontab-to-root privilege escalation via symlink attacks aga…	CWE-59 Link Following	CVE-2017-9525	2024-11-21 12:36	2017-06-10	Show	GitHub Exploit DB Packet Storm

247533	6.1	MEDIUM Network	sophos	web_appliance	The Sophos Web Appliance before 4.3.2 has XSS in the FTP redirect page, aka NSWA-1342.	CWE-79 Cross-site Scripting	CVE-2017-9523	2024-11-21 12:36	2017-06-9	Show	GitHub Exploit DB Packet Storm

247534	5.5	MEDIUM Local	radare	radare2	The r_config_set function in libr/config/config.c in radare2 1.5.0 allows remote attackers to cause a denial of service (use-after-free and application crash) via a crafted DEX file.	CWE-416 Use After Free	CVE-2017-9520	2024-11-21 12:36	2017-06-8	Show	GitHub Exploit DB Packet Storm

247535	8.8	HIGH Network	atmail	atmail	atmail before 7.8.0.2 has CSRF, allowing an attacker to create a user account.	CWE-352 Origin Validation Error	CVE-2017-9519	2024-11-21 12:36	2017-06-8	Show	GitHub Exploit DB Packet Storm

247536	8.8	HIGH Network	atmail	atmail	atmail before 7.8.0.2 has CSRF, allowing an attacker to change the SMTP hostname and hijack all emails.	CWE-352 Origin Validation Error	CVE-2017-9518	2024-11-21 12:36	2017-06-8	Show	GitHub Exploit DB Packet Storm

247537	8.8	HIGH Network	atmail	atmail	atmail before 7.8.0.2 has CSRF, allowing an attacker to upload and import users via CSV.	CWE-352 Origin Validation Error	CVE-2017-9517	2024-11-21 12:36	2017-06-8	Show	GitHub Exploit DB Packet Storm

247538	5.4	MEDIUM Network	craftcms	craft_cms	Craft CMS before 2.6.2982 allows for a potential XSS attack vector by uploading a malicious SVG file.	CWE-79 Cross-site Scripting	CVE-2017-9516	2024-11-21 12:36	2017-06-8	Show	GitHub Exploit DB Packet Storm

247539	6.5	MEDIUM Network	imagemagick	imagemagick	In ImageMagick 7.0.5-7 Q16, an assertion failure was found in the function LockSemaphoreInfo, which allows attackers to cause a denial of service via a crafted file.	CWE-617 Reachable Assertion	CVE-2017-9501	2024-11-21 12:36	2017-06-7	Show	GitHub Exploit DB Packet Storm

247540	6.5	MEDIUM Network	imagemagick	imagemagick	In ImageMagick 7.0.5-8 Q16, an assertion failure was found in the function ResetImageProfileIterator, which allows attackers to cause a denial of service via a crafted file.	CWE-617 Reachable Assertion	CVE-2017-9500	2024-11-21 12:36	2017-06-7	Show	GitHub Exploit DB Packet Storm