Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 23, 2026, 10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
251671	7.5	危険	Likno Software Inc.	-	WordPress 用 AllWebMenus プラグインの actions.php における任意の PHP コードを実行される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-1011	2012-02-9 15:59	2012-02-7	Show	GitHub Exploit DB Packet Storm

251672	7.5	危険	Likno Software Inc.	-	WordPress 用 AllWebMenus プラグインの actions.php における任意の PHP コードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2012-1010	2012-02-9 15:59	2012-02-7	Show	GitHub Exploit DB Packet Storm

251673	8.5	危険	OpenEMR	-	OpenEMR の interface/fax/fax_dispatch.php における任意のコマンドを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2012-0992	2012-02-9 15:57	2012-02-7	Show	GitHub Exploit DB Packet Storm

251674	3.5	注意	OpenEMR	-	OpenEMR におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2012-0991	2012-02-9 15:57	2012-02-7	Show	GitHub Exploit DB Packet Storm

251675	3.5	注意	DClassifieds	-	DClassifieds の admin/settings/update におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2012-0990	2012-02-9 15:56	2012-02-7	Show	GitHub Exploit DB Packet Storm

251676	4.3	警告	Zenphoto	-	Zenphoto の zp-core/admin.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-4907	2012-02-9 11:18	2011-10-8	Show	GitHub Exploit DB Packet Storm

251677	7.5	危険	Zenphoto	-	Zenphoto の zp-core/full-image.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4906	2012-02-9 11:12	2011-10-8	Show	GitHub Exploit DB Packet Storm

251678	7.5	危険	SoftbizScripts	-	Softbiz Article Directory Script における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4905	2012-02-9 11:12	2011-10-8	Show	GitHub Exploit DB Packet Storm

251679	7.5	危険	DrBenHur	-	DBHcms の index.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4869	2012-02-9 11:10	2011-10-5	Show	GitHub Exploit DB Packet Storm

251680	4.3	警告	W-Agora	-	W-Agora の search.php3 におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-4868	2012-02-9 11:10	2011-10-5	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 23, 2026, 4:08 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
247671	8.8	HIGH Network	barco	clickshare_csm-1_firmware clickshare_csc-1_firmware	A command injection was identified on Barco ClickShare Base Unit devices with CSM-1 firmware before 1.7.0.3 and CSC-1 firmware before 1.10.0.10. An attacker with access to the product's web API can e…	CWE-78 OS Command	CVE-2017-9377	2024-11-21 12:35	2017-10-30	Show	GitHub Exploit DB Packet Storm

247672	7.5	HIGH Network	blackberry	workspaces_vapp workspaces_appliance-x	An information disclosure vulnerability in the BlackBerry Workspaces Server could result in an attacker gaining access to source code for server-side applications by crafting a request for specific f…	CWE-200 Information Exposure	CVE-2017-9368	2024-11-21 12:35	2017-10-17	Show	GitHub Exploit DB Packet Storm

247673	9.8	CRITICAL Network	blackberry	workspaces_vapp workspaces_appliance-x	A directory traversal vulnerability in the BlackBerry Workspaces Server could potentially allow an attacker to execute or upload arbitrary files, or reveal the content of arbitrary files anywhere on …	CWE-22 Path Traversal	CVE-2017-9367	2024-11-21 12:35	2017-10-17	Show	GitHub Exploit DB Packet Storm

247674	9.8	CRITICAL Network	hp	operations_orchestration	A input validation vulnerability in HPE Operations Orchestration product all versions prior to 10.80, allows for the execution of code remotely.	CWE-20 Improper Input Validation	CVE-2017-8994	2024-11-21 12:35	2017-10-11	Show	GitHub Exploit DB Packet Storm

247675	5.3	MEDIUM Network	microfocus	bi-directional_driver	The Bi-directional driver in IDM 4.5 before 4.0.3.0 could be susceptible to unauthorized log configuration changes.	NVD-CWE-noinfo	CVE-2017-9273	2024-11-21 12:35	2017-10-7	Show	GitHub Exploit DB Packet Storm

247676	7.5	HIGH Network	microfocus	bi-directional_driver	The Bi-directional driver in IDM 4.5 before 4.0.3.0 could be susceptible to a denial of service attack.	CWE-20 Improper Input Validation	CVE-2017-9272	2024-11-21 12:35	2017-10-7	Show	GitHub Exploit DB Packet Storm

247677	9.8	CRITICAL Network	microfocus	visibroker	An out-of-bounds read (CWE-125) vulnerability exists in Micro Focus VisiBroker 8.5. The feasibility of leveraging this vulnerability for further attacks was not assessed.	CWE-125 Out-of-bounds Read	CVE-2017-9283	2024-11-21 12:35	2017-09-22	Show	GitHub Exploit DB Packet Storm

247678	9.8	CRITICAL Network	microfocus	visibroker	An integer overflow (CWE-190) led to an out-of-bounds write (CWE-787) on a heap-allocated area, leading to heap corruption in Micro Focus VisiBroker 8.5. The feasibility of leveraging this vulnerabil…	CWE-190 Integer Overflow or Wraparound	CVE-2017-9282	2024-11-21 12:35	2017-09-22	Show	GitHub Exploit DB Packet Storm

247679	7.5	HIGH Network	microfocus	visibroker	An integer overflow (CWE-190) potentially causing an out-of-bounds read (CWE-125) vulnerability in Micro Focus VisiBroker 8.5 can lead to a denial of service.	CWE-190 Integer Overflow or Wraparound	CVE-2017-9281	2024-11-21 12:35	2017-09-22	Show	GitHub Exploit DB Packet Storm

247680	8.8	HIGH Network	openwebif_project	openwebif	OpenWebif 1.2.5 allows remote code execution via a URL to the CallOPKG function in the IpkgController class in plugin/controllers/ipkg.py, when the URL refers to an attacker-controlled web site with …	CWE-20 Improper Input Validation	CVE-2017-9333	2024-11-21 12:35	2017-09-18	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed