Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 16, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
251711	5	警告	Google	-	Google Chrome におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2011-1186	2011-11-17 10:27	2011-03-8	Show	GitHub Exploit DB Packet Storm

251712	7.5	危険	Google	-	Google Chrome における脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-1185	2011-11-17 10:26	2011-03-8	Show	GitHub Exploit DB Packet Storm

251713	10	危険	Google	-	Google Chrome の Scratchpad application における脆弱性	CWE-noinfo 情報不足	CVE-2011-1306	2011-11-17 10:25	2011-03-3	Show	GitHub Exploit DB Packet Storm

251714	7.5	危険	Google	-	Google Chrome のレイアウト処理におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2011-1125	2011-11-17 10:25	2011-02-28	Show	GitHub Exploit DB Packet Storm

251715	7.5	危険	Google	-	Google Chrome の plug-in におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2011-1124	2011-11-17 10:24	2011-02-28	Show	GitHub Exploit DB Packet Storm

251716	7.5	危険	Google	-	Google Chrome における詳細不明な脆弱性	CWE-20 不適切な入力確認	CVE-2011-1123	2011-11-17 10:23	2011-02-28	Show	GitHub Exploit DB Packet Storm

251717	5	警告	Google	-	Google Chrome の WebGL 実装におけるサービス運用妨害 (DoS) の脆弱性	CWE-119 バッファエラー	CVE-2011-1122	2011-11-17 10:23	2011-02-28	Show	GitHub Exploit DB Packet Storm

251718	5	警告	Google	-	Google Chrome の WebGL 実装におけるサービス運用妨害 (DoS) の脆弱性	CWE-119 バッファエラー	CVE-2011-1120	2011-11-17 10:21	2011-02-28	Show	GitHub Exploit DB Packet Storm

251719	7.5	危険	Google	-	Google Chrome におけるサービス運用妨害 (DoS) の脆弱性	CWE-119 バッファエラー	CVE-2011-1119	2011-11-17 10:20	2011-02-28	Show	GitHub Exploit DB Packet Storm

251720	6.8	警告	Google	-	Google Chrome におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2011-1118	2011-11-17 10:19	2011-02-28	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 17, 2026, 4:15 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
247981	6.1	MEDIUM Network	xoops	xoops	XOOPS Core 2.5.8.1 has XSS due to unescaped HTML output of an Install DB failure error message in page_dbsettings.php.	CWE-79 Cross-site Scripting	CVE-2017-7944	2024-11-21 12:33	2017-04-24	Show	GitHub Exploit DB Packet Storm

247982	6.5	MEDIUM Network	concretecms	concrete_cms	concrete5 8.1.0 has CSRF in Thumbnail Editor in the File Manager, which allows remote attackers to disable the entire installation by merely tricking an admin into viewing a malicious page involving …	CWE-352 Origin Validation Error	CVE-2017-8082	2024-11-21 12:33	2017-04-24	Show	GitHub Exploit DB Packet Storm

247983	5.3	MEDIUM Network	tp-link	tl-sg108e_firmware	On the TP-Link TL-SG108E 1.0, the upgrade process can be requested remotely without authentication (httpupg.cgi with a parameter called cmd). This affects the 1.1.2 Build 20141017 Rel.50749 firmware.	CWE-287 Improper Authentication	CVE-2017-8078	2024-11-21 12:33	2017-04-24	Show	GitHub Exploit DB Packet Storm

247984	7.5	HIGH Network	tp-link	tl-sg108e_firmware	On the TP-Link TL-SG108E 1.0, there is a hard-coded ciphering key (a long string beginning with Ei2HNryt). This affects the 1.1.2 Build 20141017 Rel.50749 firmware.	CWE-798 Use of Hard-coded Credentials	CVE-2017-8077	2024-11-21 12:33	2017-04-24	Show	GitHub Exploit DB Packet Storm

247985	9.8	CRITICAL Network	tp-link	tl-sg108e_firmware	On the TP-Link TL-SG108E 1.0, admin network communications are RC4 encoded, even though RC4 is deprecated. This affects the 1.1.2 Build 20141017 Rel.50749 firmware.	CWE-326 Inadequate Encryption Strength	CVE-2017-8076	2024-11-21 12:33	2017-04-24	Show	GitHub Exploit DB Packet Storm

247986	9.8	CRITICAL Network	tp-link	tl-sg108e_firmware	On the TP-Link TL-SG108E 1.0, a remote attacker could retrieve credentials from "Switch Info" log lines where passwords are in cleartext. This affects the 1.1.2 Build 20141017 Rel.50749 firmware.	CWE-532 Inclusion of Sensitive Information in Log Files	CVE-2017-8075	2024-11-21 12:33	2017-04-24	Show	GitHub Exploit DB Packet Storm

247987	9.8	CRITICAL Network	tp-link	tl-sg108e_firmware	On the TP-Link TL-SG108E 1.0, a remote attacker could retrieve credentials from "SEND data" log lines where passwords are encoded in hexadecimal. This affects the 1.1.2 Build 20141017 Rel.50749 firmw…	CWE-532 Inclusion of Sensitive Information in Log Files	CVE-2017-8074	2024-11-21 12:33	2017-04-24	Show	GitHub Exploit DB Packet Storm

247988	7.5	HIGH Network	weechat debian	weechat debian_linux	WeeChat before 1.7.1 allows a remote crash by sending a filename via DCC to the IRC plugin. This occurs in the irc_ctcp_dcc_filename_without_quotes function during quote removal, with a buffer overfl…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2017-8073	2024-11-21 12:33	2017-04-24	Show	GitHub Exploit DB Packet Storm

247989	7.8	HIGH Local	linux	linux_kernel	The cp2112_gpio_direction_input function in drivers/hid/hid-cp2112.c in the Linux kernel 4.9.x before 4.9.9 does not have the expected EIO error status for a zero-length report, which allows local us…	CWE-388 7PK - Errors	CVE-2017-8072	2024-11-21 12:33	2017-04-23	Show	GitHub Exploit DB Packet Storm

247990	5.5	MEDIUM Local	linux	linux_kernel	drivers/hid/hid-cp2112.c in the Linux kernel 4.9.x before 4.9.9 uses a spinlock without considering that sleeping is possible in a USB HID request callback, which allows local users to cause a denial…	CWE-404 Improper Resource Shutdown or Release	CVE-2017-8071	2024-11-21 12:33	2017-04-23	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed