Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 24, 2026, 4 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
251711	9.3	危険	シーメンス	-	複数の Siemens 製品の HmiLoad におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2011-4875	2012-02-8 11:06	2012-01-24	Show	GitHub Exploit DB Packet Storm

251712	10	危険	シーメンス	-	複数の Siemens 製品の TELNET デーモンにおけるアクセス権を取得される脆弱性	CWE-287 不適切な認証	CVE-2011-4514	2012-02-8 11:00	2012-01-24	Show	GitHub Exploit DB Packet Storm

251713	10	危険	シーメンス	-	複数の Siemens 製品における任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2011-4513	2012-02-8 10:56	2012-01-24	Show	GitHub Exploit DB Packet Storm

251714	5	警告	シーメンス	-	複数の Siemens 製品の HMI Web サーバにおける CRLF インジェクションの脆弱性	CWE-94 コード・インジェクション	CVE-2011-4512	2012-02-8 10:54	2012-01-24	Show	GitHub Exploit DB Packet Storm

251715	4.3	警告	シーメンス	-	複数の Siemens 製品の HMI Web サーバにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-4511	2012-02-8 10:53	2012-01-24	Show	GitHub Exploit DB Packet Storm

251716	4.3	警告	シーメンス	-	複数の Siemens 製品の HMI Web サーバにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-4510	2012-02-8 10:51	2012-01-24	Show	GitHub Exploit DB Packet Storm

251717	10	危険	シーメンス	-	複数の Siemens 製品の HMI Web サーバにおけるアクセス権を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-4509	2012-02-8 10:50	2012-01-24	Show	GitHub Exploit DB Packet Storm

251718	10	危険	シーメンス	-	複数の Siemens 製品の HMI Web サーバにおける認証を回避される脆弱性	CWE-287 不適切な認証	CVE-2011-4508	2012-02-8 10:49	2012-01-24	Show	GitHub Exploit DB Packet Storm

251719	2.6	注意	HTC Corporation	-	HTC 製 Android 端末に Wi-Fi 認証情報漏えいの脆弱性	CWE-200 情報漏えい	CVE-2011-4872	2012-02-7 16:21	2012-02-2	Show	GitHub Exploit DB Packet Storm

251720	7.5	危険	Scriptsez.net	-	Scriptsez.net の Ez Album における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2012-0983	2012-02-7 16:19	2012-02-2	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 24, 2026, 4:05 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
254961	9.8	CRITICAL Network	uclouvain debian canonical	openjpeg debian_linux ubuntu_linux	In OpenJPEG 2.3.0, a stack-based buffer overflow was discovered in the pgxtovolume function in jp3d/convert.c. The vulnerability causes an out-of-bounds write, which may lead to remote denial of serv…	CWE-787 Out-of-bounds Write	CVE-2017-17480	2024-11-21 12:18	2017-12-9	Show	GitHub Exploit DB Packet Storm

254962	9.8	CRITICAL Network	uclouvain	openjpeg	In OpenJPEG 2.3.0, a stack-based buffer overflow was discovered in the pgxtoimage function in jpwl/convert.c. The vulnerability causes an out-of-bounds write, which may lead to remote denial of servi…	CWE-787 Out-of-bounds Write	CVE-2017-17479	2024-11-21 12:18	2017-12-9	Show	GitHub Exploit DB Packet Storm

254963	7.8	HIGH Local	tgsoft	vir.it_explorer	TG Soft Vir.IT eXplorer Lite 8.5.42 allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact via a \\.\Viragtlt DeviceIoControl request of 0x82736068.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2017-17475	2024-11-21 12:18	2017-12-8	Show	GitHub Exploit DB Packet Storm

254964	7.8	HIGH Local	tgsoft	vir.it_explorer	TG Soft Vir.IT eXplorer Lite 8.5.42 allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact via a \\.\Viragtlt DeviceIoControl request of 0x82730070.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2017-17474	2024-11-21 12:18	2017-12-8	Show	GitHub Exploit DB Packet Storm

254965	5.5	MEDIUM Local	hunesion	i-onenet	Incorrect Access Control in Hunesion i-oneNet 3.0.6042.1200 allows the local user to access other user's information which is unauthorized via brute force.	CWE-307 mproper Restriction of Excessive Authentication Attempts	CVE-2017-16900	2024-11-21 12:17	2020-02-28	Show	GitHub Exploit DB Packet Storm

254966	8.8	HIGH Adjacent	huawei	hg655m_firmware	Some Huawei smart phones with versions earlier than Harry-AL00C 9.1.0.206(C00E205R3P1) have a null pointer dereference vulnerability. An attacker crafts specific packets and sends to the affected pro…	CWE-476 NULL Pointer Dereference	CVE-2017-17224	2024-11-21 12:17	2019-11-13	Show	GitHub Exploit DB Packet Storm

254967	5.4	MEDIUM Network	open-xchange	open-xchange_appsuite	OX Software GmbH OX App Suite 7.8.4 and earlier is affected by: Cross Site Scripting (XSS).	CWE-79 Cross-site Scripting	CVE-2017-17061	2024-11-21 12:17	2019-05-24	Show	GitHub Exploit DB Packet Storm

254968	9.8	CRITICAL Network	open-xchange	open-xchange_appsuite	OX Software GmbH OX App Suite 7.8.4 and earlier is affected by: Insecure Permissions.	CWE-275 Permission Issues	CVE-2017-17060	2024-11-21 12:17	2019-05-24	Show	GitHub Exploit DB Packet Storm

254969	8.1	HIGH Network	sophos ncp-e	ipsec_client ncp_secure_entry_client	The Sophos UTM VPN endpoint interacts with client software provided by NPC Engineering (www.ncp-e.com). The affected client software, "Sophos IPSec Client" 11.04 is a rebranded version of NCP "Secure…	CWE-345 Insufficient Verification of Data Authenticity	CVE-2017-17023	2024-11-21 12:17	2019-04-10	Show	GitHub Exploit DB Packet Storm

254970	6.5	MEDIUM Network	libraw canonical	libraw ubuntu_linux	An error within the "LibRaw::xtrans_interpolate()" function (internal/dcraw_common.cpp) in LibRaw versions prior to 0.18.6 can be exploited to cause an invalid read memory access and subsequently a D…	CWE-125 Out-of-bounds Read	CVE-2017-16910	2024-11-21 12:17	2018-12-8	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed