Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 23, 2026, noon

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
251751	5	警告	Cogent Real-Time Systems Inc.	-	Cogent DataHub の Web サーバにおけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2011-3500	2012-02-3 16:51	2011-09-16	Show	GitHub Exploit DB Packet Storm

251752	10	危険	Cogent Real-Time Systems Inc.	-	Cogent DataHub の DH_OneSecondTick 関数におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2011-3493	2012-02-3 16:49	2011-09-16	Show	GitHub Exploit DB Packet Storm

251753	5	警告	Beckhoff Automation	-	Beckhoff TwinCAT におけるサービス運用妨害 (DoS) の脆弱性	CWE-119 バッファエラー	CVE-2011-3486	2012-02-3 16:47	2011-09-16	Show	GitHub Exploit DB Packet Storm

251754	7.5	危険	Novell	-	Novell Open Enterprise Server におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2011-4194	2012-02-3 16:38	2012-01-31	Show	GitHub Exploit DB Packet Storm

251755	6.8	警告	DELL EMC (旧 EMC Corporation)	-	EMC Documentum Content Server におけるスーパーユーザの最高権限を取得される脆弱性	CWE-noinfo 情報不足	CVE-2011-4144	2012-02-3 16:37	2012-02-2	Show	GitHub Exploit DB Packet Storm

251756	6.4	警告	The PHP Group	-	PHP における任意のファイルを作成される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-0057	2012-02-3 16:34	2011-04-1	Show	GitHub Exploit DB Packet Storm

251757	9.3	危険	ヒューレット・パッカード	-	HP Network Automation における任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2011-4790	2012-02-3 16:30	2012-01-30	Show	GitHub Exploit DB Packet Storm

251758	2.1	注意	Mozilla Foundation	-	Mozilla Firefox および SeaMonkey における Firefox Sync キーを読まれる脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-0450	2012-02-3 16:29	2012-01-31	Show	GitHub Exploit DB Packet Storm

251759	5	警告	Mozilla Foundation	-	複数の Mozilla 製品における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2011-3670	2012-02-3 16:22	2012-01-31	Show	GitHub Exploit DB Packet Storm

251760	7.5	危険	Novell	-	Novell Open Enterprise Server 2 の GetDriverSettings 関数におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2011-3173	2012-02-3 16:11	2011-11-1	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 23, 2026, 4:08 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
258291	8.8	HIGH Network	kanboard	kanboard	An authenticated standard user could reset the password of other users (including the admin) by altering form data. Affects kanboard before 1.0.46.	CWE-640 Weak Password Recovery Mechanism for Forgotten Password	CVE-2017-12850	2024-11-21 12:10	2017-08-15	Show	GitHub Exploit DB Packet Storm

258292	7.8	HIGH Local	gnu	binutils	The elf_read_notesfunction in bfd/elf.c in GNU Binutils 2.29 allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2017-12799	2024-11-21 12:10	2017-08-11	Show	GitHub Exploit DB Packet Storm

258293	6.1	MEDIUM Network	nexusphp_project	nexusphp	Cross-Site Scripting (XSS) exists in NexusPHP version v1.5 via the q parameter to searchsuggest.php.	CWE-79 Cross-site Scripting	CVE-2017-12798	2024-11-21 12:10	2017-08-11	Show	GitHub Exploit DB Packet Storm

258294	6.1	MEDIUM Network	nexusphp_project	nexusphp	Cross-Site Scripting (XSS) exists in NexusPHP version v1.5 via some parameter to usersearch.php.	CWE-79 Cross-site Scripting	CVE-2017-12777	2024-11-21 12:10	2017-08-10	Show	GitHub Exploit DB Packet Storm

258295	9.8	CRITICAL Network	finecms_project	finecms	finecms in 1.9.5\controllers\member\ContentController.php allows remote attackers to operate website database	CWE-89 SQL Injection	CVE-2017-12774	2024-11-21 12:10	2017-08-10	Show	GitHub Exploit DB Packet Storm

258296	9.8	CRITICAL Network	linux canonical	linux_kernel ubuntu_linux	In /drivers/isdn/i4l/isdn_net.c: A user-controlled buffer is copied into a local buffer of constant size using strcpy without a length check which can cause a buffer overflow. This affects the Linux …	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2017-12762	2024-11-21 12:10	2017-08-10	Show	GitHub Exploit DB Packet Storm

258297	7.2	HIGH Network	extplorer	extplorer	Command inject in transfer from another server in extplorer 2.1.9 and prior allows attacker to inject command via the userfile[0] parameter.	CWE-77 Command Injection	CVE-2017-12756	2024-11-21 12:10	2017-08-10	Show	GitHub Exploit DB Packet Storm

258298	8.8	HIGH Network	asuswrt-merlin	asuswrt-merlin	Stack buffer overflow in httpd in Asuswrt-Merlin firmware 380.67_0RT-AC5300 and earlier for ASUS devices and ASUS firmware for ASUS RT-AC5300, RT_AC1900P, RT-AC68U, RT-AC68P, RT-AC88U, RT-AC66U, RT-A…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2017-12754	2024-11-21 12:10	2017-08-10	Show	GitHub Exploit DB Packet Storm

258299	8.8	HIGH Network	taglib debian	taglib debian_linux	In TagLib 1.11.1, the rebuildAggregateFrames function in id3v2framefactory.cpp has a pointer to cast vulnerability, which allows remote attackers to cause a denial of service or possibly have unspeci…	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2017-12678	2024-11-21 12:10	2017-08-8	Show	GitHub Exploit DB Packet Storm

258300	6.1	MEDIUM Network	identityserver	identityserver3	IdentityServer3 2.4.x, 2.5.x, and 2.6.x before 2.6.1 has XSS in an Angular expression on the authorize response page, which might allow remote attackers to obtain sensitive information about the Iden…	CWE-79 Cross-site Scripting	CVE-2017-12677	2024-11-21 12:10	2017-08-8	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed