Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 30, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
251871 4.3 警告 Antisocial Media LLC - WordPress 用 Antisnews テーマにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-3857 2012-03-5 11:05 2011-09-28 Show GitHub Exploit DB Packet Storm
251872 4.3 警告 A Tasty Pixel - WordPress 用 Elegant Grunge テーマにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-3856 2012-03-5 11:05 2011-09-28 Show GitHub Exploit DB Packet Storm
251873 4.3 警告 Graph Paper Press - WordPress 用 F8 Lite テーマにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-3855 2012-03-5 11:04 2011-09-28 Show GitHub Exploit DB Packet Storm
251874 4.3 警告 Quirm - WordPress 用 ZenLite テーマにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-3854 2012-03-5 11:04 2011-09-28 Show GitHub Exploit DB Packet Storm
251875 4.3 警告 ThemeHybrid - WordPress 用 Hybrid テーマにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-3853 2012-03-5 11:04 2011-09-28 Show GitHub Exploit DB Packet Storm
251876 4.3 警告 Theme4Press - WordPress 用 EvoLve テーマにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-3852 2012-03-5 11:03 2011-09-28 Show GitHub Exploit DB Packet Storm
251877 4.3 警告 DevPress - WordPress 用 News テーマにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-3851 2012-03-5 11:03 2011-09-28 Show GitHub Exploit DB Packet Storm
251878 4.3 警告 Bytes For All - WordPress 用 Atahualpa テーマにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-3850 2012-03-5 11:02 2011-09-28 Show GitHub Exploit DB Packet Storm
251879 5.1 警告 Mozilla Foundation - Bugzilla の xmlrpc.cgi におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2012-0453 2012-03-2 15:18 2012-02-9 Show GitHub Exploit DB Packet Storm
251880 9.3 危険 シスコシステムズ - Cisco Wireless LAN Controller デバイスにおける設定を読まれる脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-0371 2012-03-2 15:04 2012-02-29 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 31, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
259031 5.3 MEDIUM
Network
google android In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, while processing a specially crafted cfg80211 vendor command, a buffer over-read can oc… CWE-125
Out-of-bounds Read
CVE-2017-14905 2024-11-21 12:13 2017-12-6 Show GitHub Exploit DB Packet Storm
259032 5.3 MEDIUM
Network
google android In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, while processing the SENDACTIONFRAME IOCTL, a buffer over-read can occur if the payload… CWE-125
Out-of-bounds Read
CVE-2017-14903 2024-11-21 12:13 2017-12-6 Show GitHub Exploit DB Packet Storm
259033 7.8 HIGH
Local
google android In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, while processing the QCA_NL80211_VENDOR_SUBCMD_SET_TXPOWER_SCALE vendor command, in whi… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2017-14901 2024-11-21 12:13 2017-12-6 Show GitHub Exploit DB Packet Storm
259034 7.8 HIGH
Local
google android In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, while processing the QCA_NL80211_VENDOR_SUBCMD_GET_CHAIN_RSSI vendor command, in which … CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2017-14900 2024-11-21 12:13 2017-12-6 Show GitHub Exploit DB Packet Storm
259035 7.8 HIGH
Local
google android In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, while processing the QCA_NL80211_VENDOR_SUBCMD_SET_TXPOWER_SCALE_DECR_DB vendor command… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2017-14899 2024-11-21 12:13 2017-12-6 Show GitHub Exploit DB Packet Storm
259036 7.8 HIGH
Local
google android In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, while processing the QCA_NL80211_VENDOR_SUBCMD_SET_TXPOWER_SCALE vendor command, in whi… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2017-14898 2024-11-21 12:13 2017-12-6 Show GitHub Exploit DB Packet Storm
259037 7.8 HIGH
Local
google android In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, there is a memory allocation without a length field validation in the mobicore driver w… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2017-14896 2024-11-21 12:13 2017-12-6 Show GitHub Exploit DB Packet Storm
259038 6.5 MEDIUM
Adjacent
hikvision ds-2cd2432f-iw_firmware HikVision Wi-Fi IP cameras, when used in a wired configuration, allow physically proximate attackers to trigger association with an arbitrary access point by leveraging a default SSID with no WiFi en… CWE-311
Missing Encryption of Sensitive Data
CVE-2017-14953 2024-11-21 12:13 2017-12-2 Show GitHub Exploit DB Packet Storm
259039 7.5 HIGH
Network
restlet restlet Restlet Framework before 2.3.12 allows remote attackers to access arbitrary files via a crafted REST API HTTP request that conducts an XXE attack, because only general external entities (not paramete… CWE-611
XXE
CVE-2017-14949 2024-11-21 12:13 2017-12-1 Show GitHub Exploit DB Packet Storm
259040 7.5 HIGH
Network
restlet restlet Restlet Framework before 2.3.11, when using SimpleXMLProvider, allows remote attackers to access arbitrary files via an XXE attack in a REST API HTTP request. This affects use of the Jax-rs extension. CWE-611
XXE
CVE-2017-14868 2024-11-21 12:13 2017-12-1 Show GitHub Exploit DB Packet Storm