Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 2, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
251891 6.8 警告 シスコシステムズ - Cisco Unified Communications Manager および Cisco Business Edition における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2011-4487 2012-03-2 14:22 2012-02-29 Show GitHub Exploit DB Packet Storm
251892 7.8 危険 シスコシステムズ - Cisco Unified Communications Manager および Cisco Business Edition におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2011-4486 2012-03-2 14:22 2012-02-29 Show GitHub Exploit DB Packet Storm
251893 10 危険 Google
サムスン
日本エイサー
- Chromebook プラットフォームで稼働する Google Chrome における詳細不明な脆弱性 CWE-noinfo
情報不足
CVE-2012-1418 2012-03-1 16:30 2012-02-24 Show GitHub Exploit DB Packet Storm
251894 4.3 警告 KaduTeam - Kadu の History Window の実装におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-1410 2012-03-1 16:29 2012-02-29 Show GitHub Exploit DB Packet Storm
251895 4.9 警告 キングソフト株式会社 - Kingsoft Internet Security 2011 におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2012-0321 2012-03-1 12:04 2012-03-1 Show GitHub Exploit DB Packet Storm
251896 7.5 危険 Hulihan Applications - Hulihan BXR の folder/list における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-4963 2012-02-29 15:03 2010-07-22 Show GitHub Exploit DB Packet Storm
251897 7.5 危険 Dev-Team Typoheads - TYPO3 用 Webkit PDFs エクステンションにおける任意のコマンドを実行される脆弱性 CWE-noinfo
情報不足
CVE-2010-4962 2012-02-29 14:52 2011-10-9 Show GitHub Exploit DB Packet Storm
251898 7.5 危険 Dev-Team Typoheads - TYPO3 用 Webkit PDFs エクステンションにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-4961 2012-02-29 14:49 2011-10-9 Show GitHub Exploit DB Packet Storm
251899 4.3 警告 Martin Hesse - TYPO3 用 Branchenbuch エクステンションにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-4960 2012-02-29 14:43 2011-10-9 Show GitHub Exploit DB Packet Storm
251900 7.5 危険 PreProject.com - Pre Projects Pre Podcast Portal の login 機能における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-4959 2012-02-29 14:35 2011-10-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 2, 2026, 4:18 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
254011 8.1 HIGH
Adjacent
dbpower u818a_firmware The DBPOWER U818A WIFI quadcopter drone provides FTP access over its own local access point, and allows full file permissions to the anonymous user. The DBPower U818A WIFI quadcopter drone runs an FT… CWE-306
CWE-276
Missing Authentication for Critical Function
Incorrect Default Permissions 
CVE-2017-3209 2024-11-21 12:25 2018-07-25 Show GitHub Exploit DB Packet Storm
254012 9.8 CRITICAL
Network
gigabyte gb-bsi7h-6500_firmware
gb-bxi7-5775_firmware
GIGABYTE BRIX UEFI firmware does not cryptographically validate images prior to updating the system firmware. Additionally, the firmware updates are served over HTTP. An attacker can make arbitrary m… CWE-347
CWE-311
 Improper Verification of Cryptographic Signature
Missing Encryption of Sensitive Data
CVE-2017-3198 2024-11-21 12:25 2018-07-10 Show GitHub Exploit DB Packet Storm
254013 9.8 CRITICAL
Network
gigabyte gb-bsi7h-6500_firmware
gb-bxi7-5775_firmware
GIGABYTE BRIX UEFI firmware for the GB-BSi7H-6500 (version F6) and GB-BXi7-5775 (version F2) platforms does not securely implement BIOSWE, BLE, SMM_BWP, and PRx features. As a result, the BIOS is not… CWE-20
 Improper Input Validation 
CVE-2017-3197 2024-11-21 12:25 2018-07-10 Show GitHub Exploit DB Packet Storm
254014 9.8 CRITICAL
Network
themidnightcoders weborb_for_java The Java implementation of AMF3 deserializers used by WebORB for Java by Midnight Coders, version 5.1.1.0, allows external entity references (XXEs) from XML documents embedded within AMF3 messages. I… CWE-611
XXE
CVE-2017-3208 2024-11-21 12:25 2018-06-12 Show GitHub Exploit DB Packet Storm
254015 9.8 CRITICAL
Network
themidnightcoders weborb_for_java The Java implementations of AMF3 deserializers in WebORB for Java by Midnight Coders, version 5.1.1.0, derive class instances from java.io.Externalizable rather than the AMF3 specification's recommen… CWE-502
 Deserialization of Untrusted Data
CVE-2017-3207 2024-11-21 12:25 2018-06-12 Show GitHub Exploit DB Packet Storm
254016 9.8 CRITICAL
Network
exadel flamingo The Java implementation of AMF3 deserializers used by Flamingo amf-serializer by Exadel, version 2.2.0, allows external entity references (XXEs) from XML documents embedded within AMF3 messages. If t… CWE-611
XXE
CVE-2017-3206 2024-11-21 12:25 2018-06-12 Show GitHub Exploit DB Packet Storm
254017 8.1 HIGH
Network
pivotal spring-flex The Java implementations of AMF3 deserializers in Pivotal/Spring Spring-flex derive class instances from java.io.Externalizable rather than the AMF3 specification's recommendation of flash.utils.IExt… CWE-502
 Deserialization of Untrusted Data
CVE-2017-3203 2024-11-21 12:25 2018-06-12 Show GitHub Exploit DB Packet Storm
254018 8.1 HIGH
Network
exadel flamingo_amf-serializer The Java implementation of AMF3 deserializers used in Flamingo amf-serializer by Exadel, version 2.2.0 derives class instances from java.io.Externalizable rather than the AMF3 specification's recomme… CWE-502
 Deserialization of Untrusted Data
CVE-2017-3201 2024-11-21 12:25 2018-06-12 Show GitHub Exploit DB Packet Storm
254019 8.1 HIGH
Network
graniteds graniteds The Java implementation of GraniteDS, version 3.1.1.GA, AMF3 deserializers derives class instances from java.io.Externalizable rather than the AMF3 specification's recommendation of flash.utils.IExte… CWE-502
 Deserialization of Untrusted Data
CVE-2017-3199 2024-11-21 12:25 2018-06-12 Show GitHub Exploit DB Packet Storm
254020 9.8 CRITICAL
Network
exadel flamingo The Java implementation of AMF3 deserializers used in Flamingo amf-serializer by Exadel, version 2.2.0, may allow instantiation of arbitrary classes via their public parameter-less constructor and su… CWE-502
 Deserialization of Untrusted Data
CVE-2017-3202 2024-11-21 12:25 2018-06-12 Show GitHub Exploit DB Packet Storm