Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 21, 2026, 2 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
251891 6.8 警告 Mozilla Foundation - Bugzilla の post_bug.cgi におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2011-3668 2012-01-5 16:26 2011-11-20 Show GitHub Exploit DB Packet Storm
251892 6.8 警告 Mozilla Foundation - Bugzilla の User.offer_account_by_email の WebService メソッドにおける脆弱性 CWE-287
不適切な認証 		CVE-2011-3667 2012-01-5 16:23 2011-12-17 Show GitHub Exploit DB Packet Storm
251893 4.3 警告 Mozilla Foundation - Bugzilla におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-3657 2012-01-5 16:21 2011-10-27 Show GitHub Exploit DB Packet Storm
251894 9.3 危険 Steve Baker - PLIB の util/ulError.cxx 内の ulSetError 関数におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2011-4620 2012-01-5 16:21 2011-12-31 Show GitHub Exploit DB Packet Storm
251895 1.2 注意 Celery - virtualenv の virtualenv.py における任意のファイルを上書きされる脆弱性 CWE-59
リンク解釈の問題 		CVE-2011-4617 2012-01-5 16:20 2011-12-31 Show GitHub Exploit DB Packet Storm
251896 7.5 危険 Novell - Novell XTier framework の HTTP サーバにおける整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2011-1710 2012-01-5 16:19 2011-12-31 Show GitHub Exploit DB Packet Storm
251897 4.3 警告 JJWDesign - PHP Booking Calendar の details_view.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-5045 2012-01-5 16:14 2011-12-30 Show GitHub Exploit DB Packet Storm
251898 7.2 危険 SopCast - SopCast における任意のコードを実行される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-5044 2012-01-5 16:13 2011-12-30 Show GitHub Exploit DB Packet Storm
251899 4.3 警告 Tomatosoft - TomatoSoft Free Mp3 Player におけるサービス運用妨害 (アプリケーションクラッシュ) の脆弱性 CWE-20
不適切な入力確認 		CVE-2011-5043 2012-01-5 16:12 2011-12-30 Show GitHub Exploit DB Packet Storm
251900 4.3 警告 gphemsley - SASHA の inc/lib/lib.base.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-5042 2012-01-5 16:11 2011-12-30 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 21, 2026, 4:10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
258451 6.4 MEDIUM
Physics 		gnome gnome_display_manager A flaw was discovered in gdm 3.24.1 where gdm greeter was no longer setting the ran_once boolean during autologin. If autologin was enabled for a victim, an attacker could simply select 'login as ano… CWE-665
 Improper Initialization 		CVE-2017-12164 2024-11-21 12:08 2018-07-27 Show GitHub Exploit DB Packet Storm
258452 7.1 HIGH
Adjacent 		samba
redhat
debian 		samba
enterprise_linux_desktop
enterprise_linux_workstation
enterprise_linux_server
gluster_storage
debian_linux 		An information leak flaw was found in the way SMB1 protocol was implemented by Samba before 4.4.16, 4.5.x before 4.5.14, and 4.6.x before 4.6.8. A malicious client could use this flaw to dump server … - CVE-2017-12163 2024-11-21 12:08 2018-07-27 Show GitHub Exploit DB Packet Storm
258453 8.8 HIGH
Network 		opcfoundation ua-.net-legacy Unsigned versions of the DLLs distributed by the OPC Foundation may be replaced with malicious code. CWE-20
 Improper Input Validation  		CVE-2017-12070 2024-11-21 12:08 2018-06-15 Show GitHub Exploit DB Packet Storm
258454 7.8 HIGH
Local 		opcfoundation local_discovery_server The OPC Foundation Local Discovery Server (LDS) before 1.03.367 is installed as a Windows Service without adding double quotes around the opcualds.exe executable path, which might allow local users t… CWE-428
 Unquoted Search Path or Element 		CVE-2017-11672 2024-11-21 12:08 2018-06-14 Show GitHub Exploit DB Packet Storm
258455 7.2 HIGH
Network 		synology router_manager Command injection vulnerability in EZ-Internet in Synology Router Manager (SRM) before 1.1.6-6931 allows remote authenticated users to execute arbitrary command via the username parameter. CWE-77
Command Injection 		CVE-2017-12078 2024-11-21 12:08 2018-06-8 Show GitHub Exploit DB Packet Storm
258456 7.2 HIGH
Network 		synology diskstation_manager Command injection vulnerability in EZ-Internet in Synology DiskStation Manager (DSM) before 6.2-23739 allows remote authenticated users to execute arbitrary command via the username parameter. CWE-77
Command Injection 		CVE-2017-12075 2024-11-21 12:08 2018-06-8 Show GitHub Exploit DB Packet Storm
258457 7.5 HIGH
Network 		rockwellautomation micrologix_1400_b_firmware An exploitable file write vulnerability exists in the memory module functionality of Allen Bradley Micrologix 1400 Series B FRN 21.2 and before. A specially crafted packet can cause a file write resu… CWE-200
Information Exposure 		CVE-2017-12092 2024-11-21 12:08 2018-06-5 Show GitHub Exploit DB Packet Storm
258458 8.0 HIGH
Adjacent 		moxa edr-810_firmware An exploitable Weak Cryptography for Passwords vulnerability exists in the web server functionality of Moxa EDR-810 V4.1 build 17030317. An attacker could intercept weakly encrypted passwords and cou… CWE-327
 Use of a Broken or Risky Cryptographic Algorithm 		CVE-2017-12129 2024-11-21 12:08 2018-05-15 Show GitHub Exploit DB Packet Storm
258459 7.5 HIGH
Network 		moxa edr-810_firmware An exploitable information disclosure vulnerability exists in the Server Agent functionality of Moxa EDR-810 V4.1 build 17030317. A specially crafted TCP packet can cause information disclosure. An a… CWE-200
Information Exposure 		CVE-2017-12128 2024-11-21 12:08 2018-05-15 Show GitHub Exploit DB Packet Storm
258460 4.4 MEDIUM
Local 		moxa edr-810_firmware A password storage vulnerability exists in the operating system functionality of Moxa EDR-810 V4.1 build 17030317. An attacker with shell access could extract passwords in clear text from the device. CWE-522
 Insufficiently Protected Credentials 		CVE-2017-12127 2024-11-21 12:08 2018-05-15 Show GitHub Exploit DB Packet Storm