Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 20, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
251981	3.5	注意	レッドハット	-	Red Hat Network (RHN) Satellite におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-4346	2011-12-13 15:07	2011-12-7	Show	GitHub Exploit DB Packet Storm

251982	10	危険	Google サムスン日本エイサー	-	Chromebook プラットフォームで稼働する Google Chrome における詳細不明な脆弱性	CWE-noinfo 情報不足	CVE-2011-4719	2011-12-13 15:06	2011-12-8	Show	GitHub Exploit DB Packet Storm

251983	5	警告	Dream Property GmbH	-	DreamBox DM800 におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2011-4716	2011-12-13 15:06	2011-12-8	Show	GitHub Exploit DB Packet Storm

251984	5	警告	Koha	-	Koha および LibLime Koha におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2011-4715	2011-12-13 15:05	2011-11-25	Show	GitHub Exploit DB Packet Storm

251985	5	警告	Virtual Vertex	-	Virtual Vertex Muster におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2011-4714	2011-12-13 15:02	2011-12-8	Show	GitHub Exploit DB Packet Storm

251986	5	警告	osCSS	-	osCSS の catalog/content.php におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2011-4713	2011-12-13 15:01	2011-11-8	Show	GitHub Exploit DB Packet Storm

251987	5	警告	monoxide0184	-	Oxide WebServer におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2011-4712	2011-12-13 14:59	2011-12-8	Show	GitHub Exploit DB Packet Storm

251988	5	警告	Namazu Project	-	Namazu の namazu.cgi におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2011-4711	2011-12-13 14:57	2011-12-8	Show	GitHub Exploit DB Packet Storm

251989	7.5	危険	Lucid Crew	-	Pixie CMS における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2011-4710	2011-12-13 14:53	2011-12-8	Show	GitHub Exploit DB Packet Storm

251990	4.3	警告	Hotaru CMS	-	Hotaru CMS の Search プラグイン内にある Hotaru.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-4709	2011-12-13 14:52	2011-12-8	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 20, 2026, 4:14 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
258501	8.8	HIGH Local	xen citrix debian	xen xenserver debian_linux	arch/x86/mm.c in Xen allows local PV guest OS users to gain host OS privileges via vectors related to map_grant_ref.	CWE-120 Classic Buffer Overflow	CVE-2017-12137	2024-11-21 12:08	2017-08-24	Show	GitHub Exploit DB Packet Storm

258502	7.8	HIGH Local	xen citrix debian	xen xenserver debian_linux	Race condition in the grant table code in Xen 4.6.x through 4.9.x allows local guest OS administrators to cause a denial of service (free list corruption and host crash) or gain privileges on the hos…	CWE-362 Race Condition	CVE-2017-12136	2024-11-21 12:08	2017-08-24	Show	GitHub Exploit DB Packet Storm

258503	8.8	HIGH Local	xen citrix debian	xen xenserver debian_linux	Xen allows local OS guest users to cause a denial of service (crash) or possibly obtain sensitive information or gain privileges via vectors involving transitive grants.	CWE-682 Incorrect Calculation	CVE-2017-12135	2024-11-21 12:08	2017-08-24	Show	GitHub Exploit DB Packet Storm

258504	8.8	HIGH Local	xen citrix	xen xenserver	The xen_biovec_phys_mergeable function in drivers/xen/biomerge.c in Xen might allow local OS guest users to corrupt block device data streams and consequently obtain sensitive memory information, cau…	CWE-682 Incorrect Calculation	CVE-2017-12134	2024-11-21 12:08	2017-08-24	Show	GitHub Exploit DB Packet Storm

258505	8.8	HIGH Network	supervisord fedoraproject debian redhat	supervisor fedora debian_linux cloudforms	The XML-RPC server in supervisor before 3.0.1, 3.1.x before 3.1.4, 3.2.x before 3.2.4, and 3.3.x before 3.3.3 allows remote authenticated users to execute arbitrary commands via a crafted XML-RPC req…	CWE-276 Incorrect Default Permissions	CVE-2017-11610	2024-11-21 12:08	2017-08-23	Show	GitHub Exploit DB Packet Storm

258506	7.8	HIGH Local	razer	synapse	Razer Synapse 2.20.15.1104 and earlier uses weak permissions for the Devices directory, which allows local users to gain privileges via a Trojan horse (1) RazerConfigNative.dll or (2) RazerConfigNati…	CWE-732 Incorrect Permission Assignment for Critical Resource	CVE-2017-11653	2024-11-21 12:08	2017-08-19	Show	GitHub Exploit DB Packet Storm

258507	8.4	HIGH Local	razer	synapse	Razer Synapse 2.20.15.1104 and earlier uses weak permissions for the CrashReporter directory, which allows local users to gain privileges via a Trojan horse dbghelp.dll file.	CWE-732 Incorrect Permission Assignment for Critical Resource	CVE-2017-11652	2024-11-21 12:08	2017-08-19	Show	GitHub Exploit DB Packet Storm

258508	6.5	MEDIUM Network	mindwerks	wildmidi	The _WM_SetupMidiEvent function in internal_midi.c:2122 in WildMIDI 0.4.2 can cause a denial of service (invalid memory read and application crash) via a crafted mid file.	CWE-125 Out-of-bounds Read	CVE-2017-11664	2024-11-21 12:08	2017-08-18	Show	GitHub Exploit DB Packet Storm

258509	6.5	MEDIUM Network	mindwerks	wildmidi	The _WM_SetupMidiEvent function in internal_midi.c:2315 in WildMIDI 0.4.2 can cause a denial of service (invalid memory read and application crash) via a crafted mid file.	CWE-125 Out-of-bounds Read	CVE-2017-11663	2024-11-21 12:08	2017-08-18	Show	GitHub Exploit DB Packet Storm

258510	7.5	HIGH Network	mindwerks	wildmidi	The _WM_ParseNewMidi function in f_midi.c in WildMIDI 0.4.2 can cause a denial of service (invalid memory read and application crash) via a crafted mid file.	CWE-125 Out-of-bounds Read	CVE-2017-11662	2024-11-21 12:08	2017-08-18	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed