Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 31, 2026, 4 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
251991	5	警告	Broadwin アドバンテック株式会社	-	Advantech/BroadWin WebAccess における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2012-0236	2012-02-23 11:23	2012-02-21	Show	GitHub Exploit DB Packet Storm

251992	6	警告	Broadwin アドバンテック株式会社	-	Advantech/BroadWin WebAccess におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2012-0235	2012-02-23 11:22	2012-02-21	Show	GitHub Exploit DB Packet Storm

251993	7.5	危険	Broadwin アドバンテック株式会社	-	Advantech/BroadWin WebAccess における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2012-0234	2012-02-23 11:21	2012-02-21	Show	GitHub Exploit DB Packet Storm

251994	4.3	警告	Broadwin アドバンテック株式会社	-	Advantech/BroadWin WebAccess におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-0233	2012-02-23 11:20	2012-02-21	Show	GitHub Exploit DB Packet Storm

251995	10	危険	Broadwin アドバンテック株式会社	-	Advantech/BroadWin WebAccess の ActiveX コントロールにおけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2011-4526	2012-02-23 11:19	2012-02-21	Show	GitHub Exploit DB Packet Storm

251996	7.5	危険	Broadwin アドバンテック株式会社	-	Advantech/BroadWin WebAccess における任意のコードを実行される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-4525	2012-02-23 11:18	2012-02-21	Show	GitHub Exploit DB Packet Storm

251997	7.5	危険	Broadwin アドバンテック株式会社	-	Advantech/BroadWin WebAccess におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2011-4524	2012-02-23 11:02	2012-02-21	Show	GitHub Exploit DB Packet Storm

251998	4.3	警告	Broadwin アドバンテック株式会社	-	Advantech/BroadWin WebAccess の bwview.asp におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-4523	2012-02-23 11:01	2012-02-21	Show	GitHub Exploit DB Packet Storm

251999	4.3	警告	Broadwin アドバンテック株式会社	-	Advantech/BroadWin WebAccess の bwview.asp におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-4522	2012-02-23 10:48	2012-02-21	Show	GitHub Exploit DB Packet Storm

252000	7.5	危険	Broadwin アドバンテック株式会社	-	Advantech/BroadWin WebAccess における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2011-4521	2012-02-23 10:40	2012-02-21	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 31, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
259061	5.4	MEDIUM Network	atlassian	fisheye crucible	The administration user deletion resource in Atlassian Fisheye and Crucible before version 4.4.2 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulner…	CWE-79 Cross-site Scripting	CVE-2017-14587	2024-11-21 12:13	2017-10-12	Show	GitHub Exploit DB Packet Storm

259062	7.5	HIGH Network	trapezegroup	transitmaster	Trapeze TransitMaster is vulnerable to information disclosure (emails / hashed passwords) via a modified userID field in JSON data to ManageSubscriber.aspx/GetSubscriber. NOTE: this software is indep…	CWE-200 Information Exposure	CVE-2017-14943	2024-11-21 12:13	2017-10-10	Show	GitHub Exploit DB Packet Storm

259063	5.6	MEDIUM Local	qemu	qemu	Race condition in the v9fs_xattrwalk function in hw/9pfs/9p.c in QEMU (aka Quick Emulator) allows local guest OS users to obtain sensitive information from host heap memory via vectors related to rea…	CWE-362 Race Condition	CVE-2017-15038	2024-11-21 12:13	2017-10-10	Show	GitHub Exploit DB Packet Storm

259064	9.8	CRITICAL Network	flexense	syncbreeze	Buffer overflow in Sync Breeze Enterprise 10.0.28 allows remote attackers to have unspecified impact via a long username parameter to /login.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2017-14980	2024-11-21 12:13	2017-10-10	Show	GitHub Exploit DB Packet Storm

259065	6.5	MEDIUM Network	gridgain	gridgain	Directory traversal vulnerability in the Visor GUI Console in GridGain before 1.7.16, 1.8.x before 1.8.12, 1.9.x before 1.9.7, and 8.x before 8.1.5 allows remote authenticated users to read arbitrary…	CWE-22 Path Traversal	CVE-2017-14614	2024-11-21 12:13	2017-10-10	Show	GitHub Exploit DB Packet Storm

259066	7.5	HIGH Network	digium	asterisk certified_asterisk	In Asterisk 11.x before 11.25.3, 13.x before 13.17.2, and 14.x before 14.6.2 and Certified Asterisk 11.x before 11.6-cert18 and 13.x before 13.13-cert6, insufficient RTCP packet validation could allo…	CWE-200 Information Exposure	CVE-2017-14603	2024-11-21 12:13	2017-10-10	Show	GitHub Exploit DB Packet Storm

259067	5.4	MEDIUM Network	identicard	two-reader_controller_configuration_manager	IDenticard Two-Reader Controller Configuration Manager 1.18.8 (396) is vulnerable to Stored Cross-Site Scripting (XSS) via the notes field in /~user_handler?file=logged_in.shtm (aka the edit user pag…	CWE-79 Cross-site Scripting	CVE-2017-14973	2024-11-21 12:13	2017-10-9	Show	GitHub Exploit DB Packet Storm

259068	7.5	HIGH Network	infocus	mondopad	InFocus Mondopad 2.2.08 is vulnerable to authentication bypass when accessing uploaded files by entering Control-Alt-Delete, and then using Task Manager to reach a file.	CWE-287 Improper Authentication	CVE-2017-14972	2024-11-21 12:13	2017-10-9	Show	GitHub Exploit DB Packet Storm

259069	5.5	MEDIUM Local	infocuscorp	infocus_mondopad	Infocus Mondopad 2.2.08 is vulnerable to a Hashed Credential Disclosure vulnerability. The attacker provides a crafted Microsoft Office document containing a link that has a UNC pathname associated w…	CWE-200 Information Exposure	CVE-2017-14971	2024-11-21 12:13	2017-10-9	Show	GitHub Exploit DB Packet Storm

259070	5.5	MEDIUM Local	lame_project	lame	LAME 3.99, 3.99.1, 3.99.2, 3.99.3, 3.99.4, 3.99.5, 3.98.4, 3.98.2 and 3.98 has a heap-based buffer over-read in fill_buffer in libmp3lame/util.c, related to lame_encode_buffer_sample_t in libmp3lame/…	CWE-125 Out-of-bounds Read	CVE-2017-15045	2024-11-21 12:13	2017-10-6	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed