Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 10, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
252061 7.2 危険 マイクロソフト - Microsoft Windows の win32k.sys における権限昇格の脆弱性 CWE-Other
その他 		CVE-2011-1232 2011-05-9 12:09 2011-04-12 Show GitHub Exploit DB Packet Storm
252062 7.2 危険 マイクロソフト - Microsoft Windows の win32k.sys における権限昇格の脆弱性 CWE-Other
その他 		CVE-2011-1231 2011-05-9 12:08 2011-04-12 Show GitHub Exploit DB Packet Storm
252063 7.2 危険 マイクロソフト - Microsoft Windows の win32k.sys における権限昇格の脆弱性 CWE-Other
その他 		CVE-2011-1230 2011-05-9 12:07 2011-04-12 Show GitHub Exploit DB Packet Storm
252064 7.2 危険 マイクロソフト - Microsoft Windows の win32k.sys における権限昇格の脆弱性 CWE-Other
その他 		CVE-2011-1229 2011-05-9 12:06 2011-04-12 Show GitHub Exploit DB Packet Storm
252065 7.2 危険 マイクロソフト - Microsoft Windows の win32k.sys における権限昇格の脆弱性 CWE-Other
その他 		CVE-2011-1228 2011-05-9 12:04 2011-04-12 Show GitHub Exploit DB Packet Storm
252066 7.2 危険 マイクロソフト - Microsoft Windows の win32k.sys における権限昇格の脆弱性 CWE-Other
その他 		CVE-2011-1227 2011-05-9 12:03 2011-04-12 Show GitHub Exploit DB Packet Storm
252067 7.2 危険 マイクロソフト - Microsoft Windows の win32k.sys における権限昇格の脆弱性 CWE-Other
その他 		CVE-2011-1226 2011-05-9 12:02 2011-04-12 Show GitHub Exploit DB Packet Storm
252068 7.2 危険 マイクロソフト - Microsoft Windows の win32k.sys における権限昇格の脆弱性 CWE-Other
その他 		CVE-2011-1225 2011-05-9 12:01 2011-04-12 Show GitHub Exploit DB Packet Storm
252069 7.2 危険 マイクロソフト - Microsoft Windows の win32k.sys における権限昇格の脆弱性 CWE-Other
その他 		CVE-2011-0677 2011-05-9 11:59 2011-04-12 Show GitHub Exploit DB Packet Storm
252070 7.2 危険 マイクロソフト - Microsoft Windows の win32k.sys における権限昇格の脆弱性 CWE-Other
その他 		CVE-2011-0676 2011-05-9 11:57 2011-04-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 10, 2026, 4:58 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
255501 6.1 MEDIUM
Network 		pressforward pressforward Core\Admin\PFTemplater.php in the PressForward plugin 4.3.0 and earlier for WordPress has XSS in the PATH_INFO to wp-admin/admin.php, related to PHP_SELF. CWE-79
Cross-site Scripting 		CVE-2017-12948 2024-11-21 12:10 2017-08-19 Show GitHub Exploit DB Packet Storm
255502 7.2 HIGH
Network 		easymodal_project easy_modal classes\controller\admin\modals.php in the Easy Modal plugin before 2.1.0 for WordPress has SQL injection in an untrash action with the id, ids, or modal parameter to wp-admin/admin.php, exploitable … CWE-89
SQL Injection 		CVE-2017-12947 2024-11-21 12:10 2017-08-19 Show GitHub Exploit DB Packet Storm
255503 7.2 HIGH
Network 		easymodal_project easy_modal classes\controller\admin\modals.php in the Easy Modal plugin before 2.1.0 for WordPress has SQL injection in a delete action with the id, ids, or modal parameter to wp-admin/admin.php, exploitable by… CWE-89
SQL Injection 		CVE-2017-12946 2024-11-21 12:10 2017-08-19 Show GitHub Exploit DB Packet Storm
255504 5.4 MEDIUM
Network 		spring_batch_admin_project spring_batch_admin Stored Cross-site scripting (XSS) vulnerability in Spring Batch Admin before 1.3.0 allows remote authenticated users to inject arbitrary JavaScript or HTML via the file upload functionality. CWE-79
Cross-site Scripting 		CVE-2017-12882 2024-11-21 12:10 2017-08-19 Show GitHub Exploit DB Packet Storm
255505 8.8 HIGH
Network 		spring_batch_admin_project spring_batch_admin Cross-site request forgery (CSRF) vulnerability in the Spring Batch Admin before 1.3.0 allows remote attackers to hijack the authentication of unspecified victims and submit arbitrary requests, such … CWE-352
 Origin Validation Error 		CVE-2017-12881 2024-11-21 12:10 2017-08-19 Show GitHub Exploit DB Packet Storm
255506 9.8 CRITICAL
Network 		nexusphp_project nexusphp SQL injection vulnerability in reports.php in NexusPHP 1.5 allows remote attackers to execute arbitrary SQL commands via the delreport parameter. CWE-89
SQL Injection 		CVE-2017-12776 2024-11-21 12:10 2017-08-19 Show GitHub Exploit DB Packet Storm
255507 5.9 MEDIUM
Network 		netapp data_ontap NetApp Data ONTAP before 8.2.5, when operating in 7-Mode in NFS environments, allows remote attackers to cause a denial of service via unspecified vectors. CWE-20
 Improper Input Validation  		CVE-2017-12859 2024-11-21 12:10 2017-08-19 Show GitHub Exploit DB Packet Storm
255508 6.1 MEDIUM
Network 		nexusphp_project nexusphp Cross-Site Scripting (XSS) exists in NexusPHP 1.5 via the type parameter to shoutbox.php. CWE-79
Cross-site Scripting 		CVE-2017-12680 2024-11-21 12:10 2017-08-19 Show GitHub Exploit DB Packet Storm
255509 7.5 HIGH
Network 		libtiff libtiff The TIFFReadDirEntryArray function in tif_read.c in LibTIFF 4.0.8 mishandles memory allocation for short files, which allows remote attackers to cause a denial of service (allocation failure and appl… CWE-770
 Allocation of Resources Without Limits or Throttling 		CVE-2017-12944 2024-11-21 12:10 2017-08-19 Show GitHub Exploit DB Packet Storm
255510 9.8 CRITICAL
Network 		dlink dir-600_b1_firmware D-Link DIR-600 Rev Bx devices with v2.x firmware allow remote attackers to read passwords via a model/__show_info.php?REQUIRE_FILE= absolute path traversal attack, as demonstrated by discovering the … CWE-22
Path Traversal 		CVE-2017-12943 2024-11-21 12:10 2017-08-19 Show GitHub Exploit DB Packet Storm