Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 2, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
252171	7.5	危険	Google	-	Google Chrome における詳細不明な脆弱性	CWE-noinfo 情報不足	CVE-2011-3953	2012-02-13 10:34	2012-02-8	Show	GitHub Exploit DB Packet Storm

252172	4.3	警告	EPiServer	-	EPiServer CMS の管理インタフェースにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-1034	2012-02-10 15:04	2012-02-8	Show	GitHub Exploit DB Packet Storm

252173	6	警告	EPiServer	-	EPiServer CMS における WebAdmins のアクセス権を取得される脆弱性	CWE-noinfo 情報不足	CVE-2012-1031	2012-02-10 15:04	2012-02-8	Show	GitHub Exploit DB Packet Storm

252174	5	警告	OfficeSIP Communications	-	OfficeSIP Server におけるサービス運用妨害 (デーモンクラッシュ) の脆弱性	CWE-20 不適切な入力確認	CVE-2012-1008	2012-02-10 15:03	2012-02-8	Show	GitHub Exploit DB Packet Storm

252175	2.1	注意	Foswiki	-	Foswiki の UI/Register.pm におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-1004	2012-02-10 15:02	2012-02-8	Show	GitHub Exploit DB Packet Storm

252176	10	危険	Zakon Group	-	OpenConf における詳細不明な脆弱性	CWE-noinfo 情報不足	CVE-2012-1002	2012-02-10 15:01	2012-02-2	Show	GitHub Exploit DB Packet Storm

252177	7.5	危険	Tube Ace	-	Tube Ace の mobile/search/index.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2012-1029	2012-02-10 15:00	2012-02-8	Show	GitHub Exploit DB Packet Storm

252178	4.3	警告	Simple Groupware Solutions	-	SimpleGroupware の bin/index.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-1028	2012-02-10 14:59	2012-02-2	Show	GitHub Exploit DB Packet Storm

252179	7.5	危険	Johannes Ekberg	-	XRay CMS の login2.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2012-1026	2012-02-10 14:15	2012-02-8	Show	GitHub Exploit DB Packet Storm

252180	5	警告	Dream Property GmbH	-	Enigma2 Webinterface のファイルにおける絶対パストラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2012-1025	2012-02-10 14:01	2012-02-8	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 2, 2026, 4:18 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
259111	7.8	HIGH Local	irfanview	irfanview pdf	IrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .pdf file, related to "Data from Faul…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2017-15241	2024-11-21 12:14	2017-10-12	Show	GitHub Exploit DB Packet Storm

259112	7.8	HIGH Local	irfanview	irfanview pdf	IrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .pdf file, related to a "Read Access …	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2017-15240	2024-11-21 12:14	2017-10-12	Show	GitHub Exploit DB Packet Storm

259113	7.8	HIGH Local	irfanview	pdf irfanview	IrfanView 4.44 - 32bit with PDF plugin version 4.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .pdf file, related to "Data from Faulting Add…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2017-15239	2024-11-21 12:14	2017-10-12	Show	GitHub Exploit DB Packet Storm

259114	7.5	HIGH Network	gnu	libextractor	In GNU Libextractor 1.4, there is a NULL Pointer Dereference in flac_metadata in flac_extractor.c.	CWE-476 NULL Pointer Dereference	CVE-2017-15267	2024-11-21 12:14	2017-10-12	Show	GitHub Exploit DB Packet Storm

259115	5.5	MEDIUM Local	gnu	libextractor	In GNU Libextractor 1.4, there is a Divide-By-Zero in EXTRACTOR_wav_extract_method in wav_extractor.c via a zero sample rate.	CWE-369 Divide By Zero	CVE-2017-15266	2024-11-21 12:14	2017-10-12	Show	GitHub Exploit DB Packet Storm

259116	9.8	CRITICAL Network	flexense	vx_search	Flexense VX Search Enterprise 10.1.12 is vulnerable to a buffer overflow via an empty POST request to a long URI beginning with a /../ substring. This allows remote attackers to execute arbitrary cod…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2017-15220	2024-11-21 12:14	2017-10-11	Show	GitHub Exploit DB Packet Storm

259117	8.8	HIGH Network	graphicsmagick debian	graphicsmagick debian_linux	ReadOneJNGImage in coders/png.c in GraphicsMagick 1.3.26 has a use-after-free issue when the height or width is zero, related to ReadJNGImage.	CWE-416 Use After Free	CVE-2017-15238	2024-11-21 12:14	2017-10-11	Show	GitHub Exploit DB Packet Storm

259118	7.5	HIGH Network	tiandy	tiandy_ip_camera_firmware	Tiandy IP cameras 5.56.17.120 do not properly restrict a certain proprietary protocol, which allows remote attackers to read settings via a crafted request to TCP port 3001, as demonstrated by config…	CWE-200 Information Exposure	CVE-2017-15236	2024-11-21 12:14	2017-10-11	Show	GitHub Exploit DB Packet Storm

259119	7.5	HIGH Network	horde	groupware	The File Manager (gollem) module 3.0.11 in Horde Groupware 5.2.21 allows remote attackers to bypass Horde authentication for file downloads via a crafted fn parameter that corresponds to the exact fi…	CWE-425 Direct Request ('Forced Browsing')	CVE-2017-15235	2024-11-21 12:14	2017-10-11	Show	GitHub Exploit DB Packet Storm

259120	6.5	MEDIUM Network	libjpeg-turbo	libjpeg-turbo	libjpeg-turbo 1.5.2 has a NULL Pointer Dereference in jdpostct.c and jquant1.c via a crafted JPEG file.	CWE-476 NULL Pointer Dereference	CVE-2017-15232	2024-11-21 12:14	2017-10-11	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed