Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 22, 2026, 6:01 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
252311 9.3 危険 X.Org Foundation
サイバートラスト株式会社
レッドハット
- X.Org の xrdb.c における任意のコマンドを実行される脆弱性 CWE-20
不適切な入力確認
CVE-2011-0465 2012-04-17 17:13 2011-03-1 Show GitHub Exploit DB Packet Storm
252312 5 警告 PNG Development Group - libpng の png_err 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2011-2691 2012-04-17 17:09 2011-07-17 Show GitHub Exploit DB Packet Storm
252313 5 警告 光洋電子工業 - 複数の光洋電子工業社製品の Web サーバにおけるサービス運用妨害 (リソース消費) の脆弱性 CWE-399
リソース管理の問題
CVE-2012-1809 2012-04-17 16:52 2012-04-11 Show GitHub Exploit DB Packet Storm
252314 10 危険 光洋電子工業 - 複数の光洋電子工業社製品の Web サーバおける不特定の機能を実行される脆弱性 CWE-287
不適切な認証
CVE-2012-1808 2012-04-17 16:52 2012-04-11 Show GitHub Exploit DB Packet Storm
252315 4.3 警告 光洋電子工業 - 複数の光洋電子工業社製品の Web サーバにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-1807 2012-04-17 16:51 2012-04-11 Show GitHub Exploit DB Packet Storm
252316 7.5 危険 光洋電子工業 - 複数の光洋電子工業社製品の ECOM Ethernet モジュールにおけるアクセス権を取得される脆弱性 CWE-287
不適切な認証
CVE-2012-1806 2012-04-17 16:50 2012-04-11 Show GitHub Exploit DB Packet Storm
252317 10 危険 光洋電子工業 - 複数の光洋電子工業社製品の ECOM Ethernet モジュールにおけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2012-1805 2012-04-17 16:47 2012-04-11 Show GitHub Exploit DB Packet Storm
252318 7.5 危険 libarchive - libarchive におけるサービス運用妨害 (アプリケーションクラッシュ) の脆弱性 CWE-399
リソース管理の問題
CVE-2011-1779 2012-04-17 16:46 2012-04-13 Show GitHub Exploit DB Packet Storm
252319 7.5 危険 libarchive - libarchive におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2010-4666 2012-04-17 16:29 2012-04-13 Show GitHub Exploit DB Packet Storm
252320 9.3 危険 Mozilla Foundation - Mozilla Firefox および Thunderbird における権限を取得される脆弱性 CWE-94
コード・インジェクション
CVE-2011-3655 2012-04-16 18:09 2011-11-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 23, 2026, 4 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
259491 3.7 LOW
Network
ibm db2
db2_connect
IBM DB2 9.7, 10,1, 10.5, and 11.1 is vulnerable to an unauthorized command that allows the database to be activated when authentication type is CLIENT. IBM X-Force ID: 129830. CWE-287
Improper Authentication
CVE-2017-1520 2024-11-21 12:22 2017-09-13 Show GitHub Exploit DB Packet Storm
259492 5.9 MEDIUM
Network
ibm db2
db2_connect
IBM DB2 10.5 and 11.1 contains a denial of service vulnerability. A remote user can cause disruption of service for DB2 Connect Server setup with a particular configuration. IBM X-Force ID: 129829. CWE-20
 Improper Input Validation 
CVE-2017-1519 2024-11-21 12:22 2017-09-13 Show GitHub Exploit DB Packet Storm
259493 5.4 MEDIUM
Network
ibm cognos_analytics IBM Cognos Analytics 11.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially … CWE-79
Cross-site Scripting
CVE-2017-1535 2024-11-21 12:22 2017-08-30 Show GitHub Exploit DB Packet Storm
259494 8.8 HIGH
Network
cs-cart cs-cart_multivendor
cs-cart
Cross-site request forgery (CSRF) vulnerability in CS-Cart Japanese Edition v4.3.10 and earlier (excluding v2 and v3), CS-Cart Multivendor Japanese Edition v4.3.10 and earlier (excluding v2 and v3) a… CWE-352
 Origin Validation Error
CVE-2017-2138 2024-11-21 12:22 2017-08-3 Show GitHub Exploit DB Packet Storm
259495 9.8 CRITICAL
Network
buffalo wapm-1166d_firmware
wapm-apg600h_firmware
WAPM-1166D firmware Ver.1.2.7 and earlier, WAPM-APG600H firmware Ver.1.16.1 and earlier allows remote attackers to bypass authentication and access the configuration interface via unspecified vectors. CWE-287
Improper Authentication
CVE-2017-2126 2024-11-21 12:22 2017-07-22 Show GitHub Exploit DB Packet Storm
259496 4.8 MEDIUM
Network
cybozu garoon Cross-site scripting vulnerability in Cybozu Garoon 3.0.0 to 4.2.4 allows remote attackers to inject arbitrary web script or HTML via application menu. CWE-79
Cross-site Scripting
CVE-2017-2146 2024-11-21 12:22 2017-07-7 Show GitHub Exploit DB Packet Storm
259497 5.4 MEDIUM
Network
cybozu garoon Session fixation vulnerability in Cybozu Garoon 4.0.0 to 4.2.4 allows remote attackers to perform arbitrary operations via unspecified vectors. CWE-384
 Session Fixation
CVE-2017-2145 2024-11-21 12:22 2017-07-7 Show GitHub Exploit DB Packet Storm
259498 5.4 MEDIUM
Network
cybozu garoon Cybozu Garoon 3.0.0 to 4.2.4 may allow an attacker to lock another user's file through a specially crafted page. NVD-CWE-noinfo
CVE-2017-2144 2024-11-21 12:22 2017-07-7 Show GitHub Exploit DB Packet Storm
259499 5.4 MEDIUM
Network
tenable nessus Cross-site scripting vulnerability in Nessus versions 6.8.0, 6.8.1, 6.9.0, 6.9.1 and 6.9.2 allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors. CWE-79
Cross-site Scripting
CVE-2017-2122 2024-11-21 12:22 2017-05-13 Show GitHub Exploit DB Packet Storm
259500 7.5 HIGH
Network
seil x86_fuji_firmware
bpv_4_firmware
x1_firmware
x2_firmware
b1_firmware
SEIL/x86 Fuji 1.70 to 5.62, SEIL/BPV4 5.00 to 5.62, SEIL/X1 1.30 to 5.62, SEIL/X2 1.30 to 5.62, SEIL/B1 1.00 to 5.62 allows remote attackers to cause a denial of service via specially crafted IPv4 UD… CWE-20
 Improper Input Validation 
CVE-2017-2153 2024-11-21 12:22 2017-04-29 Show GitHub Exploit DB Packet Storm