Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
228071	5	警告	VMware	-	VMware View におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2012-5978	2012-12-20 15:27	2012-12-13	Show	GitHub Exploit DB Packet Storm

228072	3.5	注意	IBM	-	IBM Lotus Foundations Start におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-4848	2012-12-20 15:23	2012-12-12	Show	GitHub Exploit DB Packet Storm

228073	4.3	警告	IBM	-	IBM Lotus Notes における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2012-4846	2012-12-20 15:21	2012-12-12	Show	GitHub Exploit DB Packet Storm

228074	3.3	注意	IBM	-	Linux 上で稼働する IBM ASU および BoMC における任意のファイルを上書きされる脆弱性	CWE-59 リンク解釈の問題	CVE-2012-3329	2012-12-20 15:11	2012-12-19	Show	GitHub Exploit DB Packet Storm

228075	4.3	警告	シスコシステムズ	-	Cisco Wireless LAN Controller デバイスにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-6007	2012-12-20 14:57	2012-12-13	Show	GitHub Exploit DB Packet Storm

228076	6.8	警告	シスコシステムズ	-	Cisco Wireless LAN Controller デバイスにおけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2012-5992	2012-12-20 14:52	2012-12-13	Show	GitHub Exploit DB Packet Storm

228077	6.3	警告	シスコシステムズ	-	Cisco Wireless LAN Controller デバイスにおけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2012-5991	2012-12-20 14:46	2012-12-13	Show	GitHub Exploit DB Packet Storm

228078	9.3	危険	シスコシステムズ	-	Cisco Secure Desktop の WebLaunch 機能における任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2012-4655	2012-12-20 14:13	2012-06-20	Show	GitHub Exploit DB Packet Storm

228079	6.4	警告	Mozilla Foundation	-	Mozilla Firefox のドラッグ＆ドロップにおけるアドレスバーを偽造される脆弱性	CWE-Other その他	CVE-2012-1950	2012-12-20 14:11	2012-07-17	Show	GitHub Exploit DB Packet Storm

228080	2.6	注意	アップルサン・マイクロシステムズヒューレット・パッカード VMware 日立レッドハット	-	複数の Oracle 製品の Java Runtime Environment における脆弱性	CWE-noinfo 情報不足	CVE-2010-4472	2012-12-20 14:10	2011-02-15	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:April 18, 2026, 4:11 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
198521	5.3	MEDIUM Network	really	jwt-scala	jwt-scala 1.2.2 and earlier fails to verify token signatures correctly which may lead to an attacker being able to pass specially crafted JWT data as a correctly signed token.	CWE-345 Insufficient Verification of Data Authenticity	CVE-2017-10862	2024-11-21 12:06	2017-10-12	Show	GitHub Exploit DB Packet Storm

198522	4.3	MEDIUM Network	cybozu	office	Cybozu Office 10.0.0 to 10.6.1 allows authenticated attackers to bypass access restriction to perform arbitrary actions via "Cabinet" function.	CWE-269 Improper Privilege Management	CVE-2017-10857	2024-11-21 12:06	2017-10-12	Show	GitHub Exploit DB Packet Storm

198523	6.1	MEDIUM Network	sap	enterprise_portal	Cross site scripting (XSS) vulnerability in SAP Enterprise Portal 7.50 allows remote attackers to inject arbitrary web script or HTML, aka SAP Security Notes 2469860, 2471209, and 2488516.	CWE-79 Cross-site Scripting	CVE-2017-10701	2024-11-21 12:06	2017-09-29	Show	GitHub Exploit DB Packet Storm

198524	7.8	HIGH Local	google	android	In all Qualcomm products with Android releases from CAF using the Linux kernel, an output buffer is accessed in one thread and can be potentially freed in another.	NVD-CWE-noinfo	CVE-2017-11041	2024-11-21 12:06	2017-09-22	Show	GitHub Exploit DB Packet Storm

198525	5.5	MEDIUM Local	google	android	In all Qualcomm products with Android releases from CAF using the Linux kernel, when reading from sysfs nodes, one can read more information than it is allowed to.	CWE-200 Information Exposure	CVE-2017-11040	2024-11-21 12:06	2017-09-22	Show	GitHub Exploit DB Packet Storm

198526	5.5	MEDIUM Local	google	android	In all Qualcomm products with Android releases from CAF using the Linux kernel, while processing a vendor sub-command, a buffer over-read can occur.	CWE-125 Out-of-bounds Read	CVE-2017-11002	2024-11-21 12:06	2017-09-22	Show	GitHub Exploit DB Packet Storm

198527	5.5	MEDIUM Local	google	android	In all Qualcomm products with Android releases from CAF using the Linux kernel, the length of the MAC address is not checked which may cause out of bounds read.	CWE-200 Information Exposure	CVE-2017-11001	2024-11-21 12:06	2017-09-22	Show	GitHub Exploit DB Packet Storm

198528	7.8	HIGH Local	google	android	In all Qualcomm products with Android releases from CAF using the Linux kernel, in an ISP Camera kernel driver function, an incorrect bounds check may potentially lead to an out-of-bounds write.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2017-11000	2024-11-21 12:06	2017-09-22	Show	GitHub Exploit DB Packet Storm

198529	7.8	HIGH Local	google	android	In all Qualcomm products with Android releases from CAF using the Linux kernel, concurrent calls into ioctl RMNET_IOCTL_ADD_MUX_CHANNEL in ipa wan driver may lead to memory corruption due to missing …	CWE-119 NVD-CWE-noinfo Incorrect Access of Indexable Resource ('Range Error')	CVE-2017-10999	2024-11-21 12:06	2017-09-22	Show	GitHub Exploit DB Packet Storm

198530	7.8	HIGH Local	google	android	In all Qualcomm products with Android releases from CAF using the Linux kernel, in audio_aio_ion_lookup_vaddr, the buffer length, which is user input, ends up being used to validate if the buffer is …	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2017-10998	2024-11-21 12:06	2017-09-22	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed