Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
228111	6.8	警告	サン・マイクロシステムズサイバートラスト株式会社 VMware ヒューレット・パッカードレッドハット	-	複数の Oracle 製品の Swing コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-3557	2012-12-19 16:49	2010-10-12	Show	GitHub Exploit DB Packet Storm

228112	5.1	警告	レッドハット	-	OpenShift の管理コンソールにおけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2012-5622	2012-12-19 16:42	2012-12-10	Show	GitHub Exploit DB Packet Storm

228113	6.5	警告	ownCloud	-	ownCloud の lib/filesystem.php における任意の PHP コードを実行される脆弱性	CWE-20 CWE-Other	CVE-2012-5610	2012-12-19 16:32	2012-11-13	Show	GitHub Exploit DB Packet Storm

228114	6.5	警告	ownCloud	-	ownCloud の lib/migrate.php における任意の PHP コードを実行される脆弱性	CWE-Other その他	CVE-2012-5609	2012-12-19 16:21	2012-11-13	Show	GitHub Exploit DB Packet Storm

228115	4.3	警告	ownCloud	-	ownCloud の apps/user_webdavauth/settings.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-5608	2012-12-19 16:11	2012-11-13	Show	GitHub Exploit DB Packet Storm

228116	5	警告	ownCloud	-	ownCloud の "ロスト・パスワード" リセット機能におけるアカウントのパスワードを変更される脆弱性	CWE-255 証明書・パスワード管理	CVE-2012-5607	2012-12-19 16:04	2012-10-24	Show	GitHub Exploit DB Packet Storm

228117	4.3	警告	ownCloud	-	ownCloud におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-5606	2012-12-19 15:58	2012-10-24	Show	GitHub Exploit DB Packet Storm

228118	10	危険	サン・マイクロシステムズサイバートラスト株式会社 VMware ヒューレット・パッカードレッドハット	-	複数の Oracle 製品の 2D コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-3556	2012-12-19 15:48	2010-10-12	Show	GitHub Exploit DB Packet Storm

228119	7.5	危険	The GIMP Team	-	GIMP の X Window Dump プラグインにおけるサービス運用妨害 (クラッシュ) の脆弱性	CWE-119 バッファエラー	CVE-2012-5576	2012-12-19 15:45	2012-11-7	Show	GitHub Exploit DB Packet Storm

228120	6.4	警告	VMware Apache Software Foundation	-	Apache Struts における任意のファイルを作成または上書きされる脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-0393	2012-12-19 15:43	2012-01-8	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:April 22, 2026, 4 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
198021	6.5	MEDIUM Network	mindwerks	wildmidi	The _WM_SetupMidiEvent function in internal_midi.c:2122 in WildMIDI 0.4.2 can cause a denial of service (invalid memory read and application crash) via a crafted mid file.	CWE-125 Out-of-bounds Read	CVE-2017-11664	2024-11-21 12:08	2017-08-18	Show	GitHub Exploit DB Packet Storm

198022	6.5	MEDIUM Network	mindwerks	wildmidi	The _WM_SetupMidiEvent function in internal_midi.c:2315 in WildMIDI 0.4.2 can cause a denial of service (invalid memory read and application crash) via a crafted mid file.	CWE-125 Out-of-bounds Read	CVE-2017-11663	2024-11-21 12:08	2017-08-18	Show	GitHub Exploit DB Packet Storm

198023	7.5	HIGH Network	mindwerks	wildmidi	The _WM_ParseNewMidi function in f_midi.c in WildMIDI 0.4.2 can cause a denial of service (invalid memory read and application crash) via a crafted mid file.	CWE-125 Out-of-bounds Read	CVE-2017-11662	2024-11-21 12:08	2017-08-18	Show	GitHub Exploit DB Packet Storm

198024	7.5	HIGH Network	mindwerks	wildmidi	The _WM_SetupMidiEvent function in internal_midi.c:2318 in WildMIDI 0.4.2 can cause a denial of service (invalid memory read and application crash) via a crafted mid file.	CWE-125 Out-of-bounds Read	CVE-2017-11661	2024-11-21 12:08	2017-08-18	Show	GitHub Exploit DB Packet Storm

198025	8.8	HIGH Local	hashicorp	vagrant_vmware_fusion	HashiCorp Vagrant VMware Fusion plugin (aka vagrant-vmware-fusion) before 4.0.24 uses weak permissions for the sudo helper scripts, allows local users to execute arbitrary code with root privileges b…	CWE-276 Incorrect Default Permissions	CVE-2017-11741	2024-11-21 12:08	2017-08-9	Show	GitHub Exploit DB Packet Storm

198026	7.3	HIGH Local	dashlane	dashlane	Dashlane might allow local users to gain privileges by placing a Trojan horse WINHTTP.dll in the %APPDATA%\Dashlane directory.	CWE-426 Untrusted Search Path	CVE-2017-11657	2024-11-21 12:08	2017-08-4	Show	GitHub Exploit DB Packet Storm

198027	9.8	CRITICAL Network	ioquake3	ioquake3	Buffer overflow in ioquake3 before 2017-08-02 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted packet.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2017-11721	2024-11-21 12:08	2017-08-3	Show	GitHub Exploit DB Packet Storm

198028	6.5	MEDIUM Network	libquicktime	libquicktime	In libquicktime 1.2.4, an allocation failure was found in the function quicktime_read_ftyp in ftyp.c, which allows attackers to cause a denial of service via a crafted file.	CWE-20 Improper Input Validation	CVE-2017-12145	2024-11-21 12:08	2017-08-2	Show	GitHub Exploit DB Packet Storm

198029	5.5	MEDIUM Local	ytnef_project	ytnef	In ytnef 1.9.2, an allocation failure was found in the function TNEFFillMapi in ytnef.c, which allows attackers to cause a denial of service via a crafted file.	CWE-770 Allocation of Resources Without Limits or Throttling	CVE-2017-12144	2024-11-21 12:08	2017-08-2	Show	GitHub Exploit DB Packet Storm

198030	6.5	MEDIUM Network	libquicktime	libquicktime	In libquicktime 1.2.4, an allocation failure was found in the function quicktime_read_info in lqt_quicktime.c, which allows attackers to cause a denial of service via a crafted file.	CWE-20 Improper Input Validation	CVE-2017-12143	2024-11-21 12:08	2017-08-2	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed