Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
228121 5 警告 Sensio Labs - Symfony CMS の lib/form/sfForm.class.php における任意のファイルを読まれる脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-5574 2012-12-19 15:41 2012-11-25 Show GitHub Exploit DB Packet Storm
228122 4 警告 OpenStack - OpenStack Keystone における承認の制限を回避される脆弱性 CWE-255
証明書・パスワード管理
CVE-2012-5563 2012-12-19 14:52 2012-11-28 Show GitHub Exploit DB Packet Storm
228123 7.5 危険 bogofilter - bogofilter の bogolexer コンポーネントにおけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2012-5468 2012-12-19 14:46 2012-12-3 Show GitHub Exploit DB Packet Storm
228124 5.1 警告 The PHP Group - PHP の rand などの関数におけるセキュリティの問題を悪用される脆弱性 CWE-189
数値処理の問題
CVE-2008-4107 2012-12-19 14:22 2008-09-11 Show GitHub Exploit DB Packet Storm
228125 6.8 警告 ownCloud - ownCloud の lib/migrate.php における任意のコードを実行される脆弱性 CWE-Other
その他
CVE-2012-4389 2012-12-19 14:21 2012-08-15 Show GitHub Exploit DB Packet Storm
228126 4 警告 ownCloud - ownCloud における登録されたユーザを列挙される脆弱性 CWE-200
情報漏えい
CVE-2012-4390 2012-12-19 14:20 2012-08-15 Show GitHub Exploit DB Packet Storm
228127 6.8 警告 ownCloud - ownCloud の core/ajax/appconfig.php におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2012-4391 2012-12-19 14:19 2012-08-15 Show GitHub Exploit DB Packet Storm
228128 7.5 危険 ownCloud - ownCloud の index.php における認証を回避される脆弱性 CWE-287
不適切な認証
CVE-2012-4392 2012-12-19 14:18 2012-08-15 Show GitHub Exploit DB Packet Storm
228129 5 警告 ownCloud - ownCloud の appconfig.php におけるアプリの設定を編集される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-4752 2012-12-19 14:17 2012-08-1 Show GitHub Exploit DB Packet Storm
228130 6.8 警告 ownCloud - ownCloud におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2012-4393 2012-12-19 14:16 2012-08-1 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 21, 2026, 4:10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
198201 7.8 HIGH
Local
google android In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, while processing a user supplied sparse image, a buffer overflow vulnerability could oc… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2017-11080 2024-11-21 12:07 2018-01-11 Show GitHub Exploit DB Packet Storm
198202 9.8 CRITICAL
Network
google android In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, while processing sparse image, uninitialized heap memory can potentially be flashed due… CWE-200
Information Exposure
CVE-2017-11079 2024-11-21 12:07 2018-01-11 Show GitHub Exploit DB Packet Storm
198203 7.5 HIGH
Network
google android In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, while flashing ubi image an uninitialized memory could be accessed. CWE-200
Information Exposure
CVE-2017-11066 2024-11-21 12:07 2018-01-11 Show GitHub Exploit DB Packet Storm
198204 7.8 HIGH
Local
google android In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, manipulation of SafeSwitch Image data can result in Heap overflow. CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2017-11069 2024-11-21 12:07 2018-01-11 Show GitHub Exploit DB Packet Storm
198205 7.8 HIGH
Local
trendmicro encryption_for_email A service DLL preloading vulnerability in Trend Micro Encryption for Email versions 5.6 and below could allow an unauthenticated remote attacker to execute arbitrary code on a vulnerable system. CWE-426
 Untrusted Search Path
CVE-2017-11397 2024-11-21 12:07 2017-12-16 Show GitHub Exploit DB Packet Storm
198206 6.5 MEDIUM
Network
adobe
redhat
flash_player
flash_player_desktop_runtime
enterprise_linux_desktop
enterprise_linux_server
enterprise_linux_workstation
A regression affecting Adobe Flash Player version 27.0.0.187 (and earlier versions) causes the unintended reset of the global settings preference file when a user clears browser data. NVD-CWE-noinfo
CVE-2017-11305 2024-11-21 12:07 2017-12-14 Show GitHub Exploit DB Packet Storm
198207 8.8 HIGH
Network
resolver perspective Perspective ICM Investigation & Case 5.1.1.16 allows remote authenticated users to modify access level permissions and consequently gain privileges by leveraging insufficient validation methods and m… CWE-269
 Improper Privilege Management
CVE-2017-11319 2024-11-21 12:07 2017-12-12 Show GitHub Exploit DB Packet Storm
198208 6.1 MEDIUM
Network
check_mk_project check_mk A cross site scripting (XSS) vulnerability exists in Check_MK versions 1.2.8x prior to 1.2.8p25 and 1.4.0x prior to 1.4.0p9, allowing an unauthenticated attacker to inject arbitrary HTML or JavaScrip… CWE-79
Cross-site Scripting
CVE-2017-11507 2024-11-21 12:07 2017-12-12 Show GitHub Exploit DB Packet Storm
198209 8.8 HIGH
Network
ivanti endpoint_manager In Ivanti Service Desk (formerly LANDESK Management Suite) versions between 2016.3 and 2017.3, an Unrestricted Direct Object Reference leads to referencing/updating objects belonging to other users. … CWE-275
 Permission Issues
CVE-2017-11463 2024-11-21 12:07 2017-12-11 Show GitHub Exploit DB Packet Storm
198210 9.8 CRITICAL
Network
adobe photoshop An issue was discovered in Adobe Photoshop 18.1.1 (2017.1.1) and earlier versions. An exploitable use-after-free vulnerability exists. Successful exploitation could lead to arbitrary code execution. CWE-416
 Use After Free
CVE-2017-11304 2024-11-21 12:07 2017-12-9 Show GitHub Exploit DB Packet Storm