Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
228171	7.6	危険	サン・マイクロシステムズ VMware レッドハット	-	複数の Oracle 製品の Java Runtime Environment における脆弱性	CWE-noinfo 情報不足	CVE-2010-4451	2012-12-18 12:13	2011-02-15	Show	GitHub Exploit DB Packet Storm

228172	5	警告	サイバートラスト株式会社 VMware Python Software Foundation レッドハット	-	Python の audioop モジュールにおけるサービス運用妨害 (DoS) の脆弱性	CWE-119 バッファエラー	CVE-2010-2089	2012-12-18 12:05	2010-01-11	Show	GitHub Exploit DB Packet Storm

228173	5	警告	サイバートラスト株式会社 VMware Python Software Foundation レッドハット	-	Python の audioop モジュール内にある audioop.c における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2010-1634	2012-12-18 12:04	2010-05-27	Show	GitHub Exploit DB Packet Storm

228174	5	警告	Expat IBM Apache Software Foundation サイバートラスト株式会社サン・マイクロシステムズヒューレット・パッカード VMware レッドハット	-	Expat の big2_toUtf8 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-119 バッファエラー	CVE-2009-3560	2012-12-18 12:01	2009-12-4	Show	GitHub Exploit DB Packet Storm

228175	6.4	警告	サイバートラスト株式会社 VMware Python Software Foundation レッドハット	-	Python の urllib および urllib2 モジュールにおける重要な情報を取得される脆弱性	CWE-399 リソース管理の問題	CVE-2011-1521	2012-12-18 11:37	2011-05-15	Show	GitHub Exploit DB Packet Storm

228176	10	危険	アドビシステムズ	-	Adobe Photoshop Camera Raw におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2012-5680	2012-12-18 10:41	2012-12-12	Show	GitHub Exploit DB Packet Storm

228177	2.1	注意	ヒューレット・パッカード	-	Itanium および Alpha プラットフォーム上の HP OpenVMS におけるサービス運用妨害 (DoS) の脆弱性	CWE-16 環境設定	CVE-2012-3276	2012-12-18 10:39	2012-12-10	Show	GitHub Exploit DB Packet Storm

228178	5	警告	GNU Project VMware	-	GnuTLS におけるサービス運用妨害 (ヒープメモリ破損およびアプリケーションクラッシュ) の脆弱性	CWE-310 暗号の問題	CVE-2012-1573	2012-12-17 18:09	2012-03-21	Show	GitHub Exploit DB Packet Storm

228179	5	警告	GNU Project VMware	-	GnuTLS で使用される GNU Libtasn1 におけるサービス運用妨害 (DoS) の脆弱性	CWE-189 数値処理の問題	CVE-2012-1569	2012-12-17 18:08	2012-03-21	Show	GitHub Exploit DB Packet Storm

228180	4.3	警告	GNU Project VMware	-	GnuTLS の gnutls_session_get_data 関数におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2011-4128	2012-12-17 18:07	2011-11-8	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:April 25, 2026, 4:08 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
197671	8.8	HIGH Network	eyesofnetwork	eyesofnetwork	In the EyesOfNetwork web interface (aka eonweb) 5.1-0, module\tool_all\tools\interface.php does not properly restrict exec calls, which allows remote attackers to execute arbitrary commands via shell…	CWE-78 OS Command	CVE-2017-14118	2024-11-21 12:12	2017-09-4	Show	GitHub Exploit DB Packet Storm

197672	5.9	MEDIUM Network	att	u-verse_firmware	The AT&T U-verse 9.2.2h0d83 firmware for the Arris NVG589 and NVG599 devices, when IP Passthrough mode is not used, configures an unauthenticated proxy service on WAN TCP port 49152, which allows rem…	CWE-287 Improper Authentication	CVE-2017-14117	2024-11-21 12:12	2017-09-4	Show	GitHub Exploit DB Packet Storm

197673	8.1	HIGH Network	att	u-verse_firmware	The AT&T U-verse 9.2.2h0d83 firmware for the Arris NVG599 device, when IP Passthrough mode is not used, configures WAN access to a caserver https service with the tech account and an empty password, …	CWE-798 Use of Hard-coded Credentials	CVE-2017-14116	2024-11-21 12:12	2017-09-4	Show	GitHub Exploit DB Packet Storm

197674	8.1	HIGH Network	att	u-verse_firmware	The AT&T U-verse 9.2.2h0d83 firmware for the Arris NVG589 and NVG599 devices, when IP Passthrough mode is not used, configures ssh-permanent-enable WAN SSH logins to the remotessh account with the 5S…	CWE-798 Use of Hard-coded Credentials	CVE-2017-14115	2024-11-21 12:12	2017-09-4	Show	GitHub Exploit DB Packet Storm

197675	6.5	MEDIUM Network	rtpproxy	rtpproxy	RTPproxy through 2.2.alpha.20160822 has a NAT feature that results in not properly determining the IP address and port number of the legitimate recipient of RTP traffic, which allows remote attackers…	CWE-200 Information Exposure	CVE-2017-14114	2024-11-21 12:12	2017-09-3	Show	GitHub Exploit DB Packet Storm

197676	9.8	CRITICAL Network	digium	asterisk certified_asterisk	In Asterisk 11.x before 11.25.2, 13.x before 13.17.1, and 14.x before 14.6.1 and Certified Asterisk 11.x before 11.6-cert17 and 13.x before 13.13-cert5, unauthorized command execution is possible. Th…	CWE-78 OS Command	CVE-2017-14100	2024-11-21 12:12	2017-09-3	Show	GitHub Exploit DB Packet Storm

197677	7.5	HIGH Network	digium	asterisk	In the pjsip channel driver (res_pjsip) in Asterisk 13.x before 13.17.1 and 14.x before 14.6.1, a carefully crafted tel URI in a From, To, or Contact header could cause Asterisk to crash.	CWE-20 Improper Input Validation	CVE-2017-14098	2024-11-21 12:12	2017-09-3	Show	GitHub Exploit DB Packet Storm

197678	7.5	HIGH Network	netapp	oncommand_unified_manager_for_clustered_data_ontap	NetApp OnCommand Unified Manager for Clustered Data ONTAP before 7.2P1 does not set the secure flag for an unspecified cookie in an HTTPS session, which makes it easier for remote attackers to captur…	CWE-200 Information Exposure	CVE-2017-14053	2024-11-21 12:12	2017-09-2	Show	GitHub Exploit DB Packet Storm

197679	7.5	HIGH Network	digium	asterisk certified_asterisk	In res/res_rtp_asterisk.c in Asterisk 11.x before 11.25.2, 13.x before 13.17.1, and 14.x before 14.6.1 and Certified Asterisk 11.x before 11.6-cert17 and 13.x before 13.13-cert5, unauthorized data di…	CWE-200 Information Exposure	CVE-2017-14099	2024-11-21 12:12	2017-09-3	Show	GitHub Exploit DB Packet Storm

197680	6.5	MEDIUM Network	libzip debian	libzip debian_linux	The _zip_read_eocd64 function in zip_open.c in libzip before 1.3.0 mishandles EOCD records, which allows remote attackers to cause a denial of service (memory allocation failure in _zip_cdir_grow in …	CWE-770 Allocation of Resources Without Limits or Throttling	CVE-2017-14107	2024-11-21 12:12	2017-09-2	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed