Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
228181	6.1	警告	サン・マイクロシステムズレッドハット VMware オラクル	-	Oracle Java SE の Java Runtime Environment (JRE) コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2011-3555	2012-12-17 17:55	2011-10-18	Show	GitHub Exploit DB Packet Storm

228182	5.1	警告	bzip.org アップルサイバートラスト株式会社オラクル VMware レッドハット	-	bzip2 および libbzip2 の BZ2_decompress 関数における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2010-0405	2012-12-17 16:47	2010-09-20	Show	GitHub Exploit DB Packet Storm

228183	5	警告	VMware Apache Software Foundation	-	Apache Tomcat における IP アドレスおよび HTTP ヘッダ情報を意図せず読み取られる脆弱性	CWE-200 情報漏えい	CVE-2011-3375	2012-12-17 16:35	2012-01-19	Show	GitHub Exploit DB Packet Storm

228184	6.8	警告	VMware RPM	-	RPM の headerVerifyInfo 関数におけるサービス運用妨害 (クラッシュ) の脆弱性	CWE-189 数値処理の問題	CVE-2012-0815	2012-12-17 16:33	2012-06-4	Show	GitHub Exploit DB Packet Storm

228185	6.8	警告	VMware RPM	-	RPM の headerLoad 関数におけるサービス運用妨害 (クラッシュ) の脆弱性	CWE-20 不適切な入力確認	CVE-2012-0061	2012-12-17 16:31	2012-06-4	Show	GitHub Exploit DB Packet Storm

228186	7.2	危険	VMware Linux	-	Linux Kernel の robust futex の実装におけるサービス運用妨害 (DoS) の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-0028	2012-12-17 16:28	2012-06-21	Show	GitHub Exploit DB Packet Storm

228187	10	危険	VMware Linux	-	Linux Kernel の CIFSFindNext 関数における整数符号エラーの脆弱性	CWE-189 数値処理の問題	CVE-2011-3191	2012-12-17 16:27	2012-05-24	Show	GitHub Exploit DB Packet Storm

228188	6.8	警告	VMware RPM	-	RPM におけるサービス運用妨害 (クラッシュ) の脆弱性	CWE-20 不適切な入力確認	CVE-2012-0060	2012-12-17 16:26	2012-06-4	Show	GitHub Exploit DB Packet Storm

228189	7.5	危険	Gisle Aas VMware	-	Perl 用の Digest モジュールにおける任意のコマンドを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2011-3597	2012-12-17 16:24	2012-01-13	Show	GitHub Exploit DB Packet Storm

228190	4.3	警告	Andy Armstrong VMware レッドハット	-	CGI.pm および CGI::Simple の header 関数における任意のHTTP ヘッダを挿入される脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2010-4410	2012-12-17 16:23	2010-12-6	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:April 23, 2026, 4 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
199401	8.1	HIGH Network	jenkins	jenkins	A race condition during Jenkins 2.94 and earlier; 2.89.1 and earlier startup could result in the wrong order of execution of commands during initialization. There is a very short window of time after…	CWE-352 Origin Validation Error	CVE-2017-1000504	2024-11-21 12:04	2018-01-25	Show	GitHub Exploit DB Packet Storm

199402	8.1	HIGH Network	jenkins	jenkins	A race condition during Jenkins 2.81 through 2.94 (inclusive); 2.89.1 startup could result in the wrong order of execution of commands during initialization. This could in rare cases result in failur…	CWE-362 Race Condition	CVE-2017-1000503	2024-11-21 12:04	2018-01-25	Show	GitHub Exploit DB Packet Storm

199403	8.8	HIGH Network	jenkins	ec2	Users with permission to create or configure agents in Jenkins 1.37 and earlier could configure an EC2 agent to run arbitrary shell commands on the master node whenever the agent was supposed to be l…	CWE-78 OS Command	CVE-2017-1000502	2024-11-21 12:04	2018-01-25	Show	GitHub Exploit DB Packet Storm

199404	9.8	CRITICAL Network	vehicle_sales_management_system_project	vehicle_sales_management_system	Soyket Chowdhury Vehicle Sales Management System version 2017-07-30 is vulnerable to multiple SQL Injecting in login/vehicle.php, login/profile.php, login/Actions.php, login/manage_employee.php, and …	CWE-89 SQL Injection	CVE-2017-1000474	2024-11-21 12:04	2018-01-25	Show	GitHub Exploit DB Packet Storm

199405	7.8	HIGH Local	freesshd	freesshd	FreeSSHd 1.3.1 version is vulnerable to an Unquoted Path Service allowing local users to launch processes with elevated privileges.	CWE-428 Unquoted Search Path or Element	CVE-2017-1000475	2024-11-21 12:04	2018-01-24	Show	GitHub Exploit DB Packet Storm

199406	5.3	MEDIUM Network	matrixssl	matrixssl	MatrixSSL version 3.7.2 adopts a collision-prone OID comparison logic resulting in possible spoofing of OIDs (e.g. in ExtKeyUsage extension) on X.509 certificates.	CWE-295 Improper Certificate Validation	CVE-2017-1000417	2024-11-21 12:04	2018-01-23	Show	GitHub Exploit DB Packet Storm

199407	5.3	MEDIUM Network	axtls_project	axtls	axTLS version 1.5.3 has a coding error in the ASN.1 parser resulting in the year (19)50 of UTCTime being misinterpreted as 2050.	CWE-193 Off-by-one Error	CVE-2017-1000416	2024-11-21 12:04	2018-01-23	Show	GitHub Exploit DB Packet Storm

199408	6.1	MEDIUM Network	flatcore	flatcore-cms	flatCore-CMS 1.4.6 is vulnerable to reflected XSS in user_management.php due to the use of $_SERVER['PHP_SELF'] to build links and a stored XSS in the admin log panel by specifying a malformed User-A…	CWE-79 Cross-site Scripting	CVE-2017-1000428	2024-11-21 12:04	2018-01-10	Show	GitHub Exploit DB Packet Storm

199409	5.4	MEDIUM Network	sulu	sulu-standard	Sulu-standard version 1.6.6 is vulnerable to stored cross-site scripting vulnerability, within the page creation page, which can result in disruption of service and execution of javascript code.	CWE-79 Cross-site Scripting	CVE-2017-1000465	2024-11-21 12:04	2018-01-10	Show	GitHub Exploit DB Packet Storm

199410	6.1	MEDIUM Network	finecms_project	finecms	rui Li finecms 5.0.10 is vulnerable to a reflected XSS in the file Weixin.php.	CWE-79 Cross-site Scripting	CVE-2017-1000429	2024-11-21 12:04	2018-01-10	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed