Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
228211	9.3	危険	マイクロソフト	-	複数の Microsoft Windows 製品におけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2012-1537	2012-12-17 10:56	2012-12-11	Show	GitHub Exploit DB Packet Storm

228212	9.3	危険	マイクロソフト	-	複数の Microsoft 製品における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2012-2539	2012-12-17 10:55	2012-12-11	Show	GitHub Exploit DB Packet Storm

228213	6.8	警告	Netsweeper, Inc.	-	Netsweeper の WebAdmin Portal におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2012-2447	2012-12-17 10:53	2012-07-9	Show	GitHub Exploit DB Packet Storm

228214	9.3	危険	マイクロソフト	-	Microsoft Internet Explorer 6 から 10 における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2012-4781	2012-12-17 10:52	2012-12-11	Show	GitHub Exploit DB Packet Storm

228215	10	危険	マイクロソフト	-	複数の Microsoft Windows 製品のカーネルモードドライバにおける任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2012-4786	2012-12-17 10:50	2012-12-11	Show	GitHub Exploit DB Packet Storm

228216	10	危険	マイクロソフト	-	Microsoft Internet Explorer 9 および 10 における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2012-4787	2012-12-17 10:49	2012-12-11	Show	GitHub Exploit DB Packet Storm

228217	3.5	注意	マイクロソフト	-	Microsoft Exchange Server 2007 および 2010 におけるサービス運用妨害 (DoS) の脆弱性	CWE-94 コード・インジェクション	CVE-2012-4791	2012-12-17 10:47	2012-12-11	Show	GitHub Exploit DB Packet Storm

228218	10	危険	マイクロソフトアドビシステムズ Google	-	Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2012-5678	2012-12-17 10:45	2012-12-11	Show	GitHub Exploit DB Packet Storm

228219	10	危険	マイクロソフトアドビシステムズ Google	-	Adobe Flash Player および Adobe AIR における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2012-5677	2012-12-17 10:44	2012-12-11	Show	GitHub Exploit DB Packet Storm

228220	10	危険	マイクロソフトアドビシステムズ Google	-	Adobe Flash Player および Adobe AIR におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2012-5676	2012-12-17 10:43	2012-12-11	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:April 26, 2026, 4:08 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
197661	7.8	HIGH Local	xnview	xnview	XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to a "User Mode Write AV starting at ntdll_77400000!Rt…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2017-14270	2024-11-21 12:12	2017-09-12	Show	GitHub Exploit DB Packet Storm

197662	7.8	HIGH Local	jungo	windriver	This vulnerability allows local attackers to escalate privileges on Jungo WinDriver 12.4.0 and earlier. An attacker must first obtain the ability to execute low-privileged code on the target system i…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2017-14153	2024-11-21 12:12	2017-09-12	Show	GitHub Exploit DB Packet Storm

197663	7.8	HIGH Local	jungo	windriver	This vulnerability allows local attackers to escalate privileges on Jungo WinDriver 12.4.0 and earlier. An attacker must first obtain the ability to execute low-privileged code on the target system i…	CWE-787 Out-of-bounds Write	CVE-2017-14075	2024-11-21 12:12	2017-09-12	Show	GitHub Exploit DB Packet Storm

197664	9.8	CRITICAL Network	ee	4gee_wifi_mbb_firmware	EE 4GEE WiFi MBB (before EE60_00_05.00_31) devices allow remote attackers to obtain sensitive information via a JSONP endpoint, as demonstrated by passwords and SMS content.	CWE-200 Information Exposure	CVE-2017-14269	2024-11-21 12:12	2017-09-11	Show	GitHub Exploit DB Packet Storm

197665	6.1	MEDIUM Network	ee	4gee_wifi_mbb_firmware	EE 4GEE WiFi MBB (before EE60_00_05.00_31) devices have XSS in the sms_content parameter in a getSMSlist request.	CWE-79 Cross-site Scripting	CVE-2017-14268	2024-11-21 12:12	2017-09-11	Show	GitHub Exploit DB Packet Storm

197666	8.8	HIGH Network	ee	4gee_wifi_mbb_firmware	EE 4GEE WiFi MBB (before EE60_00_05.00_31) devices have CSRF, related to goform/AddNewProfile, goform/setWanDisconnect, goform/setSMSAutoRedirectSetting, goform/setReset, and goform/uploadBackupSetti…	CWE-352 Origin Validation Error	CVE-2017-14267	2024-11-21 12:12	2017-09-11	Show	GitHub Exploit DB Packet Storm

197667	9.8	CRITICAL Network	libraw	libraw	A Stack-based Buffer Overflow was discovered in xtrans_interpolate in internal/dcraw_common.cpp in LibRaw before 0.18.3. It could allow a remote denial of service or code execution attack.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2017-14265	2024-11-21 12:12	2017-09-11	Show	GitHub Exploit DB Packet Storm

197668	8.1	HIGH Network	honeywell	enterprise_dvr_firmware maxpro_nvr_hybrid_se_firmware maxpro_nvr_hybrid_xe_firmware maxpro_nvr_se_firmware maxpro_nvr_xe_firmware fusion_iv_rev_c_firmware maxpro_nvr_pe_firmware	Honeywell NVR devices allow remote attackers to create a user account in the admin group by leveraging access to a guest account to obtain a session ID, and then sending that session ID in a userMana…	CWE-384 Session Fixation	CVE-2017-14263	2024-11-21 12:12	2017-09-11	Show	GitHub Exploit DB Packet Storm

197669	8.1	HIGH Network	samsung	srn_1670d_firmware srn_1000_firmware srn_472s_firmware srn_470d_firmware	On Samsung NVR devices, remote attackers can read the MD5 password hash of the 'admin' account via certain szUserName JSON data to cgi-bin/main-cgi, and login to the device with that hash in the szUs…	CWE-326 Inadequate Encryption Strength	CVE-2017-14262	2024-11-21 12:12	2017-09-11	Show	GitHub Exploit DB Packet Storm

197670	7.8	HIGH Local	bento4	bento4	In the SDK in Bento4 1.5.0-616, the AP4_StszAtom class in Ap4StszAtom.cpp file contains a Read Memory Access Violation vulnerability. It is possible to exploit this vulnerability by opening a crafted…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2017-14261	2024-11-21 12:12	2017-09-11	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed