Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
228211	9.3	危険	マイクロソフト	-	複数の Microsoft Windows 製品におけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2012-1537	2012-12-17 10:56	2012-12-11	Show	GitHub Exploit DB Packet Storm

228212	9.3	危険	マイクロソフト	-	複数の Microsoft 製品における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2012-2539	2012-12-17 10:55	2012-12-11	Show	GitHub Exploit DB Packet Storm

228213	6.8	警告	Netsweeper, Inc.	-	Netsweeper の WebAdmin Portal におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2012-2447	2012-12-17 10:53	2012-07-9	Show	GitHub Exploit DB Packet Storm

228214	9.3	危険	マイクロソフト	-	Microsoft Internet Explorer 6 から 10 における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2012-4781	2012-12-17 10:52	2012-12-11	Show	GitHub Exploit DB Packet Storm

228215	10	危険	マイクロソフト	-	複数の Microsoft Windows 製品のカーネルモードドライバにおける任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2012-4786	2012-12-17 10:50	2012-12-11	Show	GitHub Exploit DB Packet Storm

228216	10	危険	マイクロソフト	-	Microsoft Internet Explorer 9 および 10 における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2012-4787	2012-12-17 10:49	2012-12-11	Show	GitHub Exploit DB Packet Storm

228217	3.5	注意	マイクロソフト	-	Microsoft Exchange Server 2007 および 2010 におけるサービス運用妨害 (DoS) の脆弱性	CWE-94 コード・インジェクション	CVE-2012-4791	2012-12-17 10:47	2012-12-11	Show	GitHub Exploit DB Packet Storm

228218	10	危険	マイクロソフトアドビシステムズ Google	-	Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2012-5678	2012-12-17 10:45	2012-12-11	Show	GitHub Exploit DB Packet Storm

228219	10	危険	マイクロソフトアドビシステムズ Google	-	Adobe Flash Player および Adobe AIR における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2012-5677	2012-12-17 10:44	2012-12-11	Show	GitHub Exploit DB Packet Storm

228220	10	危険	マイクロソフトアドビシステムズ Google	-	Adobe Flash Player および Adobe AIR におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2012-5676	2012-12-17 10:43	2012-12-11	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:April 25, 2026, 4:08 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
199551	8.8	HIGH Network	adobe	acrobat acrobat_dc acrobat_reader acrobat_reader_dc reader	Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable heap overflow vulnerability in the JPEG parser. Suc…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2017-11211	2024-11-21 12:07	2017-08-12	Show	GitHub Exploit DB Packet Storm

199552	6.5	MEDIUM Network	adobe	acrobat acrobat_dc acrobat_reader acrobat_reader_dc reader	Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the font parsing…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2017-11210	2024-11-21 12:07	2017-08-12	Show	GitHub Exploit DB Packet Storm

199553	6.5	MEDIUM Network	adobe	acrobat acrobat_dc acrobat_reader acrobat_reader_dc reader	Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability that occurs when re…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2017-11209	2024-11-21 12:07	2017-08-12	Show	GitHub Exploit DB Packet Storm

199554	6.5	MEDIUM Network	synology	chat	Server-side request forgery (SSRF) vulnerability in link preview in Synology Chat before 1.1.0-0806 allows remote authenticated users to access intranet resources via unspecified vectors.	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2017-11148	2024-11-21 12:07	2017-08-12	Show	GitHub Exploit DB Packet Storm

199555	6.5	MEDIUM Network	fedoraproject mit	fedora kerberos kerberos_5	In MIT Kerberos 5 (aka krb5) 1.7 and later, an authenticated attacker can cause a KDC assertion failure by sending invalid S4U2Self or S4U2Proxy requests.	CWE-617 Reachable Assertion	CVE-2017-11368	2024-11-21 12:07	2017-08-10	Show	GitHub Exploit DB Packet Storm

199556	7.4	HIGH Network	tenable	nessus	When linking a Nessus scanner or agent to Tenable.io or other manager, Nessus 6.x before 6.11 does not verify the manager's TLS certificate when making the initial outgoing connection. This could all…	CWE-295 Improper Certificate Validation	CVE-2017-11506	2024-11-21 12:07	2017-08-9	Show	GitHub Exploit DB Packet Storm

199557	7.5	HIGH Network	synology	photo_station	An information exposure vulnerability in index.php in Synology Photo Station before 6.7.3-3432 and 6.3-2967 allows remote attackers to obtain sensitive system information via unspecified vectors.	CWE-200 Information Exposure	CVE-2017-11155	2024-11-21 12:07	2017-08-9	Show	GitHub Exploit DB Packet Storm

199558	7.2	HIGH Network	synology	photo_station	Unrestricted file upload vulnerability in PixlrEditorHandler.php in Synology Photo Station before 6.7.3-3432 and 6.3-2967 allows remote attackers to create arbitrary PHP scripts via the type paramete…	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2017-11154	2024-11-21 12:07	2017-08-9	Show	GitHub Exploit DB Packet Storm

199559	9.8	CRITICAL Network	synology	photo_station	Deserialization vulnerability in synophoto_csPhotoMisc.php in Synology Photo Station before 6.7.3-3432 and 6.3-2967 allows remote attackers to gain administrator privileges via a crafted serialized p…	CWE-502 Deserialization of Untrusted Data	CVE-2017-11153	2024-11-21 12:07	2017-08-9	Show	GitHub Exploit DB Packet Storm

199560	7.5	HIGH Network	synology	photo_station	Directory traversal vulnerability in PixlrEditorHandler.php in Synology Photo Station before 6.7.3-3432 and 6.3-2967 allows remote attackers to write arbitrary files via the path parameter.	CWE-22 Path Traversal	CVE-2017-11152	2024-11-21 12:07	2017-08-9	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed