Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
228221	10	危険	Mozilla Foundation	-	複数の Mozilla 製品における任意の JavaScript コードを実行される脆弱性	CWE-DesignError	CVE-2012-1967	2012-12-14 18:33	2012-07-17	Show	GitHub Exploit DB Packet Storm

228222	4.3	警告	Mozilla Foundation	-	Mozilla Firefox および Firefox ESR におけるクロスサイトスクリプティングの脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-1966	2012-12-14 18:32	2012-07-17	Show	GitHub Exploit DB Packet Storm

228223	4.3	警告	Mozilla Foundation	-	Mozilla Firefox におけるクロスサイトスクリプティング保護メカニズムを回避される脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-1965	2012-12-14 18:31	2012-07-17	Show	GitHub Exploit DB Packet Storm

228224	4	警告	Mozilla Foundation	-	複数の Mozilla 製品における意図しない例外を追加させられる脆弱性	CWE-noinfo 情報不足	CVE-2012-1964	2012-12-14 18:29	2012-07-17	Show	GitHub Exploit DB Packet Storm

228225	4.3	警告	Mozilla Foundation	-	複数の Mozilla 製品における OpenID 認証情報と OAuth 2.0 アクセストークンを取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-1963	2012-12-14 18:28	2012-07-17	Show	GitHub Exploit DB Packet Storm

228226	10	危険	Mozilla Foundation	-	複数の Mozilla 製品におけるサービス運用妨害 (メモリ破損) の脆弱性	CWE-399 リソース管理の問題	CVE-2012-1962	2012-12-14 18:27	2012-07-17	Show	GitHub Exploit DB Packet Storm

228227	4.3	警告	Mozilla Foundation	-	複数の Mozilla 製品におけるクリックジャッキング攻撃の脆弱性	CWE-20 不適切な入力確認	CVE-2012-1961	2012-12-14 18:26	2012-07-17	Show	GitHub Exploit DB Packet Storm

228228	5	警告	Mozilla Foundation	-	複数の Mozilla 製品における XBL へのアクセス制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-1959	2012-12-14 18:14	2012-07-17	Show	GitHub Exploit DB Packet Storm

228229	9.3	危険	Mozilla Foundation	-	複数の Mozilla 製品の nsGlobalWindow::PageHidden 関数における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2012-1958	2012-12-14 18:13	2012-07-17	Show	GitHub Exploit DB Packet Storm

228230	4.3	警告	Mozilla Foundation	-	複数の Mozilla 製品におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-1957	2012-12-14 18:12	2012-07-17	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:April 20, 2026, 4:09 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
198401	6.5	MEDIUM Network	exiv2	exiv2	There is an infinite loop in the Exiv2::Image::printIFDStructure function of image.cpp in Exiv2 0.26. A crafted input will lead to a remote denial of service attack.	CWE-835 Loop with Unreachable Exit Condition ('Infinite Loop')	CVE-2017-11338	2024-11-21 12:07	2017-07-17	Show	GitHub Exploit DB Packet Storm

198402	6.5	MEDIUM Network	exiv2	exiv2	There is an invalid free in the Action::TaskFactory::cleanup function of actions.cpp in Exiv2 0.26. A crafted input will lead to a remote denial of service attack.	CWE-416 Use After Free	CVE-2017-11337	2024-11-21 12:07	2017-07-17	Show	GitHub Exploit DB Packet Storm

198403	6.5	MEDIUM Network	exiv2	exiv2	There is a heap-based buffer over-read in the Image::printIFDStructure function in image.cpp in Exiv2 0.26. A Crafted input will lead to a remote denial of service attack.	CWE-125 Out-of-bounds Read	CVE-2017-11336	2024-11-21 12:07	2017-07-17	Show	GitHub Exploit DB Packet Storm

198404	8.8	HIGH Network	libtiff	libtiff	There is a heap based buffer overflow in tools/tiff2pdf.c of LibTIFF 4.0.8 via a PlanarConfig=Contig image, which causes a more than one hundred bytes out-of-bounds write (related to the ZIPDecode fu…	CWE-787 Out-of-bounds Write	CVE-2017-11335	2024-11-21 12:07	2017-07-17	Show	GitHub Exploit DB Packet Storm

198405	9.8	CRITICAL Network	glpi-project	glpi	GLPI before 9.1.5 allows SQL injection via an ajax/getDropdownValue.php request with an entity_restrict parameter that is not a list of integers.	CWE-89 SQL Injection	CVE-2017-11329	2024-11-21 12:07	2017-07-17	Show	GitHub Exploit DB Packet Storm

198406	5.5	MEDIUM Local	virustotal	yara	Heap buffer overflow in the yr_object_array_set_item() function in object.c in YARA 3.x allows a denial-of-service attack by scanning a crafted .NET file.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2017-11328	2024-11-21 12:07	2017-07-17	Show	GitHub Exploit DB Packet Storm

198407	8.1	HIGH Network	cobiansoft	cobian_backup	Cobian Backup 11 client allows man-in-the-middle attackers to add and execute new backup tasks when the master server is spoofed. In addition, the attacker can execute system commands remotely by abu…	CWE-78 OS Command	CVE-2017-11318	2024-11-21 12:07	2017-07-17	Show	GitHub Exploit DB Packet Storm

198408	7.8	HIGH Local	openmpt	libopenmpt openmpt	soundlib/Load_psm.cpp in OpenMPT through 1.26.12.00 and libopenmpt before 0.2.8461-beta26 has a heap buffer overflow with the potential for arbitrary code execution via a crafted PSM File that trigge…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2017-11311	2024-11-21 12:07	2017-07-17	Show	GitHub Exploit DB Packet Storm

198409	8.8	HIGH Network	imagemagick	imagemagick	The read_user_chunk_callback function in coders\png.c in ImageMagick 7.0.6-1 Q16 2017-06-21 (beta) has memory leak vulnerabilities via crafted PNG files.	CWE-772 Missing Release of Resource after Effective Lifetime	CVE-2017-11310	2024-11-21 12:07	2017-07-14	Show	GitHub Exploit DB Packet Storm

198410	8.1	HIGH Network	heimdal_project freebsd samba apple debian	heimdal freebsd samba mac_os_x iphone_os debian_linux	Heimdal before 7.4 allows remote attackers to impersonate services with Orpheus' Lyre attacks because it obtains service-principal names in a way that violates the Kerberos 5 protocol specification. …	CWE-345 Insufficient Verification of Data Authenticity	CVE-2017-11103	2024-11-21 12:07	2017-07-13	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed