Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228251 4.7 警告 シトリックス・システムズ
Xen プロジェクト		 - Xen におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2012-5515 2012-12-14 16:21 2012-12-3 Show GitHub Exploit DB Packet Storm
228252 4.7 警告 シトリックス・システムズ
Xen プロジェクト		 - Xen の guest_physmap_mark_populate_on_demand 関数におけるサービス運用妨害 (ハング) の脆弱性 CWE-DesignError
CVE-2012-5514 2012-12-14 16:20 2012-12-3 Show GitHub Exploit DB Packet Storm
228253 6.9 警告 シトリックス・システムズ
Xen プロジェクト		 - Xen の XENMEM_exchange ハンドラにおけるサービス運用妨害 (クラッシュ) の脆弱性 CWE-20
不適切な入力確認 		CVE-2012-5513 2012-12-14 16:18 2012-12-3 Show GitHub Exploit DB Packet Storm
228254 3 注意 シトリックス・システムズ
Xen プロジェクト		 - Xen の HVMOP_set_mem_access ハンドラにおけるサービス運用妨害 (クラッシュ) の脆弱性 CWE-16
環境設定 		CVE-2012-5512 2012-12-14 16:17 2012-12-3 Show GitHub Exploit DB Packet Storm
228255 4.7 警告 シトリックス・システムズ
Xen プロジェクト		 - Xen の VRAM 汚染トラッキング機能におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2012-5511 2012-12-14 16:15 2012-12-3 Show GitHub Exploit DB Packet Storm
228256 4.7 警告 シトリックス・システムズ
Xen プロジェクト		 - Xen におけるサービス運用妨害 (ハイパーバイザのクラッシュ) の脆弱性 CWE-DesignError
CVE-2012-5510 2012-12-14 16:12 2012-12-3 Show GitHub Exploit DB Packet Storm
228257 4.4 警告 Xen プロジェクト - Xen におけるサービス運用妨害 (CPU 資源の消費およびホストハング) の脆弱性 CWE-399
リソース管理の問題 		CVE-2011-3131 2012-12-14 16:03 2011-08-12 Show GitHub Exploit DB Packet Storm
228258 6.5 警告 Centreon - Centreon にブラインド SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2012-5967 2012-12-14 15:59 2012-12-13 Show GitHub Exploit DB Packet Storm
228259 6.8 警告 D-Link Systems, Inc. - D-Link DSL-2730u に OS コマンドインジェクションの脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-5966 2012-12-14 15:49 2012-12-13 Show GitHub Exploit DB Packet Storm
228260 4.3 警告 ForeScout Technologies - Forescout CounterACT NAC デバイスにおけるARP ポイズニング攻撃が実行される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-4985 2012-12-14 15:37 2012-12-5 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 25, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
199591 7.5 HIGH
Network 		heinekingmedia stashcat An issue was discovered in heinekingmedia StashCat before 1.5.18 for Android. No certificate pinning is implemented; therefore the attacker could issue a certificate for the backend and the applicati… CWE-295
Improper Certificate Validation  		CVE-2017-11132 2024-11-21 12:07 2017-08-1 Show GitHub Exploit DB Packet Storm
199592 5.9 MEDIUM
Network 		stashcat heinekingmedia An issue was discovered in heinekingmedia StashCat through 1.7.5 for Android, through 0.0.80w for Web, and through 0.0.86 for Desktop. For authentication, the user password is hashed directly with SH… CWE-916
 Use of Password Hash With Insufficient Computational Effort 		CVE-2017-11131 2024-11-21 12:07 2017-08-1 Show GitHub Exploit DB Packet Storm
199593 8.1 HIGH
Network 		stashcat heinekingmedia An issue was discovered in heinekingmedia StashCat through 1.7.5 for Android, through 0.0.80w for Web, and through 0.0.86 for Desktop. The product's protocol only tries to ensure confidentiality. In … CWE-345
 Insufficient Verification of Data Authenticity 		CVE-2017-11130 2024-11-21 12:07 2017-08-1 Show GitHub Exploit DB Packet Storm
199594 9.8 CRITICAL
Network 		stashcat heinekingmedia An issue was discovered in heinekingmedia StashCat through 1.7.5 for Android. The keystore is locked with a hard-coded password. Therefore, everyone with access to the keystore can read the content o… CWE-798
 Use of Hard-coded Credentials 		CVE-2017-11129 2024-11-21 12:07 2017-08-1 Show GitHub Exploit DB Packet Storm
199595 5.5 MEDIUM
Local 		libid3tag_project libid3tag The id3_ucs4_length function in ucs4.c in libid3tag 0.15.1b allows remote attackers to cause a denial of service (NULL Pointer Dereference and application crash) via a crafted mp3 file. CWE-476
 NULL Pointer Dereference 		CVE-2017-11550 2024-11-21 12:07 2017-07-31 Show GitHub Exploit DB Packet Storm
199596 5.5 MEDIUM
Local 		timidity\+\+_project timidity\+\+ The play_midi function in playmidi.c in TiMidity++ 2.14.0 allows remote attackers to cause a denial of service (large loop and CPU consumption) via a crafted mid file. NOTE: CPU consumption might be … CWE-834
 Excessive Iteration 		CVE-2017-11549 2024-11-21 12:07 2017-07-31 Show GitHub Exploit DB Packet Storm
199597 5.5 MEDIUM
Local 		xiph libao The _tokenize_matrix function in audio_out.c in Xiph.Org libao 1.2.0 allows remote attackers to cause a denial of service (memory corruption) via a crafted MP3 file. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2017-11548 2024-11-21 12:07 2017-07-31 Show GitHub Exploit DB Packet Storm
199598 5.5 MEDIUM
Local 		timidity\+\+_project timidity\+\+ The resample_gauss function in resample.c in TiMidity++ 2.14.0 allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted mid file. NOTE: a crash might be releva… CWE-125
Out-of-bounds Read 		CVE-2017-11547 2024-11-21 12:07 2017-07-31 Show GitHub Exploit DB Packet Storm
199599 5.5 MEDIUM
Local 		timidity\+\+_project timidity\+\+ The insert_note_steps function in readmidi.c in TiMidity++ 2.14.0 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted mid file. NOTE: a cra… CWE-369
 Divide By Zero 		CVE-2017-11546 2024-11-21 12:07 2017-07-31 Show GitHub Exploit DB Packet Storm
199600 5.5 MEDIUM
Local 		sound_exchange_project
debian 		sound_exchange
debian_linux 		The wavwritehdr function in wav.c in Sound eXchange (SoX) 14.4.2 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted snd file, during conve… CWE-369
 Divide By Zero 		CVE-2017-11359 2024-11-21 12:07 2017-07-31 Show GitHub Exploit DB Packet Storm