Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228271 5 警告 コルネ株式会社 - Welcart におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-5177 2012-12-14 12:02 2012-12-14 Show GitHub Exploit DB Packet Storm
228272 4.3 警告 Zoho Corporation - ManageEngine AssetExplorer にクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-5956 2012-12-13 18:21 2012-12-7 Show GitHub Exploit DB Packet Storm
228273 5 警告 Layton Technology - Layton Helpbox におけるログインページの平文の認証情報を漏えいする脆弱性 CWE-310
暗号の問題 		CVE-2012-4977 2012-12-13 15:30 2012-12-12 Show GitHub Exploit DB Packet Storm
228274 5 警告 Layton Technology - Layton Helpbox における ODBC データベースの認証情報を漏えいする脆弱性 CWE-200
情報漏えい 		CVE-2012-4976 2012-12-13 15:29 2012-12-12 Show GitHub Exploit DB Packet Storm
228275 4 警告 Layton Technology - Layton Helpbox における任意のサポートチケットのデータを変更される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-4975 2012-12-13 15:26 2012-12-12 Show GitHub Exploit DB Packet Storm
228276 6.5 警告 Layton Technology - Layton Helpbox における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-4974 2012-12-13 15:25 2012-12-12 Show GitHub Exploit DB Packet Storm
228277 4.3 警告 Layton Technology - Layton Helpbox におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-4972 2012-12-13 15:25 2012-12-12 Show GitHub Exploit DB Packet Storm
228278 9.4 危険 Layton Technology - Layton Helpbox における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2012-4971 2012-12-13 15:23 2012-12-12 Show GitHub Exploit DB Packet Storm
228279 10 危険 Google - Google Chrome におけるサービス運用妨害 (スタックメモリ破損) の脆弱性 CWE-119
バッファエラー 		CVE-2012-5144 2012-12-13 15:21 2012-12-11 Show GitHub Exploit DB Packet Storm
228280 10 危険 Google - Google Chrome における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2012-5143 2012-12-13 15:20 2012-12-11 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 20, 2026, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
198831 6.5 MEDIUM
Network 		xen xen Xen through 4.8.x mishandles virtual interrupt injection, which allows guest OS users to cause a denial of service (hypervisor crash), aka XSA-223. NVD-CWE-noinfo
CVE-2017-10919 2024-11-21 12:06 2017-07-5 Show GitHub Exploit DB Packet Storm
198832 10.0 CRITICAL
Network 		xen xen Xen through 4.8.x does not validate memory allocations during certain P2M operations, which allows guest OS users to obtain privileged host OS access, aka XSA-222. CWE-20
 Improper Input Validation  		CVE-2017-10918 2024-11-21 12:06 2017-07-5 Show GitHub Exploit DB Packet Storm
198833 9.1 CRITICAL
Network 		xen xen Xen through 4.8.x does not validate the port numbers of polled event channel ports, which allows guest OS users to cause a denial of service (NULL pointer dereference and host OS crash) or possibly o… CWE-476
 NULL Pointer Dereference 		CVE-2017-10917 2024-11-21 12:06 2017-07-5 Show GitHub Exploit DB Packet Storm
198834 7.5 HIGH
Network 		xen xen The vCPU context-switch implementation in Xen through 4.8.x improperly interacts with the Memory Protection Extensions (MPX) and Protection Key (PKU) features, which makes it easier for guest OS user… CWE-200
Information Exposure 		CVE-2017-10916 2024-11-21 12:06 2017-07-5 Show GitHub Exploit DB Packet Storm
198835 9.0 CRITICAL
Network 		xen xen The shadow-paging feature in Xen through 4.8.x mismanages page references and consequently introduces a race condition, which allows guest OS users to obtain Xen privileges, aka XSA-219. CWE-362
Race Condition 		CVE-2017-10915 2024-11-21 12:06 2017-07-5 Show GitHub Exploit DB Packet Storm
198836 8.1 HIGH
Network 		xen xen The grant-table feature in Xen through 4.8.x has a race condition leading to a double free, which allows guest OS users to cause a denial of service (memory consumption), or possibly obtain sensitive… CWE-362
CWE-415
Race Condition
 Double Free 		CVE-2017-10914 2024-11-21 12:06 2017-07-5 Show GitHub Exploit DB Packet Storm
198837 9.8 CRITICAL
Network 		xen xen The grant-table feature in Xen through 4.8.x provides false mapping information in certain cases of concurrent unmap calls, which allows backend attackers to obtain sensitive information or gain priv… NVD-CWE-noinfo
CVE-2017-10913 2024-11-21 12:06 2017-07-5 Show GitHub Exploit DB Packet Storm
198838 10.0 CRITICAL
Network 		xen xen Xen through 4.8.x mishandles page transfer, which allows guest OS users to obtain privileged host OS access, aka XSA-217. NVD-CWE-noinfo
CVE-2017-10912 2024-11-21 12:06 2017-07-5 Show GitHub Exploit DB Packet Storm
198839 6.5 MEDIUM
Local 		linux linux_kernel The make_response function in drivers/block/xen-blkback/blkback.c in the Linux kernel before 4.11.8 allows guest OS users to obtain sensitive information from host OS (or other guest OS) kernel memor… CWE-200
Information Exposure 		CVE-2017-10911 2024-11-21 12:06 2017-07-5 Show GitHub Exploit DB Packet Storm
198840 7.5 HIGH
Network 		linux
debian 		linux_kernel
debian_linux 		Memory leak in the virtio_gpu_object_create function in drivers/gpu/drm/virtio/virtgpu_object.c in the Linux kernel through 4.11.8 allows attackers to cause a denial of service (memory consumption) b… CWE-772
 Missing Release of Resource after Effective Lifetime 		CVE-2017-10810 2024-11-21 12:06 2017-07-5 Show GitHub Exploit DB Packet Storm