Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228461 4.3 警告 PHP-Fusion - PHP-Fusion の downloads.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-6043 2012-11-28 14:21 2012-11-26 Show GitHub Exploit DB Packet Storm
228462 4.3 警告 GEOPAINTING - GPSMapEdit におけるサービス運用妨害 (クラッシュ) の脆弱性 CWE-119
バッファエラー 		CVE-2012-6042 2012-11-28 14:20 2012-11-26 Show GitHub Exploit DB Packet Storm
228463 6.8 警告 More Quick Tools - GreenBrowser におけるメモリ二重解放の脆弱性 CWE-399
リソース管理の問題 		CVE-2012-6041 2012-11-28 14:19 2012-11-26 Show GitHub Exploit DB Packet Storm
228464 4.3 警告 Convergine - File King Advanced File Managemen におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-6040 2012-11-28 11:47 2012-11-26 Show GitHub Exploit DB Packet Storm
228465 7.5 危険 YABSoft - YABSoft Advanced Image Hosting Script における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2012-6039 2012-11-28 11:46 2012-11-26 Show GitHub Exploit DB Packet Storm
228466 6.5 警告 razorCMS - razorCMS の admin/core/admin_func.php におけるファイルを閲覧される脆弱性 CWE-22
パス・トラバーサル 		CVE-2012-6038 2012-11-28 11:45 2012-11-26 Show GitHub Exploit DB Packet Storm
228467 4.3 警告 レッドハット - JBoss Enterprise Data Services Platform におけるログイン認証情報を取得される脆弱性 CWE-310
暗号の問題 		CVE-2012-3431 2012-11-27 20:19 2012-09-20 Show GitHub Exploit DB Packet Storm
228468 3.3 注意 レッドハット - 複数の JBoss Enterprise 製品の JGroups 診断サービスにおける診断情報を読まれる脆弱性 CWE-287
不適切な認証 		CVE-2012-2377 2012-11-27 20:16 2012-06-22 Show GitHub Exploit DB Packet Storm
228469 7.5 危険 Gajim.org - Gajim の common/logger.py における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2012-2086 2012-11-27 20:12 2011-11-4 Show GitHub Exploit DB Packet Storm
228470 4.6 警告 レッドハット - 複数の JBoss Enterprise 製品における任意のアプリケーションにアクセスされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-1167 2012-11-27 20:10 2012-06-19 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 21, 2026, 4:10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
198801 5.5 MEDIUM
Local 		google android In all Qualcomm products with Android releases from CAF using the Linux kernel, when reading from sysfs nodes, one can read more information than it is allowed to. CWE-200
Information Exposure 		CVE-2017-11040 2024-11-21 12:06 2017-09-22 Show GitHub Exploit DB Packet Storm
198802 5.5 MEDIUM
Local 		google android In all Qualcomm products with Android releases from CAF using the Linux kernel, while processing a vendor sub-command, a buffer over-read can occur. CWE-125
Out-of-bounds Read 		CVE-2017-11002 2024-11-21 12:06 2017-09-22 Show GitHub Exploit DB Packet Storm
198803 5.5 MEDIUM
Local 		google android In all Qualcomm products with Android releases from CAF using the Linux kernel, the length of the MAC address is not checked which may cause out of bounds read. CWE-200
Information Exposure 		CVE-2017-11001 2024-11-21 12:06 2017-09-22 Show GitHub Exploit DB Packet Storm
198804 7.8 HIGH
Local 		google android In all Qualcomm products with Android releases from CAF using the Linux kernel, in an ISP Camera kernel driver function, an incorrect bounds check may potentially lead to an out-of-bounds write. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2017-11000 2024-11-21 12:06 2017-09-22 Show GitHub Exploit DB Packet Storm
198805 7.8 HIGH
Local 		google android In all Qualcomm products with Android releases from CAF using the Linux kernel, concurrent calls into ioctl RMNET_IOCTL_ADD_MUX_CHANNEL in ipa wan driver may lead to memory corruption due to missing … CWE-119
NVD-CWE-noinfo
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2017-10999 2024-11-21 12:06 2017-09-22 Show GitHub Exploit DB Packet Storm
198806 7.8 HIGH
Local 		google android In all Qualcomm products with Android releases from CAF using the Linux kernel, in audio_aio_ion_lookup_vaddr, the buffer length, which is user input, ends up being used to validate if the buffer is … CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2017-10998 2024-11-21 12:06 2017-09-22 Show GitHub Exploit DB Packet Storm
198807 7.8 HIGH
Local 		google android In all Qualcomm products with Android releases from CAF using the Linux kernel, using a debugfs node, a write to a PCIe register can cause corruption of kernel memory. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2017-10997 2024-11-21 12:06 2017-09-22 Show GitHub Exploit DB Packet Storm
198808 5.5 MEDIUM
Local 		google android In all Qualcomm products with Android releases from CAF using the Linux kernel, out of bounds access is possible in c_show(), due to compat_hwcap_str[] not being NULL-terminated. This error is not fa… CWE-200
Information Exposure 		CVE-2017-10996 2024-11-21 12:06 2017-09-22 Show GitHub Exploit DB Packet Storm
198809 8.8 HIGH
Network 		ruby-lang ruby The Basic authentication code in WEBrick library in Ruby before 2.2.8, 2.3.x before 2.3.5, and 2.4.x through 2.4.1 allows remote attackers to inject terminal emulator escape sequences into its log an… CWE-287
Improper Authentication 		CVE-2017-10784 2024-11-21 12:06 2017-09-20 Show GitHub Exploit DB Packet Storm
198810 9.8 CRITICAL
Network 		qnap qts In the medialibrary component in QNAP NAS 4.3.3.0229, an un-authenticated, remote attacker can execute arbitrary system commands as the root user of the NAS application. CWE-20
 Improper Input Validation  		CVE-2017-10700 2024-11-21 12:06 2017-09-20 Show GitHub Exploit DB Packet Storm