Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
228501	6.9	警告	シトリックス・システムズ	-	Xen の Transcendent Memory におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2012-3497	2012-11-27 15:55	2012-09-5	Show	GitHub Exploit DB Packet Storm

228502	4.3	警告	アップル	-	複数の Apple 製品で使用される WebKit におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-3695	2012-11-27 14:44	2012-07-25	Show	GitHub Exploit DB Packet Storm

228503	4.3	警告	アップル	-	Apple Safari 6.0 未満におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-0678	2012-11-27 14:41	2012-07-25	Show	GitHub Exploit DB Packet Storm

228504	9.3	危険	Munin	-	Munin の munin-cgi-graph における任意のディレクトリにファイルを作成される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-3513	2012-11-27 14:10	2012-08-31	Show	GitHub Exploit DB Packet Storm

228505	7.2	危険	Munin	-	Munin における任意のコードを実行される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-3512	2012-11-27 14:09	2012-08-31	Show	GitHub Exploit DB Packet Storm

228506	9	危険	日立	-	日立の JP1/File Transmission Server/FTP における複数の脆弱性	CWE-noinfo 情報不足	-	2012-11-26 18:00	2012-11-1	Show	GitHub Exploit DB Packet Storm

228507	4.3	警告	Joomla!	-	Joomla! におけるクリックジャッキング攻撃の脆弱性	CWE-noinfo 情報不足	CVE-2012-5827	2012-11-26 17:51	2012-11-8	Show	GitHub Exploit DB Packet Storm

228508	6.8	警告	Exim Development	-	Exim の dkim.c におけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2012-5671	2012-11-26 17:49	2012-10-26	Show	GitHub Exploit DB Packet Storm

228509	4.3	警告	Ipswitch, Inc.	-	Ipswitch WhatsUp Gold におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-4344	2012-11-26 17:26	2012-08-15	Show	GitHub Exploit DB Packet Storm

228510	5	警告	ViewVC	-	ViewVC の SVN のリビジョン表示における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2012-3357	2012-11-26 17:03	2012-06-15	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:April 21, 2026, 4:10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
198561	6.1	MEDIUM Network	pulsesecure	pulse_connect_secure	Pulse Connect Secure 8.3R1 has Reflected XSS in adminservercacertdetails.cgi. In the admin panel, the certid parameter of adminservercacertdetails.cgi is reflected in the application's response and i…	CWE-79 Cross-site Scripting	CVE-2017-11194	2024-11-21 12:07	2017-07-13	Show	GitHub Exploit DB Packet Storm

198562	8.8	HIGH Network	pulsesecure	pulse_connect_secure	Pulse Connect Secure 8.3R1 has CSRF in diag.cgi. In the panel, the diag.cgi file is responsible for running commands such as ping, ping6, traceroute, traceroute6, nslookup, arp, and Portprobe. These …	CWE-352 Origin Validation Error	CVE-2017-11193	2024-11-21 12:07	2017-07-13	Show	GitHub Exploit DB Packet Storm

198563	7.8	HIGH Local	rarzilla	unrar-free	unrarlib.c in unrar-free 0.0.1, when _DEBUG_LOG mode is enabled, might allow remote attackers to cause a denial of service (stack-based buffer overflow and application crash) or possibly have unspeci…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2017-11190	2024-11-21 12:07	2017-07-13	Show	GitHub Exploit DB Packet Storm

198564	6.5	MEDIUM Network	rarzilla	unrar-free	unrarlib.c in unrar-free 0.0.1 might allow remote attackers to cause a denial of service (NULL pointer dereference and application crash), which could be relevant if unrarlib is used as library code …	CWE-476 NULL Pointer Dereference	CVE-2017-11189	2024-11-21 12:07	2017-07-13	Show	GitHub Exploit DB Packet Storm

198565	7.5	HIGH Network	imagemagick	imagemagick	The ReadDPXImage function in coders\dpx.c in ImageMagick 7.0.6-0 has a large loop vulnerability that can cause CPU exhaustion via a crafted DPX file, related to lack of an EOF check.	CWE-834 Excessive Iteration	CVE-2017-11188	2024-11-21 12:07	2017-07-13	Show	GitHub Exploit DB Packet Storm

198566	9.8	CRITICAL Network	phpmyfaq	phpmyfaq	phpMyFAQ before 2.9.8 does not properly mitigate brute-force attacks that try many passwords in attempted logins quickly.	CWE-307 mproper Restriction of Excessive Authentication Attempts	CVE-2017-11187	2024-11-21 12:07	2017-07-12	Show	GitHub Exploit DB Packet Storm

198567	9.8	CRITICAL Network	finecms_project	finecms	FineCMS 2.1.0 allows remote attackers to execute arbitrary PHP code by using a URL Manager "Add Site" action to enter this code after a ', sequence in a domain name, as demonstrated by the ',phpinfo(…	CWE-94 Code Injection	CVE-2017-11167	2024-11-21 12:07	2017-07-12	Show	GitHub Exploit DB Packet Storm

198568	9.8	CRITICAL Network	datataker	dt80_dex_firmware	dataTaker DT80 dEX 1.50.012 allows remote attackers to obtain sensitive credential and configuration information via a direct request for the /services/getFile.cmd?userfile=config.xml URI.	CWE-200 Information Exposure	CVE-2017-11165	2024-11-21 12:07	2017-07-12	Show	GitHub Exploit DB Packet Storm

198569	5.4	MEDIUM Network	fairsketch	rise_ultimate_project_manager	In Rise Ultimate Project Manager v1.8, XSS vulnerabilities were found in the My Profile section. All input fields are vulnerable.	CWE-79 Cross-site Scripting	CVE-2017-11182	2024-11-21 12:07	2017-07-12	Show	GitHub Exploit DB Packet Storm

198570	5.4	MEDIUM Network	fairsketch	rise_ultimate_project_manager	In Rise Ultimate Project Manager v1.8, XSS vulnerabilities were found in the Messaging section. Subject and Message fields are vulnerable.	CWE-79 Cross-site Scripting	CVE-2017-11181	2024-11-21 12:07	2017-07-12	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed