Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
228581	4.3	警告	b2evolution	-	b2evolution の blogs/blog1.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-5911	2012-11-20 14:55	2012-11-17	Show	GitHub Exploit DB Packet Storm

228582	6.5	警告	b2evolution	-	b2evolution の blogs/htsrv/viewfile.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2012-5910	2012-11-20 14:53	2012-11-17	Show	GitHub Exploit DB Packet Storm

228583	7.5	危険	MyBB Group	-	MyBB の admin/modules/user/users.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2012-5909	2012-11-20 14:53	2012-11-17	Show	GitHub Exploit DB Packet Storm

228584	4.3	警告	MyBB Group	-	MyBB の admin/modules/user/users.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-5908	2012-11-20 14:52	2012-11-17	Show	GitHub Exploit DB Packet Storm

228585	5	警告	TomatoCart	-	TomatoCart の json.php におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2012-5907	2012-11-20 14:41	2012-11-17	Show	GitHub Exploit DB Packet Storm

228586	4.3	警告	More Quick Tools	-	GreenBrowser におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-5906	2012-11-20 14:24	2012-11-17	Show	GitHub Exploit DB Packet Storm

228587	4	警告	Elif Keir	-	KnFTPd におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2012-5905	2012-11-20 14:08	2012-11-17	Show	GitHub Exploit DB Packet Storm

228588	6.8	警告	Irfan Skiljan	-	IrfanView におけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2012-5904	2012-11-20 13:56	2012-03-28	Show	GitHub Exploit DB Packet Storm

228589	4.3	警告	Simple Machines	-	Simple Machines Forum におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-5903	2012-11-20 13:54	2012-11-17	Show	GitHub Exploit DB Packet Storm

228590	4.3	警告	DFLabs	-	DFLabs PTK の ptk/lib/modal_bookmark.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-5902	2012-11-20 13:53	2012-11-17	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:April 26, 2026, 4:08 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
198001	7.5	HIGH Network	google	android	An information disclosure vulnerability in the Android media framework (libmedia drm). Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID A-62872384.	CWE-200 Information Exposure	CVE-2017-13152	2024-11-21 12:11	2017-12-6	Show	GitHub Exploit DB Packet Storm

198002	8.8	HIGH Network	google	android	A remote code execution vulnerability in the Android media framework (libmpeg2). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID A-63874456.	CWE-682 Incorrect Calculation	CVE-2017-13151	2024-11-21 12:11	2017-12-6	Show	GitHub Exploit DB Packet Storm

198003	9.1	CRITICAL Network	google	android	An information disclosure vulnerability in the Android media framework (n/a). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0. Android ID A-38328132.	CWE-200 Information Exposure	CVE-2017-13150	2024-11-21 12:11	2017-12-6	Show	GitHub Exploit DB Packet Storm

198004	9.1	CRITICAL Network	google	android	An information disclosure vulnerability in the Android media framework (n/a). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0. Android ID A-65719872.	CWE-200 Information Exposure	CVE-2017-13149	2024-11-21 12:11	2017-12-6	Show	GitHub Exploit DB Packet Storm

198005	6.5	MEDIUM Network	google	android	A denial of service vulnerability in the Android media framework (libmpeg2). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID A-65717533.	CWE-20 Improper Input Validation	CVE-2017-13148	2024-11-21 12:11	2017-12-6	Show	GitHub Exploit DB Packet Storm

198006	4.8	MEDIUM Physics	ethicon	endo-surgery_generator_gen11_firmware	An improper authentication issue was discovered in Johnson & Johnson Ethicon Endo-Surgery Generator Gen11, all versions released before November 29, 2017. The security authentication mechanism used b…	CWE-287 Improper Authentication	CVE-2017-14018	2024-11-21 12:11	2017-12-6	Show	GitHub Exploit DB Packet Storm

198007	9.8	CRITICAL Network	ismartalarm	cubeone_firmware	Password file exposure in firmware in iSmartAlarm CubeOne version 2.2.4.8 and earlier allows attackers to execute arbitrary commands with administrative privileges by retrieving credentials from this…	CWE-200 Information Exposure	CVE-2017-13664	2024-11-21 12:11	2017-12-2	Show	GitHub Exploit DB Packet Storm

198008	7.5	HIGH Network	ismartalarm	cubeone_firmware	Encryption key exposure in firmware in iSmartAlarm CubeOne version 2.2.4.8 and earlier allows attackers to decrypt log files via an exposed key.	CWE-312 Cleartext Storage of Sensitive Information	CVE-2017-13663	2024-11-21 12:11	2017-12-2	Show	GitHub Exploit DB Packet Storm

198009	8.1	HIGH Network	apple	mac_os_x	An issue was discovered in certain Apple products. macOS High Sierra before Security Update 2017-001 is affected. The issue involves the "Directory Utility" component. It allows attackers to obtain a…	CWE-287 Improper Authentication	CVE-2017-13872	2024-11-21 12:11	2017-11-30	Show	GitHub Exploit DB Packet Storm

198010	9.8	CRITICAL Network	moxa	eds-g512e_firmware	An issue was discovered on MOXA EDS-G512E 5.1 build 16072215 devices. The backup file contains sensitive information in a insecure way. There is no salt for password hashing. Indeed passwords are sto…	CWE-200 Information Exposure	CVE-2017-13701	2024-11-21 12:11	2017-11-24	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed