Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
228671	4.3	警告	TYPO3 Association	-	TYPO3 のインストールツールにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-3531	2012-11-15 14:26	2012-08-15	Show	GitHub Exploit DB Packet Storm

228672	4.3	警告	TYPO3 Association	-	TYPO3 の t3lib_div::quoteJSvalue API 関数におけるクロスサイトスクリプティングの脆弱性	CWE-Other その他	CVE-2012-3530	2012-11-15 14:25	2012-08-15	Show	GitHub Exploit DB Packet Storm

228673	3.5	注意	TYPO3 Association	-	TYPO3 のバックエンドの configuration モジュールにおける暗号鍵を取得される脆弱性	CWE-200 情報漏えい	CVE-2012-3529	2012-11-15 14:24	2012-08-15	Show	GitHub Exploit DB Packet Storm

228674	4	警告	TYPO3 Association	-	TYPO3 のバックエンドにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-3528	2012-11-15 14:23	2012-08-15	Show	GitHub Exploit DB Packet Storm

228675	4.6	警告	TYPO3 Association	-	TYPO3 のバックエンドのヘルプシステムにおける任意のオブジェクトのシリアル化を解除される脆弱性	CWE-310 暗号の問題	CVE-2012-3527	2012-11-15 14:22	2012-08-15	Show	GitHub Exploit DB Packet Storm

228676	7.5	危険	Zabbix	-	Zabbix の frontends/php/popup_bitem.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2012-3435	2012-11-15 12:09	2012-07-18	Show	GitHub Exploit DB Packet Storm

228677	10	危険	マイクロソフトアドビシステムズ Google	-	Adobe Flash Player および Adobe AIR におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2012-5287	2012-11-14 16:07	2012-11-2	Show	GitHub Exploit DB Packet Storm

228678	10	危険	マイクロソフトアドビシステムズ Google	-	Adobe Flash Player および Adobe AIR におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2012-5286	2012-11-14 16:07	2012-11-2	Show	GitHub Exploit DB Packet Storm

228679	10	危険	マイクロソフトアドビシステムズ Google	-	Adobe Flash Player および Adobe AIR における脆弱性	CWE-noinfo 情報不足	CVE-2012-5673	2012-11-14 16:07	2012-11-2	Show	GitHub Exploit DB Packet Storm

228680	10	危険	マイクロソフトアドビシステムズ Google	-	Adobe Flash Player および Adobe AIR におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2012-5285	2012-11-14 16:06	2012-11-2	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:April 25, 2026, 4:08 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
199201	8.4	HIGH Local	razer	synapse	Razer Synapse 2.20.15.1104 and earlier uses weak permissions for the CrashReporter directory, which allows local users to gain privileges via a Trojan horse dbghelp.dll file.	CWE-732 Incorrect Permission Assignment for Critical Resource	CVE-2017-11652	2024-11-21 12:08	2017-08-19	Show	GitHub Exploit DB Packet Storm

199202	6.5	MEDIUM Network	mindwerks	wildmidi	The _WM_SetupMidiEvent function in internal_midi.c:2122 in WildMIDI 0.4.2 can cause a denial of service (invalid memory read and application crash) via a crafted mid file.	CWE-125 Out-of-bounds Read	CVE-2017-11664	2024-11-21 12:08	2017-08-18	Show	GitHub Exploit DB Packet Storm

199203	6.5	MEDIUM Network	mindwerks	wildmidi	The _WM_SetupMidiEvent function in internal_midi.c:2315 in WildMIDI 0.4.2 can cause a denial of service (invalid memory read and application crash) via a crafted mid file.	CWE-125 Out-of-bounds Read	CVE-2017-11663	2024-11-21 12:08	2017-08-18	Show	GitHub Exploit DB Packet Storm

199204	7.5	HIGH Network	mindwerks	wildmidi	The _WM_ParseNewMidi function in f_midi.c in WildMIDI 0.4.2 can cause a denial of service (invalid memory read and application crash) via a crafted mid file.	CWE-125 Out-of-bounds Read	CVE-2017-11662	2024-11-21 12:08	2017-08-18	Show	GitHub Exploit DB Packet Storm

199205	7.5	HIGH Network	mindwerks	wildmidi	The _WM_SetupMidiEvent function in internal_midi.c:2318 in WildMIDI 0.4.2 can cause a denial of service (invalid memory read and application crash) via a crafted mid file.	CWE-125 Out-of-bounds Read	CVE-2017-11661	2024-11-21 12:08	2017-08-18	Show	GitHub Exploit DB Packet Storm

199206	8.8	HIGH Local	hashicorp	vagrant_vmware_fusion	HashiCorp Vagrant VMware Fusion plugin (aka vagrant-vmware-fusion) before 4.0.24 uses weak permissions for the sudo helper scripts, allows local users to execute arbitrary code with root privileges b…	CWE-276 Incorrect Default Permissions	CVE-2017-11741	2024-11-21 12:08	2017-08-9	Show	GitHub Exploit DB Packet Storm

199207	7.3	HIGH Local	dashlane	dashlane	Dashlane might allow local users to gain privileges by placing a Trojan horse WINHTTP.dll in the %APPDATA%\Dashlane directory.	CWE-426 Untrusted Search Path	CVE-2017-11657	2024-11-21 12:08	2017-08-4	Show	GitHub Exploit DB Packet Storm

199208	9.8	CRITICAL Network	ioquake3	ioquake3	Buffer overflow in ioquake3 before 2017-08-02 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted packet.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2017-11721	2024-11-21 12:08	2017-08-3	Show	GitHub Exploit DB Packet Storm

199209	6.5	MEDIUM Network	libquicktime	libquicktime	In libquicktime 1.2.4, an allocation failure was found in the function quicktime_read_ftyp in ftyp.c, which allows attackers to cause a denial of service via a crafted file.	CWE-20 Improper Input Validation	CVE-2017-12145	2024-11-21 12:08	2017-08-2	Show	GitHub Exploit DB Packet Storm

199210	5.5	MEDIUM Local	ytnef_project	ytnef	In ytnef 1.9.2, an allocation failure was found in the function TNEFFillMapi in ytnef.c, which allows attackers to cause a denial of service via a crafted file.	CWE-770 Allocation of Resources Without Limits or Throttling	CVE-2017-12144	2024-11-21 12:08	2017-08-2	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed