Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
228831	6.8	警告	リアルネットワークス	-	RealNetworks RealPlayer におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2012-4987	2012-11-6 14:36	2012-11-4	Show	GitHub Exploit DB Packet Storm

228832	3.6	注意	アップル	-	Apple iOS 6.0.1 未満のパスコードロックの実装におけるパスコード要求を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-3750	2012-11-6 14:33	2012-11-3	Show	GitHub Exploit DB Packet Storm

228833	6.8	警告	Irfan Skiljan	-	IrfanView 用 FlashPix PlugIn で使用される libfpx におけるメモリ二重解放の脆弱性	CWE-399 リソース管理の問題	CVE-2012-0025	2012-11-6 14:23	2012-11-2	Show	GitHub Exploit DB Packet Storm

228834	7.5	危険	Morbus Iff	-	Drupal 用 Activism モジュールにおけるアクセス制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-4498	2012-11-6 14:21	2012-08-29	Show	GitHub Exploit DB Packet Storm

228835	2.1	注意	Devsaran	-	Drupal 用 Elegant Theme モジュールにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-4497	2012-11-6 14:19	2012-08-15	Show	GitHub Exploit DB Packet Storm

228836	2.1	注意	Roy Baxter	-	Drupal 用 Better Revisions モジュールにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-4493	2012-11-6 14:18	2012-08-8	Show	GitHub Exploit DB Packet Storm

228837	4	警告	Boombatower	-	Drupal 用 Subuser モジュールにおけるロールを変更される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-4487	2012-11-6 14:07	2012-07-25	Show	GitHub Exploit DB Packet Storm

228838	6.8	警告	Boombatower	-	Drupal 用 Subuser モジュールにおけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2012-4486	2012-11-6 14:04	2012-07-25	Show	GitHub Exploit DB Packet Storm

228839	7.5	危険	Curtis Galloway	-	libexif の exif-entry.c の exif_entry_get_value 関数における整数アンダーフローの脆弱性	CWE-189 数値処理の問題	CVE-2012-2841	2012-11-6 12:28	2012-07-12	Show	GitHub Exploit DB Packet Storm

228840	7.5	危険	Curtis Galloway	-	libexif の exif-entry.c の exif_convert_utf16_to_utf8 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-189 数値処理の問題	CVE-2012-2840	2012-11-6 12:27	2012-07-12	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:April 24, 2026, 4 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
198861	9.8	CRITICAL Network	intercom	malion	MaLion for Windows and Mac 5.0.0 to 5.2.1 allows remote attackers to bypass authentication to alter settings in Relay Service Server.	CWE-287 Improper Authentication	CVE-2017-10817	2024-11-21 12:06	2017-08-5	Show	GitHub Exploit DB Packet Storm

198862	9.8	CRITICAL Network	intercom	malion	SQL injection vulnerability in the MaLion for Windows and Mac 5.0.0 to 5.2.1 allows remote attackers to execute arbitrary SQL commands via Relay Service Server.	CWE-89 SQL Injection	CVE-2017-10816	2024-11-21 12:06	2017-08-5	Show	GitHub Exploit DB Packet Storm

198863	8.1	HIGH Network	intercom	malion	MaLion for Windows 5.2.1 and earlier (only when "Remote Control" is installed) and MaLion for Mac 4.0.1 to 5.2.1 (only when "Remote Control" is installed) allow remote attackers to bypass authenticat…	CWE-287 Improper Authentication	CVE-2017-10815	2024-11-21 12:06	2017-08-5	Show	GitHub Exploit DB Packet Storm

198864	7.5	HIGH Network	dell	storage_manager_2016	Directory Traversal in Dell Storage Manager 2016 R2.1 causes Information Disclosure when the doGet method of the EmWebsiteServlet class doesn't properly validate user provided path before using it in…	CWE-22 Path Traversal	CVE-2017-10949	2024-11-21 12:06	2017-08-5	Show	GitHub Exploit DB Packet Storm

198865	5.5	MEDIUM Local	qemu debian	qemu debian_linux	Stack-based buffer overflow in hw/usb/redirect.c in QEMU (aka Quick Emulator) allows local guest OS users to cause a denial of service (QEMU process crash) via vectors related to logging debug messag…	CWE-787 Out-of-bounds Write	CVE-2017-10806	2024-11-21 12:06	2017-08-3	Show	GitHub Exploit DB Packet Storm

198866	7.5	HIGH Network	qemu debian redhat	qemu debian_linux virtualization openstack enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server enterprise_linux_server_aus enterprise_linux_server_tu…	qemu-nbd in QEMU (aka Quick Emulator) does not ignore SIGPIPE, which allows remote attackers to cause a denial of service (daemon crash) by disconnecting during a server-to-client reply attempt.	NVD-CWE-noinfo	CVE-2017-10664	2024-11-21 12:06	2017-08-3	Show	GitHub Exploit DB Packet Storm

198867	6.1	MEDIUM Network	simplerisk	simplerisk	In SimpleRisk 20170614-001, a CSRF attack on reset.php (aka the Send Password Reset Email form) can insert XSS sequences via the user parameter.	CWE-79 Cross-site Scripting	CVE-2017-10711	2024-11-21 12:06	2017-07-24	Show	GitHub Exploit DB Packet Storm

198868	8.8	HIGH Network	contao	contao_cms	Contao before 3.5.28 and 4.x before 4.4.1 allows remote attackers to include and execute arbitrary local PHP files via a crafted parameter in a URL, aka Directory Traversal.	CWE-22 Path Traversal	CVE-2017-10993	2024-11-21 12:06	2017-07-21	Show	GitHub Exploit DB Packet Storm

198869	6.1	MEDIUM Network	d-link	dir-600m_firmware	On D-Link DIR-600M devices before C1_v3.05ENB01_beta_20170306, XSS was found in the form2userconfig.cgi username parameter.	CWE-79 Cross-site Scripting	CVE-2017-10676	2024-11-21 12:06	2017-07-20	Show	GitHub Exploit DB Packet Storm

198870	6.1	MEDIUM Network	phpsocial	phpsocial	phpSocial (formerly phpDolphin) before 3.0.1 has XSS in the PATH_INFO to the search/tag/ URI.	CWE-79 Cross-site Scripting	CVE-2017-10801	2024-11-21 12:06	2017-07-19	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed