Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
228951 5.8 警告 Eduserv - Java 用 Eduserv OpenAthens におけるメッセージを偽造される脆弱性 CWE-287
不適切な認証
CVE-2012-5353 2012-10-26 15:25 2012-10-9 Show GitHub Exploit DB Packet Storm
228952 4.3 警告 シマンテック - Symantec Messaging Gateway におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-0307 2012-10-26 14:37 2012-08-27 Show GitHub Exploit DB Packet Storm
228953 4.6 警告 (複数のベンダ) - 複数の DomainKeys Identified Mail (DKIM) 実装に問題 - - 2012-10-26 12:22 2012-10-25 Show GitHub Exploit DB Packet Storm
228954 4.3 警告 Come on Girls Interface - 東京BBS におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-4019 2012-10-26 12:00 2012-10-26 Show GitHub Exploit DB Packet Storm
228955 4.3 警告 マイクロソフト - Microsoft Office 2007 の Excel 2007 および Microsoft Excel Viewer におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足
CVE-2012-5672 2012-10-26 10:55 2012-10-25 Show GitHub Exploit DB Packet Storm
228956 10 危険 Apache Software Foundation - Apache Open For Business Project における脆弱性 CWE-noinfo
情報不足
CVE-2012-3506 2012-10-26 10:34 2012-10-25 Show GitHub Exploit DB Packet Storm
228957 4.3 警告 Video User Manuals - WordPress 用 White Label CMS プラグインの wlcms-plugin.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-5388 2012-10-25 15:03 2012-10-24 Show GitHub Exploit DB Packet Storm
228958 6.8 警告 Video User Manuals - WordPress 用 White Label CMS プラグインの wlcms-plugin.php におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2012-5387 2012-10-25 14:16 2012-10-24 Show GitHub Exploit DB Packet Storm
228959 7.5 危険 TIBCO Software - TIBCO Formvine における重要な情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-5302 2012-10-25 14:15 2012-10-23 Show GitHub Exploit DB Packet Storm
228960 10 危険 アドビシステムズ - Adobe Shockwave Player におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2012-5273 2012-10-25 11:44 2012-10-23 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 26, 2026, 4:08 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
198451 5.9 MEDIUM
Network
simplesamlphp simplesamlphp The SimpleSAML_Auth_TimeLimitedToken class in SimpleSAMLphp 1.14.14 and earlier allows attackers with access to a secret token to extend its validity period by manipulating the prepended time offset. CWE-613
 Insufficient Session Expiration
CVE-2017-12867 2024-11-21 12:10 2017-08-30 Show GitHub Exploit DB Packet Storm
198452 6.1 MEDIUM
Network
c.p.sub_project c.p.sub Cross-site scripting (XSS) vulnerability in C.P.Sub 5.2 allows remote attackers to inject arbitrary web script or HTML via the keyword parameter to index.php. CWE-79
Cross-site Scripting
CVE-2017-12856 2024-11-21 12:10 2017-08-30 Show GitHub Exploit DB Packet Storm
198453 5.5 MEDIUM
Local
mpg123 mpg123 Integer overflow in the INT123_parse_new_id3 function in the ID3 parser in mpg123 before 1.25.5 on 32-bit platforms allows remote attackers to cause a denial of service via a crafted file, which trig… CWE-190
 Integer Overflow or Wraparound
CVE-2017-12797 2024-11-21 12:10 2017-08-30 Show GitHub Exploit DB Packet Storm
198454 7.5 HIGH
Network
question2answer question2answer qa-include/qa-install.php in Question2Answer before 1.7.5 allows remote attackers to create multiple user accounts. CWE-20
 Improper Input Validation 
CVE-2017-12775 2024-11-21 12:10 2017-08-30 Show GitHub Exploit DB Packet Storm
198455 8.8 HIGH
Network
nomachine nomachine An unspecified server utility in NoMachine before 5.3.10 on Mac OS X and Linux allows authenticated users to gain privileges by gaining access to local files. CWE-276
Incorrect Default Permissions 
CVE-2017-12763 2024-11-21 12:10 2017-08-30 Show GitHub Exploit DB Packet Storm
198456 6.5 MEDIUM
Network
libgig0 libgig The gig::Region::GetSampleFromWavePool function in gig.cpp in libgig 4.0.0 allows remote attackers to cause a denial of service (invalid memory read and application crash) via a crafted gig file. CWE-125
Out-of-bounds Read
CVE-2017-12954 2024-11-21 12:10 2017-08-29 Show GitHub Exploit DB Packet Storm
198457 6.5 MEDIUM
Network
libgig0 libgig The gig::Instrument::UpdateRegionKeyTable function in gig.cpp in libgig 4.0.0 allows remote attackers to cause a denial of service (invalid memory write and application crash) via a crafted gig file. CWE-787
 Out-of-bounds Write
CVE-2017-12953 2024-11-21 12:10 2017-08-29 Show GitHub Exploit DB Packet Storm
198458 6.5 MEDIUM
Network
libgig0 libgig The LoadString function in helper.h in libgig 4.0.0 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted gig file. CWE-476
 NULL Pointer Dereference
CVE-2017-12952 2024-11-21 12:10 2017-08-29 Show GitHub Exploit DB Packet Storm
198459 6.5 MEDIUM
Network
libgig0 libgig The gig::DimensionRegion::CreateVelocityTable function in gig.cpp in libgig 4.0.0 allows remote attackers to cause a denial of service (stack-based buffer over-read and application crash) via a craft… CWE-125
Out-of-bounds Read
CVE-2017-12951 2024-11-21 12:10 2017-08-29 Show GitHub Exploit DB Packet Storm
198460 6.5 MEDIUM
Network
linuxsampler libgig The gig::Region::Region function in gig.cpp in libgig 4.0.0 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted gig file. CWE-476
 NULL Pointer Dereference
CVE-2017-12950 2024-11-21 12:10 2017-08-29 Show GitHub Exploit DB Packet Storm