Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":April 28, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
229301	5	警告	VMware	-	VMware View におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2012-5978	2012-12-20 15:27	2012-12-13	Show	GitHub Exploit DB Packet Storm

229302	3.5	注意	IBM	-	IBM Lotus Foundations Start におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-4848	2012-12-20 15:23	2012-12-12	Show	GitHub Exploit DB Packet Storm

229303	4.3	警告	IBM	-	IBM Lotus Notes における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2012-4846	2012-12-20 15:21	2012-12-12	Show	GitHub Exploit DB Packet Storm

229304	3.3	注意	IBM	-	Linux 上で稼働する IBM ASU および BoMC における任意のファイルを上書きされる脆弱性	CWE-59 リンク解釈の問題	CVE-2012-3329	2012-12-20 15:11	2012-12-19	Show	GitHub Exploit DB Packet Storm

229305	4.3	警告	シスコシステムズ	-	Cisco Wireless LAN Controller デバイスにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-6007	2012-12-20 14:57	2012-12-13	Show	GitHub Exploit DB Packet Storm

229306	6.8	警告	シスコシステムズ	-	Cisco Wireless LAN Controller デバイスにおけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2012-5992	2012-12-20 14:52	2012-12-13	Show	GitHub Exploit DB Packet Storm

229307	6.3	警告	シスコシステムズ	-	Cisco Wireless LAN Controller デバイスにおけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2012-5991	2012-12-20 14:46	2012-12-13	Show	GitHub Exploit DB Packet Storm

229308	9.3	危険	シスコシステムズ	-	Cisco Secure Desktop の WebLaunch 機能における任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2012-4655	2012-12-20 14:13	2012-06-20	Show	GitHub Exploit DB Packet Storm

229309	6.4	警告	Mozilla Foundation	-	Mozilla Firefox のドラッグ＆ドロップにおけるアドレスバーを偽造される脆弱性	CWE-Other その他	CVE-2012-1950	2012-12-20 14:11	2012-07-17	Show	GitHub Exploit DB Packet Storm

229310	2.6	注意	アップルサン・マイクロシステムズヒューレット・パッカード VMware 日立レッドハット	-	複数の Oracle 製品の Java Runtime Environment における脆弱性	CWE-noinfo 情報不足	CVE-2010-4472	2012-12-20 14:10	2011-02-15	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:April 28, 2026, 4:09 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
212241	6.1	MEDIUM Network	ory	hydra	ORY Hydra before v1.0.0-rc.3+oryOS.9 has Reflected XSS via the oauth2/fallbacks/error error_hint parameter.	CWE-79 Cross-site Scripting	CVE-2019-8400	2024-11-21 13:49	2019-02-17	Show	GitHub Exploit DB Packet Storm

212242	6.5	MEDIUM Network	hdfgroup	hdf5	An issue was discovered in the HDF HDF5 1.10.4 library. There is an out of bounds read in the function H5T_get_size in H5T.c.	CWE-125 Out-of-bounds Read	CVE-2019-8398	2024-11-21 13:49	2019-02-17	Show	GitHub Exploit DB Packet Storm

212243	6.5	MEDIUM Network	hdfgroup	hdf5	An issue was discovered in the HDF HDF5 1.10.4 library. There is an out of bounds read in the function H5T_close_real in H5T.c.	CWE-125 Out-of-bounds Read	CVE-2019-8397	2024-11-21 13:49	2019-02-17	Show	GitHub Exploit DB Packet Storm

212244	6.5	MEDIUM Network	hdfgroup	hdf5	A buffer overflow in H5O__layout_encode in H5Olayout.c in the HDF HDF5 through 1.10.4 library allows attackers to cause a denial of service via a crafted HDF5 file. This issue was triggered while rep…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2019-8396	2024-11-21 13:49	2019-02-17	Show	GitHub Exploit DB Packet Storm

212245	9.8	CRITICAL Network	zohocorp	manageengine_servicedesk_plus	An Insecure Direct Object Reference (IDOR) vulnerability exists in Zoho ManageEngine ServiceDesk Plus (SDP) before 10.0 build 10007 via an attachment to a request.	CWE-22 CWE-706 Path Traversal Use of Incorrectly-Resolved Name or Reference	CVE-2019-8395	2024-11-21 13:49	2019-02-17	Show	GitHub Exploit DB Packet Storm

212246	6.5	MEDIUM Network	zohocorp	manageengine_servicedesk_plus	Zoho ManageEngine ServiceDesk Plus (SDP) before 10.0 build 10012 allows remote attackers to upload arbitrary files via login page customization.	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2019-8394	2024-11-21 13:49	2019-02-17	Show	GitHub Exploit DB Packet Storm

212247	7.5	HIGH Network	dlink	dir-823g_firmware	An issue was discovered on D-Link DIR-823G devices with firmware 1.02B03. There is incorrect access control allowing remote attackers to enable Guest Wi-Fi via the SetWLanRadioSettings HNAP API to th…	NVD-CWE-noinfo	CVE-2019-8392	2024-11-21 13:49	2019-02-17	Show	GitHub Exploit DB Packet Storm

212248	8.1	HIGH Adjacent	musicloud_project	musicloud	A file-read vulnerability was identified in the Wi-Fi transfer feature of Musicloud 1.6. By default, the application runs a transfer service on port 8080, accessible by everyone on the same Wi-Fi net…	CWE-22 Path Traversal	CVE-2019-8389	2024-11-21 13:49	2019-02-17	Show	GitHub Exploit DB Packet Storm

212249	7.8	HIGH Local	advancemame debian fedoraproject redhat	advancecomp debian_linux fedora enterprise_linux_workstation enterprise_linux_server enterprise_linux_for_power_little_endian	An issue was discovered in AdvanceCOMP through 2.1. An invalid memory address occurs in the function adv_png_unfilter_8 in lib/png.c. It can be triggered by sending a crafted file to a binary. It all…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2019-8383	2024-11-21 13:49	2019-02-17	Show	GitHub Exploit DB Packet Storm

212250	8.8	HIGH Network	axiosys	bento4	An issue was discovered in Bento4 1.5.1-628. A NULL pointer dereference occurs in the function AP4_List:Find located in Core/Ap4List.h when called from Core/Ap4Movie.cpp. It can be triggered by sendi…	CWE-476 NULL Pointer Dereference	CVE-2019-8382	2024-11-21 13:49	2019-02-17	Show	GitHub Exploit DB Packet Storm