Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":May 5, 2026, 6 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 230181 | 6.3 | 警告 | シスコシステムズ | - | Cisco Wireless LAN Controller デバイスにおけるサービス運用妨害 (DoS) の脆弱性 |
CWE-noinfo
情報不足 |
CVE-2012-5991 | 2012-12-20 14:46 | 2012-12-13 | Show | GitHub Exploit DB Packet Storm |
| 230182 | 9.3 | 危険 | シスコシステムズ | - | Cisco Secure Desktop の WebLaunch 機能における任意のコードを実行される脆弱性 |
CWE-20
不適切な入力確認 |
CVE-2012-4655 | 2012-12-20 14:13 | 2012-06-20 | Show | GitHub Exploit DB Packet Storm |
| 230183 | 6.4 | 警告 | Mozilla Foundation | - | Mozilla Firefox のドラッグ＆ドロップにおけるアドレスバーを偽造される脆弱性 |
CWE-Other
その他 |
CVE-2012-1950 | 2012-12-20 14:11 | 2012-07-17 | Show | GitHub Exploit DB Packet Storm |
| 230184 | 2.6 | 注意 | アップル サン・マイクロシステムズ ヒューレット・パッカード VMware 日立 レッドハット |
- | 複数の Oracle 製品の Java Runtime Environment における脆弱性 |
CWE-noinfo
情報不足 |
CVE-2010-4472 | 2012-12-20 14:10 | 2011-02-15 | Show | GitHub Exploit DB Packet Storm |
| 230185 | 1.9 | 注意 | VMware Linux レッドハット |
- | Linux kernel の bluetooth サブシステムにおける重要な情報を取得される脆弱性 |
CWE-200
情報漏えい |
CVE-2011-2492 | 2012-12-20 13:45 | 2011-07-28 | Show | GitHub Exploit DB Packet Storm |
| 230186 | 6.9 | 警告 | VMware Linux レッドハット |
- | Linux kernel の agp_generic_remove_memory 関数におけるサービス運用妨害 (システムクラッシュ) の脆弱性 |
CWE-20
不適切な入力確認 |
CVE-2011-2022 | 2012-12-20 13:41 | 2011-05-9 | Show | GitHub Exploit DB Packet Storm |
| 230187 | 7.2 | 危険 | サイバートラスト株式会社 VMware Linux レッドハット |
- | Linux kernel の drivers/scsi/mpt2sas/mpt2sas_ctl.c における権限を取得される脆弱性 |
CWE-20
不適切な入力確認 |
CVE-2011-1495 | 2012-12-20 13:39 | 2011-05-3 | Show | GitHub Exploit DB Packet Storm |
| 230188 | 6.9 | 警告 | サイバートラスト株式会社 VMware Linux レッドハット |
- | Linux kernel の _ctl_do_mpt_command 関数における整数オーバーフローの脆弱性 |
CWE-189
数値処理の問題 |
CVE-2011-1494 | 2012-12-20 12:30 | 2011-05-3 | Show | GitHub Exploit DB Packet Storm |
| 230189 | 1.2 | 注意 | Boat Browser | - | Boat Browser および Boat Browser Mini における WebView クラスに関する脆弱性 |
CWE-Other
その他 |
CVE-2012-5179 | 2012-12-20 12:01 | 2012-12-20 | Show | GitHub Exploit DB Packet Storm |
| 230190 | 9.3 | 危険 | リアルネットワークス | - | RealNetworks RealPlayer および RealPlayer SP におけるバッファオーバーフローの脆弱性 |
CWE-119
バッファエラー |
CVE-2012-5691 | 2012-12-20 11:50 | 2012-12-14 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:May 6, 2026, 4:08 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 212451 | 5.9 |
MEDIUM
Network |
openpgpjs | openpgpjs | A cryptographic issue in OpenPGP.js <=4.2.0 allows an attacker who is able provide forged messages and gain feedback about whether decryption of these messages succeeded to conduct an invalid curve a… |
CWE-327
Use of a Broken or Risky Cryptographic Algorithm |
CVE-2019-9155 | 2024-11-21 13:51 | 2019-08-23 | Show | GitHub Exploit DB Packet Storm |
| 212452 | 7.5 |
HIGH
Network |
openpgpjs | openpgpjs | Improper Verification of a Cryptographic Signature in OpenPGP.js <=4.1.2 allows an attacker to pass off unsigned data as signed. |
CWE-347
Improper Verification of Cryptographic Signature |
CVE-2019-9154 | 2024-11-21 13:51 | 2019-08-23 | Show | GitHub Exploit DB Packet Storm |
| 212453 | 7.5 |
HIGH
Network |
openpgpjs | openpgpjs | Improper Verification of a Cryptographic Signature in OpenPGP.js <=4.1.2 allows an attacker to forge signed messages by replacing its signatures with a "standalone" or "timestamp" signature. |
CWE-347
Improper Verification of Cryptographic Signature |
CVE-2019-9153 | 2024-11-21 13:51 | 2019-08-23 | Show | GitHub Exploit DB Packet Storm |
| 212454 | 9.8 |
CRITICAL
Network |
eq-3 |
homematic_ccu2_firmware homematic_ccu3_firmware |
eQ-3 Homematic CCU2 prior to 2.47.10 and CCU3 prior to 3.47.10 JSON API has Improper Access Control for Interface.***Metadata related operations, resulting in the ability to read, set and deletion of… |
CWE-306
Missing Authentication for Critical Function |
CVE-2019-9585 | 2024-11-21 13:51 | 2019-08-15 | Show | GitHub Exploit DB Packet Storm |
| 212455 | 9.8 |
CRITICAL
Network |
eq-3 |
homematic_ccu2_firmware homematic_ccu3_firmware |
eQ-3 Homematic AddOn 'CloudMatic' on CCU2 and CCU3 allows uncontrolled admin access, resulting in the ability to obtain VPN profile details, shutting down the VPN service and to delete the VPN servic… |
CWE-425
Direct Request ('Forced Browsing') |
CVE-2019-9584 | 2024-11-21 13:51 | 2019-08-15 | Show | GitHub Exploit DB Packet Storm |
| 212456 | 8.2 |
HIGH
Network |
eq-3 |
homematic_ccu3_firmware homematic_ccu2_firmware |
eQ-3 Homematic CCU2 and CCU3 obtain session IDs without login. This allows a Denial of Service and is a starting point for other attacks. Affected versions for CCU2: 2.35.16, 2.41.5, 2.41.8, 2.41.9, … |
CWE-400
Uncontrolled Resource Consumption |
CVE-2019-9583 | 2024-11-21 13:51 | 2019-08-15 | Show | GitHub Exploit DB Packet Storm |
| 212457 | 7.5 |
HIGH
Network |
eq-3 | homematic_ccu2_firmware | eQ-3 Homematic CCU2 outdated base software packages allows Denial of Service. CCU2 affected versions: 2.35.16, 2.41.5, 2.41.8, 2.41.9, 2.45.6, 2.45.7, 2.47.10, 2.47.12, 2.47.15. |
NVD-CWE-noinfo
|
CVE-2019-9582 | 2024-11-21 13:51 | 2019-08-15 | Show | GitHub Exploit DB Packet Storm |
| 212458 | 8.1 |
HIGH
Adjacent |
google apple canonical debian opensuse redhat huawei |
android mac_os_x watchos iphone_os tvos ubuntu_linux debian_linux leap enterprise_linux_server enterprise_linux_for_real_time enterprise_linux_for_real_time_for_nfv e… |
The Bluetooth BR/EDR specification up to and including version 5.1 permits sufficiently low encryption key length and does not prevent an attacker from influencing the key length negotiation. This al… |
CWE-327
Use of a Broken or Risky Cryptographic Algorithm |
CVE-2019-9506 | 2024-11-21 13:51 | 2019-08-15 | Show | GitHub Exploit DB Packet Storm |
| 212459 | 7.5 |
HIGH
Network |
apple apache canonical debian synology fedoraproject opensuse redhat oracle mcafee nodejs |
swiftnio traffic_server ubuntu_linux debian_linux skynas diskstation_manager vs960hd_firmware fedora leap software_collections jboss_core_services enterprise_linux
Some HTTP/2 implementations are vulnerable to a flood of empty frames, potentially leading to a denial of service. The attacker sends a stream of frames with an empty payload and without the end-of-s…
|
CWE-770
|
Allocation of Resources Without Limits or Throttling
CVE-2019-9518
|
2024-11-21 13:51 |
2019-08-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 212460 | 7.5 |
HIGH
Network |
apple apache canonical debian synology fedoraproject opensuse redhat oracle mcafee netapp nodejs |
swiftnio traffic_server http_server ubuntu_linux debian_linux skynas diskstation_manager vs960hd_firmware fedora leap software_collections jboss_core_services ente… |
Some HTTP/2 implementations are vulnerable to unconstrained interal data buffering, potentially leading to a denial of service. The attacker opens the HTTP/2 window so the peer can send without const… |
CWE-770
Allocation of Resources Without Limits or Throttling |
CVE-2019-9517 | 2024-11-21 13:51 | 2019-08-14 | Show | GitHub Exploit DB Packet Storm |