Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
194471 8.8 重要
Network 		s9y - Serendipity の comment.php におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2017-5475 2017-01-27 10:57 2017-01-12 Show GitHub Exploit DB Packet Storm
194472 6.1 警告
Network 		s9y - Serendipity の comment.php におけるオープンリダイレクトの脆弱性 CWE-601
オープンリダイレクト 		CVE-2017-5474 2017-01-27 10:57 2017-01-12 Show GitHub Exploit DB Packet Storm
194473 5.5 警告
Local 		JasPer Project - JasPer の jpc_dec.c の jpc_dec_tiledecode 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2016-8883 2017-01-27 10:54 2016-10-20 Show GitHub Exploit DB Packet Storm
194474 5.5 警告
Local 		JasPer Project - JasPer の libjasper/jpc/jpc_dec.c の jpc_dec_tilefini 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-476
NULL ポインタデリファレンス 		CVE-2016-8882 2017-01-27 10:54 2016-10-20 Show GitHub Exploit DB Packet Storm
194475 8.8 重要
Network 		Liferay - Liferay Portal における任意のシェルコマンドを実行される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-5327 2017-01-27 10:53 2010-01-15 Show GitHub Exploit DB Packet Storm
194476 7.5 重要
Network 		マイクロソフト
日立		 - 複数の Microsoft Windows 製品のローカル セキュリティ機関サブシステム サービスにおけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2017-0004 2017-01-27 10:43 2017-01-10 Show GitHub Exploit DB Packet Storm
194477 7.5 重要
Network 		ブロケード コミュニケーションズ システムズ株式会社 - Brocade Network Advisor の CliMonitorReportServlet におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2016-8207 2017-01-27 10:30 2016-09-13 Show GitHub Exploit DB Packet Storm
194478 7.5 重要
Network 		ブロケード コミュニケーションズ システムズ株式会社 - Brocade Network Advisor のサーブレット SoftwareImageUpload におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2016-8206 2017-01-27 10:30 2016-09-13 Show GitHub Exploit DB Packet Storm
194479 9.8 緊急
Network 		ブロケード コミュニケーションズ システムズ株式会社 - Brocade Network Advisor の DashboardFileReceiveServlet におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2016-8205 2017-01-27 10:30 2016-09-13 Show GitHub Exploit DB Packet Storm
194480 9.8 緊急
Network 		ブロケード コミュニケーションズ システムズ株式会社 - Brocade Network Advisor の FileReceiveServlet におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2016-8204 2017-01-27 10:30 2016-09-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 20, 2026, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
294151 - mozilla firefox The gfxTextRun::SanitizeGlyphRuns function in gfx/thebes/src/gfxFont.cpp in the browser engine in Mozilla Firefox 3.6 before 3.6.2 on Mac OS X, when the Core Text API is used, does not properly perfo… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2010-0166 2017-09-19 10:30 2010-03-26 Show GitHub Exploit DB Packet Storm
294152 - mozilla firefox The nsDocument::MaybePreLoadImage function in content/base/src/nsDocument.cpp in the image-preloading implementation in Mozilla Firefox 3.6 before 3.6.2 does not apply scheme restrictions and policy … CWE-264
Permissions, Privileges, and Access Controls 		CVE-2010-0168 2017-09-19 10:30 2010-03-26 Show GitHub Exploit DB Packet Storm
294153 - mozilla firefox Mozilla Firefox 3.6 before 3.6.2 does not offer plugins the expected window.location protection mechanism, which might allow remote attackers to bypass the Same Origin Policy and conduct cross-site s… CWE-79
Cross-site Scripting 		CVE-2010-0170 2017-09-19 10:30 2010-03-26 Show GitHub Exploit DB Packet Storm
294154 - mozilla firefox toolkit/components/passwordmgr/src/nsLoginManagerPrompter.js in the asynchronous Authorization Prompt implementation in Mozilla Firefox 3.6 before 3.6.2 does not properly handle concurrent authorizat… NVD-CWE-Other
CVE-2010-0172 2017-09-19 10:30 2010-03-26 Show GitHub Exploit DB Packet Storm
294155 - nos_microsystems
adobe 		getplus_download_manager
download_manager 		A certain ActiveX control in NOS Microsystems getPlus Download Manager (aka DLM or Downloader) 1.5.2.35, as used in Adobe Download Manager, improperly validates requests involving web sites that are … CWE-20
 Improper Input Validation  		CVE-2010-0189 2017-09-19 10:30 2010-02-24 Show GitHub Exploit DB Packet Storm
294156 - nos_microsystems
adobe 		getplus_download_manager
download_manager 		Per: http://blogs.adobe.com/psirt/2010/02/adobe_download_manager_issue.html "Adobe is aware of the recently posted report of a remote code execution vulnerability in the Adobe Download Manager… CWE-20
 Improper Input Validation  		CVE-2010-0189 2017-09-19 10:30 2010-02-24 Show GitHub Exploit DB Packet Storm
294157 - mozilla firefox The nsObserverList::FillObserverArray function in xpcom/ds/nsObserverList.cpp in Mozilla Firefox before 3.5.7 allows remote attackers to cause a denial of service (application crash) via a crafted we… CWE-399
 Resource Management Errors 		CVE-2010-0220 2017-09-19 10:30 2010-01-8 Show GitHub Exploit DB Packet Storm
294158 - adium
pidgin 		adium
pidgin 		slp.c in the MSN protocol plugin in libpurple in Pidgin before 2.6.6, including 2.6.4, and Adium 1.3.8 allows remote attackers to cause a denial of service (memory corruption and application crash) o… CWE-399
 Resource Management Errors 		CVE-2010-0277 2017-09-19 10:30 2010-01-10 Show GitHub Exploit DB Packet Storm
294159 - wireshark wireshark Multiple buffer overflows in the LWRES dissector in Wireshark 0.9.15 through 1.0.10 and 1.2.0 through 1.2.5 allow remote attackers to cause a denial of service (crash) via a malformed packet, as demo… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2010-0304 2017-09-19 10:30 2010-02-4 Show GitHub Exploit DB Packet Storm
294160 - kvm_qumranet kvm The x86 emulator in KVM 83, when a guest is configured for Symmetric Multiprocessing (SMP), does not use the Current Privilege Level (CPL) and I/O Privilege Level (IOPL) to restrict instruction execu… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2010-0306 2017-09-19 10:30 2010-02-13 Show GitHub Exploit DB Packet Storm