Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 2, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
251061	4.3	警告	マイクロソフト	-	Microsoft mshtml.dll の sertIntoTimeoutList 関数における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2010-3886	2012-03-27 18:42	2010-10-8	Show	GitHub Exploit DB Packet Storm

251062	6.8	警告	CMS Made Simple	-	CMS Made Simple における管理者パスワードのリセット要求の管理者認証をハイジャックされる脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2010-3884	2012-03-27 18:42	2010-10-8	Show	GitHub Exploit DB Packet Storm

251063	6.8	警告	CMS Made Simple	-	CMS Made Simple の Change Group Permissions モジュールにおけるクロスサイトリクエストフォージェリ脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2010-3883	2012-03-27 18:42	2010-10-8	Show	GitHub Exploit DB Packet Storm

251064	4.3	警告	CMS Made Simple	-	CMS Made Simple におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-3882	2012-03-27 18:42	2010-10-8	Show	GitHub Exploit DB Packet Storm

251065	4.3	警告	レッドハット	-	Red Hat JBoss Enterprise Application Platform の JMX Console におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2010-3878	2012-03-27 18:42	2010-12-1	Show	GitHub Exploit DB Packet Storm

251066	4.3	警告	Mahara	-	Mahara の blocktype/groupviews/theme/raw/groupviews.tpl におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-3871	2012-03-27 18:42	2010-11-9	Show	GitHub Exploit DB Packet Storm

251067	4	警告	レッドハット	-	RHCS および Dogtag Certificate System における任意の認証番号を生成される脆弱性	CWE-310 暗号の問題	CVE-2010-3869	2012-03-27 18:42	2010-11-8	Show	GitHub Exploit DB Packet Storm

251068	5.8	警告	レッドハット	-	RHCS および Dogtag Certificate System における PIN を取得される脆弱性	CWE-287 不適切な認証	CVE-2010-3868	2012-03-27 18:42	2010-11-8	Show	GitHub Exploit DB Packet Storm

251069	2.6	注意	レッドハット	-	Red Hat JBoss Enterprise Application Platform および JBoss Enterprise Web Platform の Boss Remoting におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2010-3862	2012-03-27 18:42	2010-12-8	Show	GitHub Exploit DB Packet Storm

251070	6.4	警告	レッドハット	-	Red Hat Conga の Luciにおける repoze.who 認証をバイパスすることが容易になる脆弱性	CWE-287 不適切な認証	CVE-2010-3852	2012-03-27 18:42	2010-11-2	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 2, 2026, 4:18 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
257431	6.5	MEDIUM Network	hdfgroup	hdf5	In HDF5 1.10.1, there is a NULL pointer dereference in the function H5O_pline_decode in the H5Opline.c file in libhdf5.a. For example, h5dump would crash when someone opens a crafted hdf5 file.	CWE-476 NULL Pointer Dereference	CVE-2017-17505	2024-11-21 12:18	2017-12-11	Show	GitHub Exploit DB Packet Storm

257432	6.5	MEDIUM Network	imagemagick canonical debian	imagemagick ubuntu_linux debian_linux	ImageMagick before 7.0.7-12 has a coders/png.c Magick_png_read_raw_profile heap-based buffer over-read via a crafted file, related to ReadOneMNGImage.	CWE-125 Out-of-bounds Read	CVE-2017-17504	2024-11-21 12:18	2017-12-11	Show	GitHub Exploit DB Packet Storm

257433	8.8	HIGH Network	graphicsmagick debian	graphicsmagick debian_linux	ReadGRAYImage in coders/gray.c in GraphicsMagick 1.3.26 has a magick/import.c ImportGrayQuantumType heap-based buffer over-read via a crafted file.	CWE-125 Out-of-bounds Read	CVE-2017-17503	2024-11-21 12:18	2017-12-11	Show	GitHub Exploit DB Packet Storm

257434	8.8	HIGH Network	graphicsmagick debian	graphicsmagick debian_linux	ReadCMYKImage in coders/cmyk.c in GraphicsMagick 1.3.26 has a magick/import.c ImportCMYKQuantumType heap-based buffer over-read via a crafted file.	CWE-125 Out-of-bounds Read	CVE-2017-17502	2024-11-21 12:18	2017-12-11	Show	GitHub Exploit DB Packet Storm

257435	8.8	HIGH Network	graphicsmagick debian	graphicsmagick debian_linux	WriteOnePNGImage in coders/png.c in GraphicsMagick 1.3.26 has a heap-based buffer over-read via a crafted file.	CWE-125 Out-of-bounds Read	CVE-2017-17501	2024-11-21 12:18	2017-12-11	Show	GitHub Exploit DB Packet Storm

257436	8.8	HIGH Network	graphicsmagick debian	graphicsmagick debian_linux	ReadRGBImage in coders/rgb.c in GraphicsMagick 1.3.26 has a magick/import.c ImportRGBQuantumType heap-based buffer over-read via a crafted file.	CWE-125 Out-of-bounds Read	CVE-2017-17500	2024-11-21 12:18	2017-12-11	Show	GitHub Exploit DB Packet Storm

257437	9.8	CRITICAL Network	imagemagick canonical debian	imagemagick ubuntu_linux debian_linux	ImageMagick before 6.9.9-24 and 7.x before 7.0.7-12 has a use-after-free in Magick::Image::read in Magick++/lib/Image.cpp.	CWE-416 Use After Free	CVE-2017-17499	2024-11-21 12:18	2017-12-11	Show	GitHub Exploit DB Packet Storm

257438	8.8	HIGH Network	graphicsmagick	graphicsmagick	WritePNMImage in coders/pnm.c in GraphicsMagick 1.3.26 allows remote attackers to cause a denial of service (bit_stream.c MagickBitStreamMSBWrite heap-based buffer overflow and application crash) or …	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2017-17498	2024-11-21 12:18	2017-12-11	Show	GitHub Exploit DB Packet Storm

257439	7.5	HIGH Network	htacg	tidy	In Tidy 5.7.0, the prvTidyTidyMetaCharset function in clean.c allows attackers to cause a denial of service (Segmentation Fault), because the currentNode variable in the "children of the head" proces…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2017-17497	2024-11-21 12:18	2017-12-11	Show	GitHub Exploit DB Packet Storm

257440	9.8	CRITICAL Network	icu-project	international_components_for_unicode	The ucnv_UTF8FromUTF8 function in ucnv_u8.cpp in International Components for Unicode (ICU) for C/C++ through 60.1 mishandles ucnv_convertEx calls for UTF-8 to UTF-8 conversion, which allows remote a…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2017-17484	2024-11-21 12:18	2017-12-11	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed