Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 4, 2026, 4 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
251311	6.9	警告	cstr	-	CSTR Festival の festival_server における権限を取得される脆弱性	CWE-DesignError	CVE-2010-3996	2012-03-27 18:42	2010-11-5	Show	GitHub Exploit DB Packet Storm

251312	4.3	警告	ヒューレット・パッカード	-	HP VCRM におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-3994	2012-03-27 18:42	2010-10-25	Show	GitHub Exploit DB Packet Storm

251313	6.4	警告	ヒューレット・パッカード	-	HP Insight Control Server Migration における重要な情報を取得される脆弱性	CWE-noinfo 情報不足	CVE-2010-3993	2012-03-27 18:42	2010-10-25	Show	GitHub Exploit DB Packet Storm

251314	9	危険	ヒューレット・パッカード	-	HP Insight Control Server Migration における権限を取得される脆弱性	CWE-noinfo 情報不足	CVE-2010-3992	2012-03-27 18:42	2010-10-25	Show	GitHub Exploit DB Packet Storm

251315	10	危険	Novell	-	SUSE Linux Enterprise の supportconfig スクリプトにおける脆弱性	CWE-255 証明書・パスワード管理	CVE-2010-3912	2012-03-27 18:42	2011-01-12	Show	GitHub Exploit DB Packet Storm

251316	4.3	警告	ヒューレット・パッカード	-	HP Insight Control Server Migration におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-3991	2012-03-27 18:42	2010-10-25	Show	GitHub Exploit DB Packet Storm

251317	5	警告	ヒューレット・パッカード	-	HP Virtual Server Environment における任意のファイルを読まれる脆弱性	CWE-noinfo 情報不足	CVE-2010-3990	2012-03-27 18:42	2010-10-25	Show	GitHub Exploit DB Packet Storm

251318	6.8	警告	ヒューレット・パッカード	-	HP Insight Control Virtual Machine Management におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2010-3989	2012-03-27 18:42	2010-10-25	Show	GitHub Exploit DB Packet Storm

251319	5	警告	ヒューレット・パッカード	-	HP Insight Control Virtual Machine Management におけるアクセス制限を回避する脆弱性	CWE-noinfo 情報不足	CVE-2010-3988	2012-03-27 18:42	2010-10-25	Show	GitHub Exploit DB Packet Storm

251320	4.3	警告	ヒューレット・パッカード	-	HP Insight Control Virtual Machine Management におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-3987	2012-03-27 18:42	2010-10-25	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 5, 2026, 4:11 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
253571	9.8	CRITICAL Network	vim	vim	An integer overflow at a u_read_undo memory allocation site would occur for vim before patch 8.0.0377, if it does not properly validate values for tree length when reading a corrupted undo file, whic…	CWE-190 Integer Overflow or Wraparound	CVE-2017-6349	2024-11-21 12:29	2017-02-27	Show	GitHub Exploit DB Packet Storm

253572	5.9	MEDIUM Local	grails	pdf_plugin	XML External Entity (XXE) vulnerability in Grails PDF Plugin 0.6 allows remote attackers to read arbitrary files via a crafted XML document.	CWE-611 XXE	CVE-2017-6344	2024-11-21 12:29	2017-02-27	Show	GitHub Exploit DB Packet Storm

253573	8.1	HIGH Network	dahuasecurity	camera_firmware nvr_firmware smartpss_firmware	The web interface on Dahua DHI-HCVR7216A-S3 devices with NVR Firmware 3.210.0001.10 2016-06-06, Camera Firmware 2.400.0000.28.R 2016-03-29, and SmartPSS Software 1.16.1 2017-01-19 allows remote attac…	CWE-287 Improper Authentication	CVE-2017-6343	2024-11-21 12:29	2017-02-27	Show	GitHub Exploit DB Packet Storm

253574	5.9	MEDIUM Network	dahuasecurity	camera_firmware nvr_firmware smartpss_firmware	Dahua DHI-HCVR7216A-S3 devices with NVR Firmware 3.210.0001.10 2016-06-06, Camera Firmware 2.400.0000.28.R 2016-03-29, and SmartPSS Software 1.16.1 2017-01-19 send cleartext passwords in response to …	CWE-319 Cleartext Transmission of Sensitive Information	CVE-2017-6341	2024-11-21 12:29	2017-02-27	Show	GitHub Exploit DB Packet Storm

253575	9.8	CRITICAL Network	dahuasecurity	camera_firmware nvr_firmware smartpss_firmware	An issue was discovered on Dahua DHI-HCVR7216A-S3 devices with NVR Firmware 3.210.0001.10 2016-06-06, Camera Firmware 2.400.0000.28.R 2016-03-29, and SmartPSS Software 1.16.1 2017-01-19. When SmartPS…	CWE-269 Improper Privilege Management	CVE-2017-6342	2024-11-21 12:29	2017-02-27	Show	GitHub Exploit DB Packet Storm

253576	5.9	MEDIUM Network	mikrotik	routeros	The L2TP Client in MikroTik RouterOS versions 6.83.3 and 6.37.4 does not enable IPsec encryption after a reboot, which allows man-in-the-middle attackers to view transmitted data unencrypted and gain…	CWE-311 Missing Encryption of Sensitive Data	CVE-2017-6297	2024-11-21 12:29	2017-02-27	Show	GitHub Exploit DB Packet Storm

253577	7.8	HIGH Local	tnef_project debian	tnef debian_linux	An issue was discovered in tnef before 1.4.13. Four type confusions have been identified in the file_add_mapi_attrs() function. These might lead to invalid read and write operations, controlled by an…	CWE-125 CWE-787 Out-of-bounds Read Out-of-bounds Write	CVE-2017-6310	2024-11-21 12:29	2017-02-24	Show	GitHub Exploit DB Packet Storm

253578	7.8	HIGH Local	tnef_project debian	tnef debian_linux	An issue was discovered in tnef before 1.4.13. Two type confusions have been identified in the parse_file() function. These might lead to invalid read and write operations, controlled by an attacker.	CWE-125 CWE-787 Out-of-bounds Read Out-of-bounds Write	CVE-2017-6309	2024-11-21 12:29	2017-02-24	Show	GitHub Exploit DB Packet Storm

253579	7.8	HIGH Local	tnef_project debian	tnef debian_linux	An issue was discovered in tnef before 1.4.13. Several Integer Overflows, which can lead to Heap Overflows, have been identified in the functions that wrap memory allocation.	CWE-190 Integer Overflow or Wraparound	CVE-2017-6308	2024-11-21 12:29	2017-02-24	Show	GitHub Exploit DB Packet Storm

253580	7.8	HIGH Local	tnef_project debian	tnef debian_linux	An issue was discovered in tnef before 1.4.13. Two OOB Writes have been identified in src/mapi_attr.c:mapi_attr_read(). These might lead to invalid read and write operations, controlled by an attacke…	CWE-787 Out-of-bounds Write	CVE-2017-6307	2024-11-21 12:29	2017-02-24	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed