Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 31, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
251321	4.3	警告	dietrich ayala	-	MantisBT の NuSOAP におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-3070	2012-03-27 18:42	2010-09-28	Show	GitHub Exploit DB Packet Storm

251322	10	危険	シスコシステムズ	-	Cisco ICM の Setup Manager の agent.exe におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-3040	2012-03-27 18:42	2010-11-3	Show	GitHub Exploit DB Packet Storm

251323	6.8	警告	シスコシステムズ	-	Cisco CUCM の /usr/local/cm/bin/pktCap_protectData における任意のコマンドを実行される脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2010-3039	2012-03-27 18:42	2010-11-3	Show	GitHub Exploit DB Packet Storm

251324	10	危険	シスコシステムズ	-	Cisco UVC System 5110 および 5115 における不正アクセスの脆弱性	CWE-255 証明書・パスワード管理	CVE-2010-3038	2012-03-27 18:42	2010-11-17	Show	GitHub Exploit DB Packet Storm

251325	8.5	危険	シスコシステムズ	-	複数の Cisco UVC System 製品における任意のコマンドを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-3037	2012-03-27 18:42	2010-11-17	Show	GitHub Exploit DB Packet Storm

251326	10	危険	シスコシステムズ	-	Cisco CiscoWorks Common Service の Web サーバの認証機能における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-3036	2012-03-27 18:42	2010-10-27	Show	GitHub Exploit DB Packet Storm

251327	5	警告	シスコシステムズ	-	Cisco WLC における ACL を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-3034	2012-03-27 18:42	2010-09-8	Show	GitHub Exploit DB Packet Storm

251328	9	危険	シスコシステムズ	-	Cisco WLC におけるアクセス制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-3033	2012-03-27 18:42	2010-09-8	Show	GitHub Exploit DB Packet Storm

251329	4.3	警告	RSAセキュリティ	-	RSA Access Manager Server における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2010-3018	2012-03-27 18:42	2010-09-9	Show	GitHub Exploit DB Packet Storm

251330	5.7	警告	RSAセキュリティ	-	RSA Access Manager Agent における重要な情報を取得される脆弱性	CWE-noinfo 情報不足	CVE-2010-3017	2012-03-27 18:42	2010-09-9	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 31, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
252861	5.5	MEDIUM Local	apache	poi	Apache POI in versions prior to release 3.15 allows remote attackers to cause a denial of service (CPU consumption) via a specially crafted OOXML file, aka an XML Entity Expansion (XEE) attack.	CWE-776 XML Entity Expansion	CVE-2017-5644	2024-11-21 12:28	2017-03-24	Show	GitHub Exploit DB Packet Storm

252862	9.8	CRITICAL Network	linux canonical debian	linux_kernel ubuntu_linux debian_linux	The ip6gre_err function in net/ipv6/ip6_gre.c in the Linux kernel allows remote attackers to have unspecified impact via vectors involving GRE flags in an IPv6 packet, which trigger an out-of-bounds …	CWE-125 Out-of-bounds Read	CVE-2017-5897	2024-11-21 12:28	2017-03-24	Show	GitHub Exploit DB Packet Storm

252863	6.1	MEDIUM Network	kunena	kunena	In the Kunena extension 5.0.2 through 5.0.4 for Joomla!, the forum message subject (aka topic subject) accepts JavaScript, leading to XSS. Six files are affected: crypsis/layouts/message/item/default…	CWE-79 Cross-site Scripting	CVE-2017-5673	2024-11-21 12:28	2017-03-23	Show	GitHub Exploit DB Packet Storm

252864	8.8	HIGH Network	d-link	dir-600m_firmware	CSRF exists on D-Link DIR-600M Rev. Cx devices before v3.05ENB01_beta_20170306. This can be used to bypass authentication and insert XSS sequences or possibly have unspecified other impact.	CWE-352 Origin Validation Error	CVE-2017-5874	2024-11-21 12:28	2017-03-22	Show	GitHub Exploit DB Packet Storm

252865	5.5	MEDIUM Local	qemu debian	qemu debian_linux	The sdhci_sdma_transfer_multi_blocks function in hw/sd/sdhci.c in QEMU (aka Quick Emulator) allows local OS guest privileged users to cause a denial of service (infinite loop and QEMU process crash) …	CWE-835 Loop with Unreachable Exit Condition ('Infinite Loop')	CVE-2017-5987	2024-11-21 12:28	2017-03-21	Show	GitHub Exploit DB Packet Storm

252866	5.5	MEDIUM Local	virglrenderer_project	virglrenderer	The vrend_draw_vbo function in virglrenderer before 0.6.0 allows local guest OS users to cause a denial of service (out-of-bounds array access and QEMU process crash) via vectors involving vertext_bu…	CWE-125 Out-of-bounds Read	CVE-2017-5956	2024-11-21 12:28	2017-03-21	Show	GitHub Exploit DB Packet Storm

252867	2.7	LOW Network	opensuse postfixadmin_project	leap postfixadmin	The AliasHandler component in PostfixAdmin before 3.0.2 allows remote authenticated domain admins to delete protected aliases via the delete parameter to delete.php, involving a missing permission ch…	CWE-862 Missing Authorization	CVE-2017-5930	2024-11-21 12:28	2017-03-21	Show	GitHub Exploit DB Packet Storm

252868	7.8	HIGH Local	gnu	screen	GNU screen before 4.5.1 allows local users to modify arbitrary files and consequently gain root privileges by leveraging improper checking of logfile permissions.	CWE-863 Incorrect Authorization	CVE-2017-5618	2024-11-21 12:28	2017-03-21	Show	GitHub Exploit DB Packet Storm

252869	6.6	MEDIUM Physics	oneplus	oxygenos	An issue was discovered in OxygenOS before 4.1.0 on OnePlus 3 and 3T devices. The attacker can change the bootmode of the device by issuing the 'fastboot oem boot_mode {rf/wlan/ftm/normal} command' i…	CWE-269 Improper Privilege Management	CVE-2017-5623	2024-11-21 12:28	2017-03-20	Show	GitHub Exploit DB Packet Storm

252870	6.5	MEDIUM Local	qemu	qemu	Memory leak in the virgl_cmd_resource_unref function in hw/display/virtio-gpu-3d.c in QEMU (aka Quick Emulator) allows local guest OS users to cause a denial of service (host memory consumption) via …	CWE-401 Missing Release of Memory after Effective Lifetime	CVE-2017-5857	2024-11-21 12:28	2017-03-17	Show	GitHub Exploit DB Packet Storm