Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 1, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
251391	4.3	警告	Synology Inc.	-	Synology Disk Station におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-2453	2012-03-27 18:42	2010-09-29	Show	GitHub Exploit DB Packet Storm

251392	4.3	警告	オラクル	-	Oracle E-Business Suite の Oracle Territory Management コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-2418	2012-03-27 18:42	2010-10-13	Show	GitHub Exploit DB Packet Storm

251393	4	警告	オラクル	-	Oracle Supply Chain Products Suite の Agile PLM コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-2417	2012-03-27 18:42	2010-10-13	Show	GitHub Exploit DB Packet Storm

251394	4.3	警告	オラクル	-	Oracle E-Business Suite の Oracle E-Business Intelligence コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-2416	2012-03-27 18:42	2010-10-13	Show	GitHub Exploit DB Packet Storm

251395	2.6	注意	オラクル	-	Oracle Sun Products Suite の Sun Convergence および Sun Java Communications Suite コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-2414	2012-03-27 18:42	2010-10-13	Show	GitHub Exploit DB Packet Storm

251396	4.3	警告	オラクル	-	Oracle Fusion Middleware の BI Publisher コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-2413	2012-03-27 18:42	2010-10-13	Show	GitHub Exploit DB Packet Storm

251397	4.3	警告	オラクル	-	Oracle E-Business Suite の Oracle iRecruitment コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-2408	2012-03-27 18:42	2010-10-13	Show	GitHub Exploit DB Packet Storm

251398	4	警告	オラクル	-	Oracle Siebel Suite の Siebel Core - Highly Interactive Client コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-2406	2012-03-27 18:42	2010-10-13	Show	GitHub Exploit DB Packet Storm

251399	6	警告	オラクル	-	Oracle Siebel Suite の Siebel Core - Highly Interactive Client コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-2405	2012-03-27 18:42	2010-10-13	Show	GitHub Exploit DB Packet Storm

251400	3.5	注意	オラクル	-	Oracle E-Business Suite の Oracle iRecruitment コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-2404	2012-03-27 18:42	2010-10-13	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 1, 2026, 4:12 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
258481	6.1	MEDIUM Network	popcash	popcash.net_code_integration_tool	The PopCash.Net Code Integration Tool plugin before 1.1 for WordPress has XSS via the tab parameter to wp-admin/admin.php.	CWE-79 Cross-site Scripting	CVE-2017-15810	2024-11-21 12:15	2017-10-24	Show	GitHub Exploit DB Packet Storm

258482	6.1	MEDIUM Network	phpmyfaq	phpmyfaq	In phpMyFaq before 2.9.9, there is XSS in admin/tags.main.php via a crafted tag.	CWE-79 Cross-site Scripting	CVE-2017-15809	2024-11-21 12:15	2017-10-24	Show	GitHub Exploit DB Packet Storm

258483	8.8	HIGH Network	phpmyfaq	phpmyfaq	In phpMyFaq before 2.9.9, there is CSRF in admin/ajax.config.php.	CWE-352 Origin Validation Error	CVE-2017-15808	2024-11-21 12:15	2017-10-24	Show	GitHub Exploit DB Packet Storm

258484	7.5	HIGH Network	cisco	small_business_sa520_firmware small_business_sa540_firmware	Cisco Small Business SA520 and SA540 devices with firmware 2.1.71 and 2.2.0.7 allow ../ directory traversal in scgi-bin/platform.cgi via the thispage parameter, for reading arbitrary files.	CWE-22 Path Traversal	CVE-2017-15805	2024-11-21 12:15	2017-10-23	Show	GitHub Exploit DB Packet Storm

258485	6.1	MEDIUM Network	logitech	media_server	DOM Based Cross Site Scripting (XSS) exists in Logitech Media Server 7.7.1, 7.7.2, 7.7.3, 7.7.5, 7.7.6, 7.9.0, and 7.9.1 via a crafted URI.	CWE-79 Cross-site Scripting	CVE-2017-15687	2024-11-21 12:15	2017-10-23	Show	GitHub Exploit DB Packet Storm

258486	9.8	CRITICAL Network	gnu	glibc	The glob function in glob.c in the GNU C Library (aka glibc or libc6) before 2.27 contains a buffer overflow during unescaping of user names with the ~ operator.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2017-15804	2024-11-21 12:15	2017-10-23	Show	GitHub Exploit DB Packet Storm

258487	7.8	HIGH Local	xnview	xnview	XnView Classic for Windows Version 2.43 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to a "User Mode Write AV starting at CADImage+0x000000…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2017-15789	2024-11-21 12:15	2017-10-23	Show	GitHub Exploit DB Packet Storm

258488	7.8	HIGH Local	xnview	xnview	XnView Classic for Windows Version 2.43 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to a "User Mode Write AV starting at CADImage+0x000000…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2017-15788	2024-11-21 12:15	2017-10-23	Show	GitHub Exploit DB Packet Storm

258489	7.8	HIGH Local	xnview	xnview	XnView Classic for Windows Version 2.43 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to a "Data Execution Prevention Violation starting at …	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2017-15787	2024-11-21 12:15	2017-10-23	Show	GitHub Exploit DB Packet Storm

258490	7.8	HIGH Local	xnview	xnview	XnView Classic for Windows Version 2.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, related to a "Read Access Violation starting a…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2017-15786	2024-11-21 12:15	2017-10-23	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed