Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 25, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
251551	7.5	危険	Dev-Team Typoheads	-	TYPO3 用 Webkit PDFs エクステンションにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4961	2012-02-29 14:49	2011-10-9	Show	GitHub Exploit DB Packet Storm

251552	4.3	警告	Martin Hesse	-	TYPO3 用 Branchenbuch エクステンションにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-4960	2012-02-29 14:43	2011-10-9	Show	GitHub Exploit DB Packet Storm

251553	7.5	危険	PreProject.com	-	Pre Projects Pre Podcast Portal の login 機能における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4959	2012-02-29 14:35	2011-10-9	Show	GitHub Exploit DB Packet Storm

251554	7.5	危険	Prado Portal	-	Prado Portal の index.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4958	2012-02-29 14:23	2011-10-9	Show	GitHub Exploit DB Packet Storm

251555	7.5	危険	php-programs	-	APBoard Developers APBoard の board/board.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4955	2012-02-29 14:06	2011-10-9	Show	GitHub Exploit DB Packet Storm

251556	7.5	危険	Gambio	-	xt:Commerce Gambio 2008 の product_reviews_info.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4954	2012-02-29 14:05	2011-10-9	Show	GitHub Exploit DB Packet Storm

251557	10	危険	Jens Witt	-	TYPO3 用 JW Calendar エクステンションにおける任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2010-4953	2012-02-29 11:55	2011-10-9	Show	GitHub Exploit DB Packet Storm

251558	7.5	危険	Joachim Ruhs	-	TYPO3 用 FE user statistic エクステンションにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4952	2012-02-29 11:51	2011-10-9	Show	GitHub Exploit DB Packet Storm

251559	5	警告	Thomas Mammitzsch	-	TYPO3 用 xaJax Shoutbox エクステンションにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-4951	2012-02-29 11:48	2011-10-9	Show	GitHub Exploit DB Packet Storm

251560	7.5	危険	Joachim Ruhs	-	TYPO3 用 Event エクステンションにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4950	2012-02-29 11:42	2011-10-9	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 25, 2026, 4:01 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
254961	9.8	CRITICAL Network	uclouvain debian canonical	openjpeg debian_linux ubuntu_linux	In OpenJPEG 2.3.0, a stack-based buffer overflow was discovered in the pgxtovolume function in jp3d/convert.c. The vulnerability causes an out-of-bounds write, which may lead to remote denial of serv…	CWE-787 Out-of-bounds Write	CVE-2017-17480	2024-11-21 12:18	2017-12-9	Show	GitHub Exploit DB Packet Storm

254962	9.8	CRITICAL Network	uclouvain	openjpeg	In OpenJPEG 2.3.0, a stack-based buffer overflow was discovered in the pgxtoimage function in jpwl/convert.c. The vulnerability causes an out-of-bounds write, which may lead to remote denial of servi…	CWE-787 Out-of-bounds Write	CVE-2017-17479	2024-11-21 12:18	2017-12-9	Show	GitHub Exploit DB Packet Storm

254963	7.8	HIGH Local	tgsoft	vir.it_explorer	TG Soft Vir.IT eXplorer Lite 8.5.42 allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact via a \\.\Viragtlt DeviceIoControl request of 0x82736068.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2017-17475	2024-11-21 12:18	2017-12-8	Show	GitHub Exploit DB Packet Storm

254964	7.8	HIGH Local	tgsoft	vir.it_explorer	TG Soft Vir.IT eXplorer Lite 8.5.42 allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact via a \\.\Viragtlt DeviceIoControl request of 0x82730070.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2017-17474	2024-11-21 12:18	2017-12-8	Show	GitHub Exploit DB Packet Storm

254965	5.5	MEDIUM Local	hunesion	i-onenet	Incorrect Access Control in Hunesion i-oneNet 3.0.6042.1200 allows the local user to access other user's information which is unauthorized via brute force.	CWE-307 mproper Restriction of Excessive Authentication Attempts	CVE-2017-16900	2024-11-21 12:17	2020-02-28	Show	GitHub Exploit DB Packet Storm

254966	8.8	HIGH Adjacent	huawei	hg655m_firmware	Some Huawei smart phones with versions earlier than Harry-AL00C 9.1.0.206(C00E205R3P1) have a null pointer dereference vulnerability. An attacker crafts specific packets and sends to the affected pro…	CWE-476 NULL Pointer Dereference	CVE-2017-17224	2024-11-21 12:17	2019-11-13	Show	GitHub Exploit DB Packet Storm

254967	5.4	MEDIUM Network	open-xchange	open-xchange_appsuite	OX Software GmbH OX App Suite 7.8.4 and earlier is affected by: Cross Site Scripting (XSS).	CWE-79 Cross-site Scripting	CVE-2017-17061	2024-11-21 12:17	2019-05-24	Show	GitHub Exploit DB Packet Storm

254968	9.8	CRITICAL Network	open-xchange	open-xchange_appsuite	OX Software GmbH OX App Suite 7.8.4 and earlier is affected by: Insecure Permissions.	CWE-275 Permission Issues	CVE-2017-17060	2024-11-21 12:17	2019-05-24	Show	GitHub Exploit DB Packet Storm

254969	8.1	HIGH Network	sophos ncp-e	ipsec_client ncp_secure_entry_client	The Sophos UTM VPN endpoint interacts with client software provided by NPC Engineering (www.ncp-e.com). The affected client software, "Sophos IPSec Client" 11.04 is a rebranded version of NCP "Secure…	CWE-345 Insufficient Verification of Data Authenticity	CVE-2017-17023	2024-11-21 12:17	2019-04-10	Show	GitHub Exploit DB Packet Storm

254970	6.5	MEDIUM Network	libraw canonical	libraw ubuntu_linux	An error within the "LibRaw::xtrans_interpolate()" function (internal/dcraw_common.cpp) in LibRaw versions prior to 0.18.6 can be exploited to cause an invalid read memory access and subsequently a D…	CWE-125 Out-of-bounds Read	CVE-2017-16910	2024-11-21 12:17	2018-12-8	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed