Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 25, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
251561	4.3	警告	Codologic.com	-	Joomla! 用 FreiChat および FreiChatPure におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-4949	2012-02-29 11:21	2011-10-9	Show	GitHub Exploit DB Packet Storm

251562	7.5	危険	Phpgalleryscript	-	PHP Free Photo Gallery script における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2010-4948	2012-02-29 11:19	2011-10-9	Show	GitHub Exploit DB Packet Storm

251563	4.3	警告	Allpcscript	-	ALLPC の advanced_search_result.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-4947	2012-02-29 11:17	2011-10-9	Show	GitHub Exploit DB Packet Storm

251564	7.5	危険	Allpcscript	-	ALLPC の product_info.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4946	2012-02-29 11:16	2011-10-9	Show	GitHub Exploit DB Packet Storm

251565	7.5	危険	Joomla!	-	Joomla! 用 CamelcityDB コンポーネントにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4945	2012-02-29 11:15	2011-10-9	Show	GitHub Exploit DB Packet Storm

251566	7.5	危険	Joomla!	-	Mambo および Joomla! 用 Elite Experts コンポーネントにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4944	2012-02-29 11:14	2011-10-9	Show	GitHub Exploit DB Packet Storm

251567	7.5	危険	Saurused	-	Saurus CMS における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2010-4943	2012-02-29 11:08	2011-10-9	Show	GitHub Exploit DB Packet Storm

251568	7.5	危険	E-Xoopport	-	E-Xoopport Samsara の location.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4942	2012-02-29 11:06	2011-10-9	Show	GitHub Exploit DB Packet Storm

251569	7.5	危険	Joomla Mo	-	Joomla! 用 Teams (com_teams) コンポーネントにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4941	2012-02-29 11:02	2011-10-9	Show	GitHub Exploit DB Packet Storm

251570	7.5	危険	Wanewsletter	-	Wanewsletter の index.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4940	2012-02-29 11:01	2011-10-9	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 25, 2026, 4:01 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
254961	9.8	CRITICAL Network	uclouvain debian canonical	openjpeg debian_linux ubuntu_linux	In OpenJPEG 2.3.0, a stack-based buffer overflow was discovered in the pgxtovolume function in jp3d/convert.c. The vulnerability causes an out-of-bounds write, which may lead to remote denial of serv…	CWE-787 Out-of-bounds Write	CVE-2017-17480	2024-11-21 12:18	2017-12-9	Show	GitHub Exploit DB Packet Storm

254962	9.8	CRITICAL Network	uclouvain	openjpeg	In OpenJPEG 2.3.0, a stack-based buffer overflow was discovered in the pgxtoimage function in jpwl/convert.c. The vulnerability causes an out-of-bounds write, which may lead to remote denial of servi…	CWE-787 Out-of-bounds Write	CVE-2017-17479	2024-11-21 12:18	2017-12-9	Show	GitHub Exploit DB Packet Storm

254963	7.8	HIGH Local	tgsoft	vir.it_explorer	TG Soft Vir.IT eXplorer Lite 8.5.42 allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact via a \\.\Viragtlt DeviceIoControl request of 0x82736068.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2017-17475	2024-11-21 12:18	2017-12-8	Show	GitHub Exploit DB Packet Storm

254964	7.8	HIGH Local	tgsoft	vir.it_explorer	TG Soft Vir.IT eXplorer Lite 8.5.42 allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact via a \\.\Viragtlt DeviceIoControl request of 0x82730070.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2017-17474	2024-11-21 12:18	2017-12-8	Show	GitHub Exploit DB Packet Storm

254965	5.5	MEDIUM Local	hunesion	i-onenet	Incorrect Access Control in Hunesion i-oneNet 3.0.6042.1200 allows the local user to access other user's information which is unauthorized via brute force.	CWE-307 mproper Restriction of Excessive Authentication Attempts	CVE-2017-16900	2024-11-21 12:17	2020-02-28	Show	GitHub Exploit DB Packet Storm

254966	8.8	HIGH Adjacent	huawei	hg655m_firmware	Some Huawei smart phones with versions earlier than Harry-AL00C 9.1.0.206(C00E205R3P1) have a null pointer dereference vulnerability. An attacker crafts specific packets and sends to the affected pro…	CWE-476 NULL Pointer Dereference	CVE-2017-17224	2024-11-21 12:17	2019-11-13	Show	GitHub Exploit DB Packet Storm

254967	5.4	MEDIUM Network	open-xchange	open-xchange_appsuite	OX Software GmbH OX App Suite 7.8.4 and earlier is affected by: Cross Site Scripting (XSS).	CWE-79 Cross-site Scripting	CVE-2017-17061	2024-11-21 12:17	2019-05-24	Show	GitHub Exploit DB Packet Storm

254968	9.8	CRITICAL Network	open-xchange	open-xchange_appsuite	OX Software GmbH OX App Suite 7.8.4 and earlier is affected by: Insecure Permissions.	CWE-275 Permission Issues	CVE-2017-17060	2024-11-21 12:17	2019-05-24	Show	GitHub Exploit DB Packet Storm

254969	8.1	HIGH Network	sophos ncp-e	ipsec_client ncp_secure_entry_client	The Sophos UTM VPN endpoint interacts with client software provided by NPC Engineering (www.ncp-e.com). The affected client software, "Sophos IPSec Client" 11.04 is a rebranded version of NCP "Secure…	CWE-345 Insufficient Verification of Data Authenticity	CVE-2017-17023	2024-11-21 12:17	2019-04-10	Show	GitHub Exploit DB Packet Storm

254970	6.5	MEDIUM Network	libraw canonical	libraw ubuntu_linux	An error within the "LibRaw::xtrans_interpolate()" function (internal/dcraw_common.cpp) in LibRaw versions prior to 0.18.6 can be exploited to cause an invalid read memory access and subsequently a D…	CWE-125 Out-of-bounds Read	CVE-2017-16910	2024-11-21 12:17	2018-12-8	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed