Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 4, 2026, 4 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
251571	5	警告	ヒューレット・パッカード	-	HP SIM における任意のファイルを読まれる脆弱性	CWE-noinfo 情報不足	CVE-2010-3286	2012-03-27 18:42	2010-10-13	Show	GitHub Exploit DB Packet Storm

251572	5	警告	ヒューレット・パッカード	-	HP OV NNM におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2010-3285	2012-03-27 18:42	2010-09-22	Show	GitHub Exploit DB Packet Storm

251573	4.3	警告	ヒューレット・パッカード	-	HP SMH における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2010-3284	2012-03-27 18:42	2010-09-22	Show	GitHub Exploit DB Packet Storm

251574	4.3	警告	ヒューレット・パッカード	-	HP SMH におけるオープンリダイレクトの脆弱性	CWE-20 不適切な入力確認	CVE-2010-3283	2012-03-27 18:42	2010-09-22	Show	GitHub Exploit DB Packet Storm

251575	5.4	警告	Alcatel-Lucent	-	Alcatel-Lucent OmniVista の HTTP プロキシサービスにおけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-3281	2012-03-27 18:42	2010-09-20	Show	GitHub Exploit DB Packet Storm

251576	6.9	警告	Alcatel-Lucent	-	Alcatel-Lucent OmniTouch Contact Center の TSA コンポーネントの CCAgent オプションにおける Contact Center 操作を監視または再設定される脆弱性	CWE-200 情報漏えい	CVE-2010-3280	2012-03-27 18:42	2010-09-20	Show	GitHub Exploit DB Packet Storm

251577	7.6	危険	Alcatel-Lucent	-	Alcatel-Lucent OmniTouch Contact Center の CCAgent オプションのディフォルト設定における Contact Center 操作を監視または再設定される脆弱性	CWE-16 環境設定	CVE-2010-3279	2012-03-27 18:42	2010-09-20	Show	GitHub Exploit DB Packet Storm

251578	2.1	注意	VMware	-	VMware Workstation および VMware Player のインストーラにおける Web スクリプトまたは HTML の想定外の解釈が発生する脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-3277	2012-03-27 18:42	2010-09-23	Show	GitHub Exploit DB Packet Storm

251579	9.3	危険	VideoLAN	-	VideoLAN VLC Media Player の libdirectx_plugin.dll における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-3276	2012-03-27 18:42	2011-03-28	Show	GitHub Exploit DB Packet Storm

251580	9.3	危険	VideoLAN	-	VideoLAN VLC Media Player の libdirectx_plugin.dll における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-3275	2012-03-27 18:42	2011-03-28	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 4, 2026, 4:17 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
253711	9.8	CRITICAL Network	rubyzip_project debian	rubyzip debian_linux	The Zip::File component in the rubyzip gem before 1.2.1 for Ruby has a directory traversal vulnerability. If a site allows uploading of .zip files, an attacker can upload a malicious file that uses "…	CWE-22 Path Traversal	CVE-2017-5946	2024-11-21 12:28	2017-02-27	Show	GitHub Exploit DB Packet Storm

253712	3.7	LOW Network	w3	high_resolution_time_api	The W3C High Resolution Time API, as implemented in various web browsers, does not consider that memory-reference times can be measured by a performance.now "Time to Tick" approach even with the http…	NVD-CWE-noinfo	CVE-2017-5928	2024-11-21 12:28	2017-02-27	Show	GitHub Exploit DB Packet Storm

253713	7.5	HIGH Network	intel amd samsung nvidia allwinner	core_i7-2620qm core_i7-6700k core_i5_m480 fx-8120_8-core e-350 atom_c2750 athlon_ii_640_x4 exynos_5800 celeron_n2840 fx-8320_8-core xeon_e5-2658_v2 tegra_k1_cd580m-a1…	Page table walks conducted by the MMU during virtual to physical address translation leave a trace in the last level cache of modern ARM processors. By performing a side-channel attack on the MMU ope…	CWE-200 Information Exposure	CVE-2017-5927	2024-11-21 12:28	2017-02-27	Show	GitHub Exploit DB Packet Storm

253714	7.5	HIGH Network	intel amd samsung nvidia allwinner	core_i7-2620qm core_i7-6700k core_i5_m480 fx-8120_8-core e-350 atom_c2750 athlon_ii_640_x4 exynos_5800 celeron_n2840 fx-8320_8-core xeon_e5-2658_v2 tegra_k1_cd580m-a1…	Page table walks conducted by the MMU during virtual to physical address translation leave a trace in the last level cache of modern AMD processors. By performing a side-channel attack on the MMU ope…	CWE-200 Information Exposure	CVE-2017-5926	2024-11-21 12:28	2017-02-27	Show	GitHub Exploit DB Packet Storm

253715	7.5	HIGH Network	intel amd samsung nvidia allwinner	core_i7-2620qm core_i7-6700k core_i5_m480 fx-8120_8-core e-350 atom_c2750 athlon_ii_640_x4 exynos_5800 celeron_n2840 fx-8320_8-core xeon_e5-2658_v2 tegra_k1_cd580m-a1…	Page table walks conducted by the MMU during virtual to physical address translation leave a trace in the last level cache of modern Intel processors. By performing a side-channel attack on the MMU o…	CWE-200 Information Exposure	CVE-2017-5925	2024-11-21 12:28	2017-02-27	Show	GitHub Exploit DB Packet Storm

253716	7.8	HIGH Local	linux debian canonical	linux_kernel debian_linux ubuntu_linux	The do_shmat function in ipc/shm.c in the Linux kernel through 4.9.12 does not restrict the address calculated by a certain rounding operation, which allows local users to map page zero, and conseque…	NVD-CWE-noinfo	CVE-2017-5669	2024-11-21 12:28	2017-02-25	Show	GitHub Exploit DB Packet Storm

253717	9.8	CRITICAL Network	metalgenix	genixcms	CSRF token bypass in GeniXCMS before 1.0.2 could result in escalation of privileges. The forgotpassword.php page can be used to acquire a token.	CWE-352 Origin Validation Error	CVE-2017-5959	2024-11-21 12:28	2017-02-21	Show	GitHub Exploit DB Packet Storm

253718	7.8	HIGH Local	gomlab	gom_player	GOM Player 2.3.10.5266 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted fpx file.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2017-5881	2024-11-21 12:28	2017-02-21	Show	GitHub Exploit DB Packet Storm

253719	7.0	HIGH Local	linux	linux_kernel	Race condition in kernel/events/core.c in the Linux kernel before 4.9.7 allows local users to gain privileges via a crafted application that makes concurrent perf_event_open system calls for moving a…	CWE-362 Race Condition	CVE-2017-6001	2024-11-21 12:28	2017-02-19	Show	GitHub Exploit DB Packet Storm

253720	5.5	MEDIUM Local	linux	linux_kernel	Race condition in the sctp_wait_for_sndbuf function in net/sctp/socket.c in the Linux kernel before 4.9.11 allows local users to cause a denial of service (assertion failure and panic) via a multithr…	CWE-362 CWE-617 Race Condition Reachable Assertion	CVE-2017-5986	2024-11-21 12:28	2017-02-19	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed