Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 7, 2026, 4 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
251821	2.6	注意	MediaWiki	-	MediaWiki の profileinfo.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-2788	2012-03-27 18:42	2011-04-26	Show	GitHub Exploit DB Packet Storm

251822	4.3	警告	MediaWiki	-	MediaWiki の api.php における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2010-2787	2012-03-27 18:42	2011-04-26	Show	GitHub Exploit DB Packet Storm

251823	9	危険	シスコシステムズ	-	Cisco WLC におけるアクセス制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-2843	2012-03-27 18:42	2010-09-8	Show	GitHub Exploit DB Packet Storm

251824	9	危険	シスコシステムズ	-	Cisco WLC におけるアクセス制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-2842	2012-03-27 18:42	2010-09-8	Show	GitHub Exploit DB Packet Storm

251825	6.8	警告	シスコシステムズ	-	Cisco WLC におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2010-2841	2012-03-27 18:42	2010-09-8	Show	GitHub Exploit DB Packet Storm

251826	3.5	注意	MantisBT Group	-	MantisBT におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-2802	2012-03-27 18:42	2010-05-23	Show	GitHub Exploit DB Packet Storm

251827	6.8	警告	dest-unreach.org	-	Socat の nestlex 関数におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-2799	2012-03-27 18:42	2010-09-14	Show	GitHub Exploit DB Packet Storm

251828	7.5	危険	CMS Made Simple	-	CMS Made Simple の lib/translation.functions.php におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2010-2797	2012-03-27 18:42	2010-07-13	Show	GitHub Exploit DB Packet Storm

251829	6.8	警告	マイクロソフトレッドハット	-	RHEV Manager の SPICE plug-in for Internet Explorer における競合状態の脆弱性	CWE-362 競合状態	CVE-2010-2793	2012-03-27 18:42	2010-12-6	Show	GitHub Exploit DB Packet Storm

251830	4.3	警告	Novell	-	Novell GroupWise の WebAccess におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-2779	2012-03-27 18:42	2010-06-30	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 7, 2026, 4:13 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
259141	8.8	HIGH Network	libtiff	libtiff	tools/pal2rgb.c in pal2rgb in LibTIFF 4.0.9 allows remote attackers to cause a denial of service (TIFFSetupStrips heap-based buffer overflow and application crash) or possibly have unspecified other …	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2017-17095	2024-11-21 12:17	2017-12-2	Show	GitHub Exploit DB Packet Storm

259142	5.4	MEDIUM Network	wordpress debian	wordpress debian_linux	wp-includes/feed.php in WordPress before 4.9.1 does not properly restrict enclosures in RSS and Atom fields, which might allow attackers to conduct XSS attacks via a crafted URL.	CWE-79 Cross-site Scripting	CVE-2017-17094	2024-11-21 12:17	2017-12-2	Show	GitHub Exploit DB Packet Storm

259143	5.4	MEDIUM Network	wordpress debian	wordpress debian_linux	wp-includes/general-template.php in WordPress before 4.9.1 does not properly restrict the lang attribute of an HTML element, which might allow attackers to conduct XSS attacks via the language settin…	CWE-79 Cross-site Scripting	CVE-2017-17093	2024-11-21 12:17	2017-12-2	Show	GitHub Exploit DB Packet Storm

259144	5.4	MEDIUM Network	wordpress debian	wordpress debian_linux	wp-includes/functions.php in WordPress before 4.9.1 does not require the unfiltered_html capability for upload of .js files, which might allow remote attackers to conduct XSS attacks via a crafted fi…	CWE-79 Cross-site Scripting	CVE-2017-17092	2024-11-21 12:17	2017-12-2	Show	GitHub Exploit DB Packet Storm

259145	8.8	HIGH Network	wordpress	wordpress	wp-admin/user-new.php in WordPress before 4.9.1 sets the newbloguser key to a string that can be directly derived from the user ID, which allows remote attackers to bypass intended access restriction…	CWE-330 Use of Insufficiently Random Values	CVE-2017-17091	2024-11-21 12:17	2017-12-2	Show	GitHub Exploit DB Packet Storm

259146	7.5	HIGH Network	digium	certified_asterisk asterisk	An issue was discovered in chan_skinny.c in Asterisk Open Source 13.18.2 and older, 14.7.2 and older, and 15.1.2 and older, and Certified Asterisk 13.13-cert7 and older. If the chan_skinny (aka SCCP …	CWE-459 Incomplete Cleanup	CVE-2017-17090	2024-11-21 12:17	2017-12-2	Show	GitHub Exploit DB Packet Storm

259147	7.5	HIGH Network	zte	zxdsl_831cii_firmware	connoppp.cgi on ZTE ZXDSL 831CII devices does not require HTTP Basic Authentication, which allows remote attackers to modify the PPPoE configuration or set up a malicious configuration via a GET requ…	CWE-287 Improper Authentication	CVE-2017-16953	2024-11-21 12:17	2017-12-2	Show	GitHub Exploit DB Packet Storm

259148	7.8	HIGH Local	arqbackup	arq	The (1) arq_updater, (2) arqcommitter, (3) standardrestorer, (4) arqglacierrestorer, and (5) arqs3glacierrestorer helper apps in Arq 5.x before 5.10 for Mac allow local users to gain root privileges …	CWE-732 Incorrect Permission Assignment for Critical Resource	CVE-2017-16895	2024-11-21 12:17	2017-12-2	Show	GitHub Exploit DB Packet Storm

259149	6.5	MEDIUM Network	piwigo	piwigo	The application Piwigo is affected by an SQL injection vulnerability in version 2.9.2 and possibly prior. This vulnerability allows remote authenticated attackers to obtain information in the context…	CWE-89 SQL Injection	CVE-2017-16893	2024-11-21 12:17	2017-12-2	Show	GitHub Exploit DB Packet Storm

259150	5.5	MEDIUM Local	vim debian canonical	vim debian_linux ubuntu_linux	fileio.c in Vim prior to 8.0.1263 sets the group ownership of a .swp file to the editor's primary group (which may be different from the group ownership of the original file), which allows local user…	CWE-668 Exposure of Resource to Wrong Sphere	CVE-2017-17087	2024-11-21 12:17	2017-12-1	Show	GitHub Exploit DB Packet Storm