Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 10, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
251931	5	警告	The Perl Foundation レッドハット	-	Perl の lc、lcfirst、uc および ucfirst 関数における汚染 (Taint) 保護メカニズムを回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-1487	2011-05-26 09:55	2011-03-1	Show	GitHub Exploit DB Packet Storm

251932	7.5	危険	IBM サイバートラスト株式会社サン・マイクロシステムズ Sendmail Consortium ターボリナックスヒューレット・パッカードレッドハット	-	sendmail における X.509 証明書の処理に関する任意の SSL-based SMTP サーバになりすまされる脆弱性	CWE-310 暗号の問題	CVE-2009-4565	2011-05-26 09:52	2010-01-4	Show	GitHub Exploit DB Packet Storm

251933	5	警告	シックス・アパート株式会社	-	Movable Type におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-5845	2011-05-25 14:03	2011-05-25	Show	GitHub Exploit DB Packet Storm

251934	9.3	危険	マイクロソフト	-	Microsoft PowerPoint におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2011-1270	2011-05-25 12:24	2011-05-10	Show	GitHub Exploit DB Packet Storm

251935	9.3	危険	マイクロソフト	-	複数の Microsoft 製品における任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2011-1269	2011-05-25 12:22	2011-05-10	Show	GitHub Exploit DB Packet Storm

251936	9.3	危険	マイクロソフト	-	Microsoft Windows の WINS における任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2011-1248	2011-05-25 12:15	2011-05-10	Show	GitHub Exploit DB Packet Storm

251937	7.5	危険	サムスン	-	Samsung Integrated Management System DMS に SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4284	2011-05-25 12:12	2011-05-9	Show	GitHub Exploit DB Packet Storm

251938	5	警告	VMware	-	複数の VMware 製品の self-extracting インストーラにおけるソフトウェアの配布を偽造される脆弱性	CWE-310 暗号の問題	CVE-2011-1789	2011-05-25 12:09	2011-05-5	Show	GitHub Exploit DB Packet Storm

251939	-	-	Proofpoint, Inc.	-	Proofpoint Protection Server に複数の脆弱性	-	-	2011-05-25 12:07	2011-05-6	Show	GitHub Exploit DB Packet Storm

251940	5.1	警告	Aleksey レッドハット	-	WebKit などで利用される xslt.c における任意のファイルを作成される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-1425	2011-05-24 10:03	2011-03-31	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 10, 2026, 4:58 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
248231	6.7	MEDIUM Local	avast	internet_security pro_antivirus free_antivirus premier	Code injection vulnerability in Avast Premier 12.3 (and earlier), Internet Security 12.3 (and earlier), Pro Antivirus 12.3 (and earlier), and Free Antivirus 12.3 (and earlier) allows a local attacker…	CWE-427 Uncontrolled Search Path Element	CVE-2017-5567	2024-11-21 12:27	2017-03-22	Show	GitHub Exploit DB Packet Storm

248232	6.7	MEDIUM Local	avg	internet_security ultimate anti-virus	Code injection vulnerability in AVG Ultimate 17.1 (and earlier), AVG Internet Security 17.1 (and earlier), and AVG AntiVirus FREE 17.1 (and earlier) allows a local attacker to bypass a self-protectio…	CWE-427 Uncontrolled Search Path Element	CVE-2017-5566	2024-11-21 12:27	2017-03-22	Show	GitHub Exploit DB Packet Storm

248233	6.7	MEDIUM Local	trendmicro	premium_security antivirus\+ internet_security maximum_security	Code injection vulnerability in Trend Micro Maximum Security 11.0 (and earlier), Internet Security 11.0 (and earlier), and Antivirus+ Security 11.0 (and earlier) allows a local attacker to bypass a s…	CWE-427 Uncontrolled Search Path Element	CVE-2017-5565	2024-11-21 12:27	2017-03-22	Show	GitHub Exploit DB Packet Storm

248234	5.5	MEDIUM Local	jasper_project	jasper	The jas_matrix_asl function in jas_seq.c in JasPer 1.900.27 allows remote attackers to cause a denial of service (invalid memory read and crash) via a crafted image.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2017-5505	2024-11-21 12:27	2017-03-17	Show	GitHub Exploit DB Packet Storm

248235	9.8	CRITICAL Network	debian osgeo	debian_linux mapserver	Stack-based buffer overflow in MapServer before 6.0.6, 6.2.x before 6.2.4, 6.4.x before 6.4.5, and 7.0.x before 7.0.4 allows remote attackers to cause a denial of service (crash) or execute arbitrary…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2017-5522	2024-11-21 12:27	2017-03-16	Show	GitHub Exploit DB Packet Storm

248236	7.1	HIGH Local	virglrenderer_project	virglrenderer	The parse_instruction function in gallium/auxiliary/tgsi/tgsi_text.c in virglrenderer before 0.6.0 allows local guest OS users to cause a denial of service (out-of-bounds array access and process cra…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2017-5580	2024-11-21 12:27	2017-03-16	Show	GitHub Exploit DB Packet Storm

248237	6.5	MEDIUM Local	qemu debian	qemu debian_linux	Memory leak in the serial_exit_core function in hw/char/serial.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (host memory consumption and QEMU pro…	CWE-401 Missing Release of Memory after Effective Lifetime	CVE-2017-5579	2024-11-21 12:27	2017-03-16	Show	GitHub Exploit DB Packet Storm

248238	6.5	MEDIUM Local	qemu	qemu	Memory leak in the virtio_gpu_resource_attach_backing function in hw/display/virtio-gpu.c in QEMU (aka Quick Emulator) allows local guest OS users to cause a denial of service (host memory consumptio…	CWE-401 Missing Release of Memory after Effective Lifetime	CVE-2017-5578	2024-11-21 12:27	2017-03-16	Show	GitHub Exploit DB Packet Storm

248239	6.5	MEDIUM Local	qemu	qemu	Memory leak in the virgl_resource_attach_backing function in hw/display/virtio-gpu-3d.c in QEMU (aka Quick Emulator) allows local guest OS users to cause a denial of service (host memory consumption)…	CWE-401 Missing Release of Memory after Effective Lifetime	CVE-2017-5552	2024-11-21 12:27	2017-03-16	Show	GitHub Exploit DB Packet Storm

248240	5.3	MEDIUM Network	weblate	weblate	The password reset form in Weblate before 2.10.1 provides different error messages depending on whether the email address is associated with an account, which allows remote attackers to enumerate use…	CWE-200 Information Exposure	CVE-2017-5537	2024-11-21 12:27	2017-03-16	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed