Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 6, 2026, noon

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
251991	4	警告	Linux レッドハット	-	Linux kernel の bcm_connect 関数におけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-3874	2011-01-31 15:49	2010-12-8	Show	GitHub Exploit DB Packet Storm

251992	1.9	注意	Linux レッドハット	-	Linux kernel の viafb_ioctl_get_viafb_info 関数における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2010-4082	2011-01-31 15:40	2010-11-30	Show	GitHub Exploit DB Packet Storm

251993	1.9	注意	Linux レッドハット	-	Linux kernel の ivtvfb_ioctl 関数における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2010-4079	2011-01-31 15:03	2010-11-29	Show	GitHub Exploit DB Packet Storm

251994	1.9	注意	Linux レッドハット	-	Linux kernel の USB サブシステムにおける重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2010-4074	2011-01-31 15:01	2010-11-29	Show	GitHub Exploit DB Packet Storm

251995	2.1	注意	Linux レッドハット	-	Linux kernel の ethtool_get_rxnfc 関数における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2010-3861	2011-01-31 14:56	2010-12-10	Show	GitHub Exploit DB Packet Storm

251996	4.9	警告	Linux レッドハット	-	Linux kernel の hso_get_count 関数における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2010-3298	2011-01-28 16:03	2010-09-30	Show	GitHub Exploit DB Packet Storm

251997	4.9	警告	Linux レッドハット	-	Linux kernel の sound/core/seq/oss/seq_oss_init.c 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2010-3080	2011-01-28 15:59	2010-09-20	Show	GitHub Exploit DB Packet Storm

251998	9.3	危険	マイクロソフト	-	Microsoft Windows Vista の sdclt.exe にて使用される BitLocker Drive Encryption API における権限昇格の脆弱性	CWE-Other その他	CVE-2010-3145	2011-01-28 15:56	2011-01-11	Show	GitHub Exploit DB Packet Storm

251999	9.3	危険	マイクロソフト	-	MDAC および WDAC における任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2011-0027	2011-01-28 15:53	2011-01-11	Show	GitHub Exploit DB Packet Storm

252000	9.3	危険	マイクロソフト	-	MDAC および WDAC の SQLConnectW 関数における整数符号エラーの脆弱性	CWE-189 数値処理の問題	CVE-2011-0026	2011-01-28 15:50	2011-01-11	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 6, 2026, 4:08 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
249961	9.8	CRITICAL Network	google	android	An issue was discovered on Samsung mobile devices with KK(4.4), L(5.0/5.1), M(6.0), and N(7.0) software. There is a buffer overflow in the fps sysfs entry. The Samsung ID is SVE-2016-7510 (January 20…	CWE-120 Classic Buffer Overflow	CVE-2017-18693	2024-11-21 12:20	2020-04-7	Show	GitHub Exploit DB Packet Storm

249962	8.1	HIGH Network	google	android	An issue was discovered on Samsung mobile devices with M(6.0) and N(7.0) (MSM8939, MSM8996, MSM8998, Exynos7580, Exynos8890, or Exynos8895 chipsets) software. There is a race condition, with a result…	CWE-362 Race Condition	CVE-2017-18692	2024-11-21 12:20	2020-04-7	Show	GitHub Exploit DB Packet Storm

249963	6.5	MEDIUM Adjacent	syska	smartlight_rainbow_led_smart_bulb_firmware	Syska Smart Bulb devices through 2017-08-06 receive RGB parameters over cleartext Bluetooth Low Energy (BLE), leading to sniffing, reverse engineering, and replay attacks.	CWE-200 Information Exposure	CVE-2017-18642	2024-11-21 12:20	2020-02-11	Show	GitHub Exploit DB Packet Storm

249964	8.1	HIGH Network	linuxcontainers	lxc	In LXC 2.0, many template scripts download code over cleartext HTTP, and omit a digital-signature check, before running it to bootstrap containers.	CWE-287 Improper Authentication	CVE-2017-18641	2024-11-21 12:20	2020-02-10	Show	GitHub Exploit DB Packet Storm

249965	7.5	HIGH Network	snakeyaml_project fedoraproject quarkus oracle	snakeyaml fedora quarkus peoplesoft_enterprise_pt_peopletools	The Alias feature in SnakeYAML before 1.26 allows entity expansion during a load operation, a related issue to CVE-2003-1564.	CWE-776 XML Entity Expansion	CVE-2017-18640	2024-11-21 12:20	2019-12-12	Show	GitHub Exploit DB Packet Storm

249966	6.1	MEDIUM Network	progress	sitefinity_cms	Progress Sitefinity CMS before 10.1 allows XSS via /Pages Parameter : Page Title, /Content/News Parameter : News Title, /Content/List Parameter : List Title, /Content/Documents/LibraryDocuments/incid…	CWE-79 Cross-site Scripting	CVE-2017-18639	2024-11-21 12:20	2019-11-7	Show	GitHub Exploit DB Packet Storm

249967	7.5	HIGH Network	graphite_project	graphite	send_email in graphite-web/webapp/graphite/composer/views.py in Graphite through 1.1.5 is vulnerable to SSRF. The vulnerable SSRF endpoint can be used by an attacker to have the Graphite web server r…	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2017-18638	2024-11-21 12:20	2019-10-12	Show	GitHub Exploit DB Packet Storm

249968	7.5	HIGH Network	esafenet	cdg	CDG through 2017-01-01 allows downloadDocument.jsp?command=download&pathAndName= directory traversal.	CWE-22 Path Traversal	CVE-2017-18636	2024-11-21 12:20	2019-09-30	Show	GitHub Exploit DB Packet Storm

249969	6.1	MEDIUM Network	novnc debian canonical redhat	novnc debian_linux ubuntu_linux openstack	An XSS vulnerability was discovered in noVNC before 0.6.2 in which the remote VNC server could inject arbitrary HTML into the noVNC web page via the messages propagated to the status field, such as t…	CWE-79 Cross-site Scripting	CVE-2017-18635	2024-11-21 12:20	2019-09-26	Show	GitHub Exploit DB Packet Storm

249970	9.8	CRITICAL Network	tagdiv	newspaper	The newspaper theme before 6.7.2 for WordPress has script injection via td_ads[header] to admin-ajax.php.	CWE-74 Injection	CVE-2017-18634	2024-11-21 12:20	2019-09-16	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed