Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 21, 2026, 6:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
252011	9.3	危険	BlackBerry	-	複数の RIM BlackBerry 製品におけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2009-0176	2011-12-22 11:50	2009-01-12	Show	GitHub Exploit DB Packet Storm

252012	4.3	警告	Serck Control Control Microsystems	-	Control Microsystems ClearSCADA におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-3144	2011-12-22 11:49	2011-08-16	Show	GitHub Exploit DB Packet Storm

252013	10	危険	Serck Control Control Microsystems	-	Control Microsystems ClearSCADA におけるサービス運用妨害 (クラッシュ) の脆弱性	CWE-399 リソース管理の問題	CVE-2011-3143	2011-12-22 11:34	2011-08-16	Show	GitHub Exploit DB Packet Storm

252014	10	危険	WellinTech	-	WellinTech KingView におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2011-3142	2011-12-22 11:29	2011-08-16	Show	GitHub Exploit DB Packet Storm

252015	10	危険	Progea Srl	-	Progea Movicon の TCPUploadServer.exe における重要な情報を取得される脆弱性	CWE-287 不適切な認証	CVE-2011-2963	2011-12-22 11:22	2011-07-29	Show	GitHub Exploit DB Packet Storm

252016	10	危険	Beijing Sunway ForceControl Technology	-	Sunway pNetPower におけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2011-2961	2011-12-22 11:08	2011-07-29	Show	GitHub Exploit DB Packet Storm

252017	10	危険	Beijing Sunway ForceControl Technology	-	Sunway ForceControl におけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2011-2960	2011-12-22 11:07	2011-07-29	Show	GitHub Exploit DB Packet Storm

252018	10	危険	7-Technologies	-	7-Technologies Interactive Graphical SCADA System におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2011-2959	2011-12-22 11:02	2011-07-29	Show	GitHub Exploit DB Packet Storm

252019	4.3	警告	Ecava	-	Ecava IntegraXor におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-2958	2011-12-22 11:02	2011-06-9	Show	GitHub Exploit DB Packet Storm

252020	6.9	警告	Rockwell Automation	-	Rockwell Automation FactoryTalk Diagnostics Viewer における任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2011-2957	2011-12-22 11:01	2011-07-28	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 22, 2026, 4:08 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
247431	9.8	CRITICAL Network	echatserver	easy_chat_server	There is a remote stack-based buffer overflow (SEH) in register.ghp in EFS Software Easy Chat Server versions 2.0 to 3.1. By sending an overly long username string to registresult.htm for registering…	CWE-787 Out-of-bounds Write	CVE-2017-9544	2024-11-21 12:36	2017-06-12	Show	GitHub Exploit DB Packet Storm

247432	7.5	HIGH Network	echatserver	easy_chat_server	register.ghp in EFS Software Easy Chat Server versions 2.0 to 3.1 allows remote attackers to reset arbitrary passwords via a crafted POST request to registresult.htm.	CWE-640 Weak Password Recovery Mechanism for Forgotten Password	CVE-2017-9543	2024-11-21 12:36	2017-06-12	Show	GitHub Exploit DB Packet Storm

247433	9.8	CRITICAL Network	d-link	dir-615_firmware	D-Link DIR-615 Wireless N 300 Router allows authentication bypass via a modified POST request to login.cgi. This issue occurs because it fails to validate the password field. Successful exploitation …	CWE-287 Improper Authentication	CVE-2017-9542	2024-11-21 12:36	2017-06-12	Show	GitHub Exploit DB Packet Storm

247434	7.8	HIGH Local	mruby debian	mruby debian_linux	The mark_context_stack function in gc.c in mruby through 1.2.0 allows attackers to cause a denial of service (heap-based use-after-free and application crash) or possibly have unspecified other impac…	CWE-416 Use After Free	CVE-2017-9527	2024-11-21 12:36	2017-06-12	Show	GitHub Exploit DB Packet Storm

247435	5.9	MEDIUM Network	gnupg	libgcrypt	In Libgcrypt before 1.7.7, an attacker who learns the EdDSA session key (from side-channel observation during the signing process) can easily recover the long-term secret key. 1.7.7 makes a cipher/ec…	CWE-200 Information Exposure	CVE-2017-9526	2024-11-21 12:36	2017-06-11	Show	GitHub Exploit DB Packet Storm

247436	6.7	MEDIUM Local	cron_project debian	cron debian_linux	In the cron package through 3.0pl1-128 on Debian, and through 3.0pl1-128ubuntu2 on Ubuntu, the postinst maintainer script allows for group-crontab-to-root privilege escalation via symlink attacks aga…	CWE-59 Link Following	CVE-2017-9525	2024-11-21 12:36	2017-06-10	Show	GitHub Exploit DB Packet Storm

247437	6.1	MEDIUM Network	sophos	web_appliance	The Sophos Web Appliance before 4.3.2 has XSS in the FTP redirect page, aka NSWA-1342.	CWE-79 Cross-site Scripting	CVE-2017-9523	2024-11-21 12:36	2017-06-9	Show	GitHub Exploit DB Packet Storm

247438	5.5	MEDIUM Local	radare	radare2	The r_config_set function in libr/config/config.c in radare2 1.5.0 allows remote attackers to cause a denial of service (use-after-free and application crash) via a crafted DEX file.	CWE-416 Use After Free	CVE-2017-9520	2024-11-21 12:36	2017-06-8	Show	GitHub Exploit DB Packet Storm

247439	8.8	HIGH Network	atmail	atmail	atmail before 7.8.0.2 has CSRF, allowing an attacker to create a user account.	CWE-352 Origin Validation Error	CVE-2017-9519	2024-11-21 12:36	2017-06-8	Show	GitHub Exploit DB Packet Storm

247440	8.8	HIGH Network	atmail	atmail	atmail before 7.8.0.2 has CSRF, allowing an attacker to change the SMTP hostname and hijack all emails.	CWE-352 Origin Validation Error	CVE-2017-9518	2024-11-21 12:36	2017-06-8	Show	GitHub Exploit DB Packet Storm