Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 15, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
252021	4.9	警告	オラクル	-	Oracle Fusion Middleware の Oracle Business Intelligence Enterprise Edition コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2011-3510	2011-10-26 16:30	2011-10-18	Show	GitHub Exploit DB Packet Storm

252022	5	警告	オラクル	-	Oracle WebLogic Server における Web Services の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2011-2320	2011-10-26 16:29	2011-10-18	Show	GitHub Exploit DB Packet Storm

252023	4.3	警告	オラクル	-	Oracle WebLogic Server における JMS の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2011-2319	2011-10-26 16:28	2011-10-18	Show	GitHub Exploit DB Packet Storm

252024	1.5	注意	オラクル	-	Oracle WebLogic Server における WLS Security の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2011-2318	2011-10-26 16:27	2011-10-18	Show	GitHub Exploit DB Packet Storm

252025	4.3	警告	オラクル	-	Oracle Fusion Middleware の Oracle Containers for J2EE コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2011-2314	2011-10-26 16:26	2011-10-18	Show	GitHub Exploit DB Packet Storm

252026	6.8	警告	オラクル	-	Oracle Fusion Middleware の Oracle WebLogic Portal コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2011-2255	2011-10-26 16:25	2011-10-18	Show	GitHub Exploit DB Packet Storm

252027	3.5	注意	オラクル	-	Oracle Fusion Middleware の Oracle Web Services Manager コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2011-2237	2011-10-26 16:24	2011-10-18	Show	GitHub Exploit DB Packet Storm

252028	2.1	注意	アップル	-	Apple Mac OS X のオープンディレクトリにおけるパスワードデータを閲覧される脆弱性	CWE-255 証明書・パスワード管理	CVE-2011-3435	2011-10-26 09:47	2011-10-14	Show	GitHub Exploit DB Packet Storm

252029	6.8	警告	アップル	-	Apple Mac OS X の libsecurity における任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2011-3227	2011-10-26 09:46	2011-10-14	Show	GitHub Exploit DB Packet Storm

252030	6.8	警告	アップル	-	Apple Mac OS X のオープンディレクトリにおけるパスワード要求を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-3226	2011-10-26 09:45	2011-10-14	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 16, 2026, 4 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
253201	9.8	CRITICAL Network	xv_project opensuse	xv leap	xvpng.c in xv 3.10a has memory corruption (out-of-bounds write) when decoding PNG comment fields, leading to crashes or potentially code execution, because it uses an incorrect length value.	CWE-787 Out-of-bounds Write	CVE-2017-18215	2024-11-21 12:19	2018-03-6	Show	GitHub Exploit DB Packet Storm

253202	7.5	HIGH Network	momentjs tenable	moment nessus	The moment module before 2.19.3 for Node.js is prone to a regular expression denial of service via a crafted date string, a different vulnerability than CVE-2016-4055.	CWE-400 Uncontrolled Resource Consumption	CVE-2017-18214	2024-11-21 12:19	2018-03-5	Show	GitHub Exploit DB Packet Storm

253203	7.2	HIGH Network	exponentcms	exponent_cms	In Exponent CMS before 2.4.1 Patch #6, certain admin users can elevate their privileges.	NVD-CWE-noinfo	CVE-2017-18213	2024-11-21 12:19	2018-03-4	Show	GitHub Exploit DB Packet Storm

253204	9.8	CRITICAL Network	jerryscript	jerryscript	An issue was discovered in JerryScript 1.0. There is a heap-based buffer over-read in the lit_read_code_unit_from_hex function in lit/lit-char-helpers.c via a RegExp("[\x0"); payload.	CWE-125 Out-of-bounds Read	CVE-2017-18212	2024-11-21 12:19	2018-03-2	Show	GitHub Exploit DB Packet Storm

253205	9.8	CRITICAL Network	imagemagick canonical	imagemagick ubuntu_linux	In ImageMagick 7.0.7, a NULL pointer dereference vulnerability was found in the function saveBinaryCLProgram in magick/opencl.c because a program-lookup result is not checked, related to CacheOpenCLK…	CWE-476 NULL Pointer Dereference	CVE-2017-18211	2024-11-21 12:19	2018-03-2	Show	GitHub Exploit DB Packet Storm

253206	9.8	CRITICAL Network	imagemagick	imagemagick	In ImageMagick 7.0.7, a NULL pointer dereference vulnerability was found in the function BenchmarkOpenCLDevices in MagickCore/opencl.c because a memory allocation result is not checked.	CWE-476 NULL Pointer Dereference	CVE-2017-18210	2024-11-21 12:19	2018-03-2	Show	GitHub Exploit DB Packet Storm

253207	8.8	HIGH Network	imagemagick canonical	imagemagick ubuntu_linux	In the GetOpenCLCachedFilesDirectory function in magick/opencl.c in ImageMagick 7.0.7, a NULL pointer dereference vulnerability occurs because a memory allocation result is not checked, related to Ge…	CWE-476 NULL Pointer Dereference	CVE-2017-18209	2024-11-21 12:19	2018-03-2	Show	GitHub Exploit DB Packet Storm

253208	5.5	MEDIUM Local	linux	linux_kernel	The madvise_willneed function in mm/madvise.c in the Linux kernel before 4.14.4 allows local users to cause a denial of service (infinite loop) by triggering use of MADVISE_WILLNEED for a DAX mapping.	CWE-835 Loop with Unreachable Exit Condition ('Infinite Loop')	CVE-2017-18208	2024-11-21 12:19	2018-03-1	Show	GitHub Exploit DB Packet Storm

253209	6.5	MEDIUM Network	python	python	The Wave_read._read_fmt_chunk function in Lib/wave.py in Python through 3.6.4 does not ensure a nonzero channel value, which allows attackers to cause a denial of service (divide-by-zero and exceptio…	CWE-369 Divide By Zero	CVE-2017-18207	2024-11-21 12:19	2018-03-1	Show	GitHub Exploit DB Packet Storm

253210	9.8	CRITICAL Network	zsh canonical	zsh ubuntu_linux	In utils.c in zsh before 5.4, symlink expansion had a buffer overflow.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2017-18206	2024-11-21 12:19	2018-02-28	Show	GitHub Exploit DB Packet Storm