Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 7, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
252051	4.3	警告	IBM	-	IBM WebSphere Application Server におけるインターナルアプリケーションハッシュテーブルのログインを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2008-7274	2011-03-23 15:35	2007-10-11	Show	GitHub Exploit DB Packet Storm

252052	3.5	注意	Apache Software Foundation レッドハット	-	Apache Subversion の rev_hunt.c におけるメモリリークの脆弱性	CWE-399 リソース管理の問題	CVE-2010-4644	2011-03-23 15:22	2011-01-7	Show	GitHub Exploit DB Packet Storm

252053	6	警告	アップル Apache Software Foundation レッドハット	-	Apache HTTP Server の authz.c におけるアクセス制限を回避される脆弱性	CWE-16 環境設定	CVE-2010-3315	2011-03-23 14:24	2010-10-4	Show	GitHub Exploit DB Packet Storm

252054	5	警告	IBM	-	IBM WebSphere Application Server における重要な情報を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-0316	2011-03-22 15:29	2010-12-17	Show	GitHub Exploit DB Packet Storm

252055	4.3	警告	IBM	-	IBM WebSphere Application Server におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-0315	2011-03-22 15:28	2010-12-17	Show	GitHub Exploit DB Packet Storm

252056	4.9	警告	サイバートラスト株式会社 Linux レッドハット	-	Linux kernel の ATI Rage 128 ドライバにおける権限昇格の脆弱性	CWE-20 不適切な入力確認	CVE-2009-3620	2011-03-18 15:30	2009-10-22	Show	GitHub Exploit DB Packet Storm

252057	4.9	警告	サイバートラスト株式会社 Linux レッドハット	-	Linux Kernel の __scm_destroy 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-DesignError	CVE-2008-5029	2011-03-18 15:29	2008-11-10	Show	GitHub Exploit DB Packet Storm

252058	5	警告	マイクロソフト	-	Microsoft Malware Protection Engine の一時ファイル作成に関するサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2008-1438	2011-03-18 15:24	2008-05-13	Show	GitHub Exploit DB Packet Storm

252059	-	-	マイクロソフト	-	Microsoft Windows の RtlQueryRegistryValues() 関数におけるレジストリデータ検証不備の脆弱性	-	CVE-2010-4398	2011-03-17 17:48	2010-11-29	Show	GitHub Exploit DB Packet Storm

252060	7.5	危険	レッドハット Wireshark オラクル	-	Wireshark の LDSS 解析部の dissect_ldss_transfer 関数におけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-4300	2011-03-17 17:43	2010-11-18	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 7, 2026, 4:22 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
255851	7.5	HIGH Network	wireshark debian	wireshark debian_linux	In Wireshark 2.0.0 to 2.0.13, the GPRS LLC dissector could go into a large loop. This was addressed in epan/dissectors/packet-gprs-llc.c by using a different integer data type.	CWE-834 Excessive Iteration	CVE-2017-11409	2024-11-21 12:07	2017-07-19	Show	GitHub Exploit DB Packet Storm

255852	7.5	HIGH Network	wireshark	wireshark	In Wireshark 2.2.0 to 2.2.7 and 2.0.0 to 2.0.13, the AMQP dissector could crash. This was addressed in epan/dissectors/packet-amqp.c by checking for successful list dissection.	CWE-20 Improper Input Validation	CVE-2017-11408	2024-11-21 12:07	2017-07-19	Show	GitHub Exploit DB Packet Storm

255853	7.5	HIGH Network	wireshark debian	wireshark debian_linux	In Wireshark 2.2.0 to 2.2.7 and 2.0.0 to 2.0.13, the MQ dissector could crash. This was addressed in epan/dissectors/packet-mq.c by validating the fragment length before a reassembly attempt.	CWE-20 Improper Input Validation	CVE-2017-11407	2024-11-21 12:07	2017-07-19	Show	GitHub Exploit DB Packet Storm

255854	7.5	HIGH Network	wireshark debian	wireshark debian_linux	In Wireshark 2.2.0 to 2.2.7 and 2.0.0 to 2.0.13, the DOCSIS dissector could go into an infinite loop. This was addressed in plugins/docsis/packet-docsis.c by rejecting invalid Frame Control parameter…	CWE-835 Loop with Unreachable Exit Condition ('Infinite Loop')	CVE-2017-11406	2024-11-21 12:07	2017-07-19	Show	GitHub Exploit DB Packet Storm

255855	5.5	MEDIUM Local	libmspack_project	libmspack	The cabd_read_string function in mspack/cabd.c in libmspack 0.5alpha, as used in ClamAV 0.99.2 and other products, allows remote attackers to cause a denial of service (stack-based buffer over-read a…	CWE-125 Out-of-bounds Read	CVE-2017-11423	2024-11-21 12:07	2017-07-19	Show	GitHub Exploit DB Packet Storm

255856	7.8	HIGH Local	gnome-exe-thumbnailer_project	gnome-exe-thumbnailer	gnome-exe-thumbnailer before 0.9.5 is prone to a VBScript Injection when generating thumbnails for MSI files, aka the "Bad Taste" issue. There is a local attack if the victim uses the GNOME Files fil…	CWE-94 Code Injection	CVE-2017-11421	2024-11-21 12:07	2017-07-19	Show	GitHub Exploit DB Packet Storm

255857	9.8	CRITICAL Network	fiyo	fiyo_cms	Fiyo CMS 2.0.7 has SQL injection in /apps/app_article/controller/editor.php via $_POST['id'] and $_POST['art_title'].	CWE-89 SQL Injection	CVE-2017-11419	2024-11-21 12:07	2017-07-18	Show	GitHub Exploit DB Packet Storm

255858	9.8	CRITICAL Network	fiyo	fiyo_cms	Fiyo CMS 2.0.7 has SQL injection in dapur/apps/app_article/controller/article_list.php via $_GET['cat'], $_GET['user'], $_GET['level'], and $_GET['iSortCol_'.$i].	CWE-89 SQL Injection	CVE-2017-11418	2024-11-21 12:07	2017-07-18	Show	GitHub Exploit DB Packet Storm

255859	9.8	CRITICAL Network	fiyo	fiyo_cms	Fiyo CMS 2.0.7 has SQL injection in dapur/apps/app_article/controller/article_status.php via $_GET['id'].	CWE-89 SQL Injection	CVE-2017-11417	2024-11-21 12:07	2017-07-18	Show	GitHub Exploit DB Packet Storm

255860	9.8	CRITICAL Network	fiyo	fiyo_cms	Fiyo CMS 2.0.7 has SQL injection in /apps/app_comment/controller/insert.php via the name parameter.	CWE-89 SQL Injection	CVE-2017-11416	2024-11-21 12:07	2017-07-18	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed