Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 9, 2026, noon

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
252081	6.8	警告	freedesktop.org サイバートラスト株式会社 foolabs OpenOffice.org Project レッドハット	-	xpdf および poppler などの製品で利用される PDF パーサの Gfx::getPos 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2010-3702	2011-05-9 11:26	2010-10-7	Show	GitHub Exploit DB Packet Storm

252082	7.5	危険	サイバートラスト株式会社 The Perl Foundation レッドハットオラクル	-	Perl の Safe モジュールにおける任意のコードを挿入または実行される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-1168	2011-05-9 11:13	2010-06-7	Show	GitHub Exploit DB Packet Storm

252083	9.3	危険	サン・マイクロシステムズサイバートラスト株式会社 Mozilla Foundation レッドハットオラクル	-	Mozilla NSS の正規表現の解析における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2009-2404	2011-05-9 11:11	2009-08-1	Show	GitHub Exploit DB Packet Storm

252084	7.5	危険	アップルサイバートラスト株式会社 xmlsoft.org レッドハットオラクル	-	libxslt の pattern.c におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2008-1767	2011-05-9 11:07	2008-05-21	Show	GitHub Exploit DB Packet Storm

252085	9.3	危険	レッドハット GNOME Project オラクル	-	Evolution の iCalendar 添付ファイルの処理に関するヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2008-1109	2011-05-9 11:04	2008-06-4	Show	GitHub Exploit DB Packet Storm

252086	7.6	危険	レッドハット GNOME Project オラクル	-	Evolution のタイムゾーン処理に関するバッファーオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2008-1108	2011-05-9 10:51	2008-06-4	Show	GitHub Exploit DB Packet Storm

252087	2.6	注意	レッドハットオラクル	-	gedit の不正なファイル名の処理によるフォーマットストリングの脆弱性	-	CVE-2005-1686	2011-05-9 10:49	2005-05-24	Show	GitHub Exploit DB Packet Storm

252088	7.8	危険	シスコシステムズ	-	Cisco IOS におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2010-4683	2011-05-9 10:22	2011-01-7	Show	GitHub Exploit DB Packet Storm

252089	7.2	危険	マイクロソフト	-	Microsoft Windows の win32k.sys における権限昇格の脆弱性	CWE-399 リソース管理の問題	CVE-2011-1234	2011-05-6 11:28	2011-04-12	Show	GitHub Exploit DB Packet Storm

252090	7.2	危険	マイクロソフト	-	Microsoft Windows の win32k.sys における権限昇格の脆弱性	CWE-399 リソース管理の問題	CVE-2011-0675	2011-05-6 11:27	2011-04-12	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 9, 2026, 5:07 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
248261	9.1	CRITICAL Network	libimobiledevice	libplist	The main function in plistutil.c in libimobiledevice libplist through 1.12 allows attackers to obtain sensitive information from process memory or cause a denial of service (buffer over-read) via App…	CWE-125 Out-of-bounds Read	CVE-2017-5545	2024-11-21 12:27	2017-01-21	Show	GitHub Exploit DB Packet Storm

248262	9.8	CRITICAL Network	intelliants	subrion	includes/classes/ia.core.users.php in Subrion CMS 4.0.5 allows remote attackers to conduct PHP Object Injection attacks via crafted serialized data in a salt cookie in a login request.	CWE-94 Code Injection	CVE-2017-5543	2024-11-21 12:27	2017-01-20	Show	GitHub Exploit DB Packet Storm

248263	6.1	MEDIUM Network	getsymphony	symphony	Cross-site scripting (XSS) vulnerability in template/usererror.missing_extension.php in Symphony CMS before 2.6.10 allows remote attackers to inject arbitrary web script or HTML via the existing-fold…	CWE-79 Cross-site Scripting	CVE-2017-5542	2024-11-21 12:27	2017-01-20	Show	GitHub Exploit DB Packet Storm

248264	5.3	MEDIUM Network	getsymphony	symphony	Directory traversal vulnerability in template/usererror.missing_extension.php in Symphony CMS before 2.6.10 allows remote attackers to rename arbitrary files via a .. (dot dot) in the existing-folder…	CWE-22 Path Traversal	CVE-2017-5541	2024-11-21 12:27	2017-01-20	Show	GitHub Exploit DB Packet Storm

248265	6.1	MEDIUM Network	eclinicalworks	patient_portal	An issue was discovered in eClinicalWorks Patient Portal 7.0 build 13. This is a reflected Cross Site Scripting vulnerability which affects the raceMasterList.jsp page within the Patient Portal. Inse…	CWE-79 Cross-site Scripting	CVE-2017-5599	2024-11-21 12:27	2017-01-27	Show	GitHub Exploit DB Packet Storm

248266	7.5	HIGH Network	quagga	quagga	All versions of Quagga, 0.93 through 1.1.0, are vulnerable to an unbounded memory allocation in the telnet 'vty' CLI, leading to a Denial-of-Service of Quagga daemons, or even the entire host. When Q…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2017-5495	2024-11-21 12:27	2017-01-24	Show	GitHub Exploit DB Packet Storm

248267	5.9	MEDIUM Network	fiberhome	fengine_s5800_firmware	An issue was discovered on FiberHome Fengine S5800 switches V210R240. An unauthorized attacker can access the device's SSH service, using a password cracking tool to establish SSH connections quickly…	CWE-400 Uncontrolled Resource Consumption	CVE-2017-5544	2024-11-21 12:27	2017-01-23	Show	GitHub Exploit DB Packet Storm

248268	8.8	HIGH Network	metalgenix	genixcms	The media rename feature in GeniXCMS through 0.0.8 does not consider alternative PHP file extensions when checking uploaded files for PHP content, which enables a user to rename and execute files wit…	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2017-5520	2024-11-21 12:27	2017-01-17	Show	GitHub Exploit DB Packet Storm

248269	9.8	CRITICAL Network	metalgenix	genixcms	SQL injection vulnerability in Posts.class.php in GeniXCMS through 0.0.8 allows remote attackers to execute arbitrary SQL commands via the id parameter.	CWE-89 SQL Injection	CVE-2017-5519	2024-11-21 12:27	2017-01-17	Show	GitHub Exploit DB Packet Storm

248270	7.4	HIGH Network	metalgenix	genixcms	The media-file upload feature in GeniXCMS through 0.0.8 allows remote attackers to conduct SSRF attacks via a URL, as demonstrated by a URL with an intranet IP address.	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2017-5518	2024-11-21 12:27	2017-01-17	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed