Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 5, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
252081 6.9 警告 マイクロソフト - Microsoft Windows における権限昇格の脆弱性 CWE-Other
その他 		CVE-2010-3966 2011-01-14 15:42 2010-12-14 Show GitHub Exploit DB Packet Storm
252082 6.9 警告 マイクロソフト - Windows Media Encoder における権限昇格の脆弱性 CWE-Other
その他 		CVE-2010-3965 2011-01-14 15:39 2010-12-14 Show GitHub Exploit DB Packet Storm
252083 6.9 警告 マイクロソフト - Microsoft Windows Movie Maker における権限昇格の脆弱性 CWE-Other
その他 		CVE-2010-3967 2011-01-14 15:36 2010-12-14 Show GitHub Exploit DB Packet Storm
252084 7.2 危険 マイクロソフト - Microsoft Windows の Windows Task Scheduler における権限昇格の脆弱性 CWE-20
不適切な入力確認 		CVE-2010-3338 2011-01-14 15:31 2010-12-14 Show GitHub Exploit DB Packet Storm
252085 6.9 警告 マイクロソフト - Microsoft Windows の OpenType Font ドライバにおける権限昇格の脆弱性 CWE-94
コード・インジェクション 		CVE-2010-3959 2011-01-14 15:27 2010-12-14 Show GitHub Exploit DB Packet Storm
252086 5 警告 アップル
サイバートラスト株式会社
OpenLDAP Foundation
ターボリナックス
VMware
レッドハット		 - OpenLDAP の IA5StringNormalize 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-0212 2011-01-14 14:45 2010-06-30 Show GitHub Exploit DB Packet Storm
252087 5 警告 アップル
サイバートラスト株式会社
OpenLDAP Foundation
ターボリナックス
VMware
レッドハット		 - OpenLDAP の slap_modrdn2mods 関数における任意のコードを実行される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-0211 2011-01-14 14:45 2010-06-30 Show GitHub Exploit DB Packet Storm
252088 6.2 警告 サイバートラスト株式会社
VMware
Todd C. Miller
レッドハット		 - sudo における権限昇格の脆弱性 CWE-DesignError
CVE-2010-2956 2011-01-14 14:44 2010-09-7 Show GitHub Exploit DB Packet Storm
252089 - - GNU Project
VMware
サイバートラスト株式会社
レッドハット		 - glibc に権限昇格の脆弱性 - CVE-2010-3847 2011-01-14 14:42 2010-10-26 Show GitHub Exploit DB Packet Storm
252090 7.8 危険 マイクロソフト
アドビシステムズ
日本電気		 - Microsoft Visual Studio の ATL における終端文字列の処理に関する重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2009-2495 2011-01-14 14:33 2009-07-28 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 6, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
250241 7.2 HIGH
Network 		atlassian crowd The administration SMTP configuration resource in Atlassian Crowd before version 2.10.2 allows remote attackers with administration rights to execute arbitrary code via a JNDI injection. CWE-94
Code Injection 		CVE-2017-18108 2024-11-21 12:19 2019-03-29 Show GitHub Exploit DB Packet Storm
250242 7.5 HIGH
Network 		atlassian crowd The identifier_hash for a session token in Atlassian Crowd before version 2.9.1 could potentially collide with an identifier_hash for another user or a user in a different directory, this allows remo… CWE-287
Improper Authentication 		CVE-2017-18106 2024-11-21 12:19 2019-03-29 Show GitHub Exploit DB Packet Storm
250243 8.1 HIGH
Network 		atlassian crowd The console login resource in Atlassian Crowd before version 3.0.2 and from version 3.1.0 before version 3.1.1 allows remote attackers, who have previously obtained a user's JSESSIONID cookie, to gai… CWE-384
 Session Fixation 		CVE-2017-18105 2024-11-21 12:19 2019-03-29 Show GitHub Exploit DB Packet Storm
250244 9.8 CRITICAL
Network 		github github The Management Console in GitHub Enterprise 2.8.x before 2.8.7 has a deserialization issue that allows unauthenticated remote attackers to execute arbitrary code. This occurs because the enterprise s… CWE-502
 Deserialization of Untrusted Data 		CVE-2017-18365 2024-11-21 12:19 2019-03-28 Show GitHub Exploit DB Packet Storm
250245 6.1 MEDIUM
Network 		frank-karau phpfk phpFK lite has XSS via the faq.php, members.php, or search.php query string or the user.php user parameter. CWE-79
Cross-site Scripting 		CVE-2017-18364 2024-11-21 12:19 2019-03-28 Show GitHub Exploit DB Packet Storm
250246 9.8 CRITICAL
Network 		connectwise manageditsync ConnectWise ManagedITSync integration through 2017 for Kaseya VSA is vulnerable to unauthenticated remote commands that allow full direct access to the Kaseya VSA database. In February 2019, attacker… CWE-89
SQL Injection 		CVE-2017-18362 2024-11-21 12:19 2019-02-5 Show GitHub Exploit DB Packet Storm
250247 7.5 HIGH
Network 		pylonsproject colander In Pylons Colander through 1.6, the URL validator allows an attacker to potentially cause an infinite loop thereby causing a denial of service via an unclosed parenthesis. CWE-835
 Loop with Unreachable Exit Condition ('Infinite Loop') 		CVE-2017-18361 2024-11-21 12:19 2019-02-1 Show GitHub Exploit DB Packet Storm
250248 5.5 MEDIUM
Local 		linux
canonical 		linux_kernel
ubuntu_linux 		In change_port_settings in drivers/usb/serial/io_ti.c in the Linux kernel before 4.11.3, local users could cause a denial of service by division-by-zero in the serial device layer by trying to set ve… CWE-369
 Divide By Zero 		CVE-2017-18360 2024-11-21 12:19 2019-01-31 Show GitHub Exploit DB Packet Storm
250249 7.5 HIGH
Network 		postgis
debian 		postgis
debian_linux 		PostGIS 2.x before 2.3.3, as used with PostgreSQL, allows remote attackers to cause a denial of service via crafted ST_AsX3D function input, as demonstrated by an abnormal server termination for "SEL… CWE-20
 Improper Input Validation  		CVE-2017-18359 2024-11-21 12:19 2019-01-25 Show GitHub Exploit DB Packet Storm
250250 7.8 HIGH
Local 		qualcomm mdm9206_firmware
mdm9607_firmware
mdm9650_firmware
msm8996au_firmware
sd_210_firmware
sd_212_firmware
sd_205_firmware
sd_820_firmware
sd_820a_firmware
sd_835_firmware
sd… 		Improper access control on secure display buffers in snapdragon automobile, snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607, MDM9650, MSM8996AU, SD 210/SD 212/SD 205, SD 820, SD 82… NVD-CWE-noinfo
CVE-2017-18331 2024-11-21 12:19 2019-01-19 Show GitHub Exploit DB Packet Storm