Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 4, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
252211	10	危険	ターボリナックス ProFTPD Project	-	ProFTPD の pr_netio_telnet_get 関数におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-4221	2010-12-22 15:20	2010-10-29	Show	GitHub Exploit DB Packet Storm

252212	7.1	危険	サイバートラスト株式会社 ProFTPD Project ターボリナックス	-	ProFTPD の mod_site_misc モジュールにおけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2010-3867	2010-12-22 15:19	2010-10-29	Show	GitHub Exploit DB Packet Storm

252213	9.3	危険	Mozilla Foundation オラクル	-	複数の Mozilla 製品のブラウザエンジンにおける任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2010-3174	2010-12-22 15:16	2010-10-19	Show	GitHub Exploit DB Packet Storm

252214	4.3	警告	Mozilla Foundation オラクル	-	複数の Mozilla 製品の SafeJSObjectWrapper 実装における同一生成元ポリシーを回避される脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-2763	2010-12-22 15:15	2010-09-7	Show	GitHub Exploit DB Packet Storm

252215	4.3	警告	ISC, Inc. レッドハット	-	ISC DHCP サーバにおけるサービス運用妨害 (DoS) の脆弱性	CWE-DesignError	CVE-2010-3611	2010-12-22 14:25	2010-11-2	Show	GitHub Exploit DB Packet Storm

252216	5	警告	Wireshark	-	Wireshark の ZigBee ZCL 解析部の epan/dissectors/packet-zbee-zcl.c におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2010-4301	2010-12-22 14:20	2010-11-18	Show	GitHub Exploit DB Packet Storm

252217	4.3	警告	サイバートラスト株式会社 Mozilla Foundation レッドハットオラクル	-	複数の Mozilla 製品におけるクロスサイトスクリプティングを誘導される脆弱性	CWE-20 不適切な入力確認	CVE-2010-1210	2010-12-21 16:14	2010-07-20	Show	GitHub Exploit DB Packet Storm

252218	4.3	警告	サイバートラスト株式会社 Mozilla Foundation レッドハットオラクル	-	複数の Mozilla 製品の XMLDocument::load 関数におけるアクセス制限を回避される脆弱性	CWE-20 不適切な入力確認	CVE-2010-0182	2010-12-21 16:11	2010-03-30	Show	GitHub Exploit DB Packet Storm

252219	9.3	危険	サイバートラスト株式会社 Mozilla Foundation レッドハットオラクル	-	Mozilla Firefox/SeaMonkey における任意の JavaScript を実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-0179	2010-12-21 16:10	2010-03-30	Show	GitHub Exploit DB Packet Storm

252220	7.6	危険	サイバートラスト株式会社 Mozilla Foundation レッドハットオラクル	-	Mozilla Firefox/SeaMonkey における任意の JavaScript を実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-0178	2010-12-21 16:09	2010-03-30	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 5, 2026, 4:51 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
251331	9.1	CRITICAL Network	beckhoff	twincat	Beckhoff TwinCAT supports communication over ADS. ADS is a protocol for industrial automation in protected environments. ADS has not been designed to achieve security purposes and therefore does not …	CWE-326 Inadequate Encryption Strength	CVE-2017-16726	2024-11-21 12:16	2018-06-28	Show	GitHub Exploit DB Packet Storm

251332	5.9	MEDIUM Network	beckhoff	twincat	Beckhoff TwinCAT 3 supports communication over ADS. ADS is a protocol for industrial automation in protected environments. This protocol uses user configured routes, that can be edited remotely via A…	CWE-327 Use of a Broken or Risky Cryptographic Algorithm	CVE-2017-16718	2024-11-21 12:16	2018-06-28	Show	GitHub Exploit DB Packet Storm

251333	6.1	MEDIUM Network	sensiolabs debian	symfony debian_linux	An issue was discovered in Symfony 2.7.x before 2.7.38, 2.8.x before 2.8.31, 3.2.x before 3.2.14, and 3.3.x before 3.3.13. DefaultAuthenticationSuccessHandler or DefaultAuthenticationFailureHandler t…	CWE-601 Open Redirect	CVE-2017-16652	2024-11-21 12:16	2018-06-14	Show	GitHub Exploit DB Packet Storm

251334	9.8	CRITICAL Network	static-eval_project	static-eval	The static-eval module is intended to evaluate statically-analyzable expressions. In affected versions, untrusted user input is able to access the global function constructor, effectively allowing ar…	CWE-20 Improper Input Validation	CVE-2017-16226	2024-11-21 12:16	2018-06-7	Show	GitHub Exploit DB Packet Storm

251335	7.5	HIGH Network	aegir_project	aegir	aegir is a module to help automate JavaScript project management. Version 12.0.0 through and including 12.0.7 bundled and published to npm the user (that performed a aegir-release) GitHub token.	CWE-200 Information Exposure	CVE-2017-16225	2024-11-21 12:16	2018-06-7	Show	GitHub Exploit DB Packet Storm

251336	7.5	HIGH Network	nodeaaaaa_project	nodeaaaaa	nodeaaaaa is a static file server. nodeaaaaa is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url.	CWE-22 Path Traversal	CVE-2017-16223	2024-11-21 12:16	2018-06-7	Show	GitHub Exploit DB Packet Storm

251337	5.3	MEDIUM Network	elding_project	elding	elding is a simple web server. elding is vulnerable to a directory traversal issue, allowing an attacker to access the filesystem by placing "../" in the url. The files accessible, however, are limit…	CWE-22 Path Traversal	CVE-2017-16222	2024-11-21 12:16	2018-06-7	Show	GitHub Exploit DB Packet Storm

251338	7.5	HIGH Network	yzt_project	yzt	yzt is a simple file server. yzt is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url.	CWE-22 Path Traversal	CVE-2017-16221	2024-11-21 12:16	2018-06-7	Show	GitHub Exploit DB Packet Storm

251339	7.5	HIGH Network	wind-mvc_project	wind-mvc	wind-mvc is an mvc framework. wind-mvc is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url.	CWE-22 Path Traversal	CVE-2017-16220	2024-11-21 12:16	2018-06-7	Show	GitHub Exploit DB Packet Storm

251340	7.5	HIGH Network	yttivy_project	yttivy	yttivy is a static file server. yttivy is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url.	CWE-22 Path Traversal	CVE-2017-16219	2024-11-21 12:16	2018-06-7	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed