Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 5, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
252221	9.3	危険	サイバートラスト株式会社 Mozilla Foundation レッドハットオラクル	-	複数の Mozilla 製品における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2010-0176	2010-12-21 16:06	2010-03-30	Show	GitHub Exploit DB Packet Storm

252222	9.3	危険	サイバートラスト株式会社 Mozilla Foundation レッドハットオラクル	-	複数の Mozilla 製品の nsTreeSelection の実装における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2010-0175	2010-12-21 16:02	2010-03-30	Show	GitHub Exploit DB Packet Storm

252223	10	危険	サイバートラスト株式会社 Mozilla Foundation レッドハットオラクル	-	複数の Mozilla 製品のブラウザエンジンにおける任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2010-0174	2010-12-21 16:01	2010-03-30	Show	GitHub Exploit DB Packet Storm

252224	9.3	危険	Mozilla Foundation オラクル	-	複数の Mozilla 製品のブラウザエンジンにおける任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2010-0173	2010-12-21 16:00	2010-03-30	Show	GitHub Exploit DB Packet Storm

252225	4.3	警告	サイバートラスト株式会社 Mozilla Foundation レッドハットオラクル	-	Mozilla Thunderbird/SeaMonkey における任意のコードを実行される脆弱性	CWE-Other その他	CVE-2010-0163	2010-12-21 15:59	2010-03-16	Show	GitHub Exploit DB Packet Storm

252226	9.3	危険	アップルアドビシステムズレッドハットオラクル	-	Adobe Flash に脆弱性	CWE-noinfo 情報不足	CVE-2010-2884	2010-12-21 15:57	2010-09-15	Show	GitHub Exploit DB Packet Storm

252227	6.9	警告	CVS レッドハット	-	CVS の rcs.c 内にある apply_rcs_change 関数における権限昇格の脆弱性	CWE-119 バッファエラー	CVE-2010-3846	2010-12-21 15:30	2010-11-5	Show	GitHub Exploit DB Packet Storm

252228	10	危険	RealFlex Technologies	-	RealFlex RealWin HMI サービスにバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-4142	2010-12-21 15:25	2010-11-22	Show	GitHub Exploit DB Packet Storm

252229	4.3	警告	Webmin Project オラクル	-	Webmin および Usermin におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-4568	2010-12-21 15:14	2010-01-5	Show	GitHub Exploit DB Packet Storm

252230	6.8	警告	富士通	-	Interstage Application Server における許可されていない IP アドレスからのリクエストのアクセスを許可する脆弱性	CWE-noinfo 情報不足	-	2010-12-21 14:14	2010-11-19	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 5, 2026, 4:51 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
250421	7.2	HIGH Network	fortinet	fortios	A privilege escalation vulnerability in Fortinet FortiOS 6.0.0 to 6.0.6, 5.6.0 to 5.6.10, 5.4 and below allows admin users to elevate their profile to super_admin via restoring modified configuration…	CWE-269 Improper Privilege Management	CVE-2017-17544	2024-11-21 12:18	2019-04-10	Show	GitHub Exploit DB Packet Storm

250422	9.8	CRITICAL Network	apache	airflow	In Apache Airflow 1.8.2 and earlier, an experimental Airflow feature displayed authenticated cookies, as well as passwords to databases used by Airflow. An attacker who has limited access to airflow,…	CWE-255 Credentials Management	CVE-2017-17836	2024-11-21 12:18	2019-01-24	Show	GitHub Exploit DB Packet Storm

250423	8.8	HIGH Network	apache	airflow	In Apache Airflow 1.8.2 and earlier, a CSRF vulnerability allowed for a remote command injection on a default install of Airflow.	CWE-352 Origin Validation Error	CVE-2017-17835	2024-11-21 12:18	2019-01-24	Show	GitHub Exploit DB Packet Storm

250424	8.8	HIGH Network	zyxel	zywall_usg_100_firmware	ZyXEL ZyWALL USG 2.12 AQQ.2 and 3.30 AQQ.7 devices are affected by a CSRF vulnerability via a cgi-bin/zysh-cgi cmd action to add a user account. This account's access could, for example, subsequently…	CWE-352 Origin Validation Error	CVE-2017-17550	2024-11-21 12:18	2018-11-11	Show	GitHub Exploit DB Packet Storm

250425	8.1	HIGH Network	contronics	homeputer_cl_studio_fur_homematic	Homeputer CL Studio fur HomeMatic 4.0 Rel 160808 and earlier uses cleartext to exchange the username and password between server and client instances, which allows remote attackers to obtain sensitiv…	CWE-522 Insufficiently Protected Credentials	CVE-2017-17691	2024-11-21 12:18	2018-09-8	Show	GitHub Exploit DB Packet Storm

250426	7.5	HIGH Network	episerver	episerver	XML external entity (XXE) vulnerability in Episerver 7 patch 4 and earlier allows remote attackers to read arbitrary files via a crafted DTD in an XML request involving util/xmlrpc/Handler.ashx.	CWE-611 XXE	CVE-2017-17762	2024-11-21 12:18	2018-08-30	Show	GitHub Exploit DB Packet Storm

250427	4.3	MEDIUM Network	pleasantsolutions	pleasant_password_server	Because of insufficient authorization checks it is possible for any authenticated user to change profile data of other users in Pleasant Password Server before 7.8.3.	CWE-863 Incorrect Authorization	CVE-2017-17708	2024-11-21 12:18	2018-07-31	Show	GitHub Exploit DB Packet Storm

250428	8.1	HIGH Network	pleasantsolutions	pleasant_password_server	Due to missing authorization checks, any authenticated user is able to list, upload, or delete attachments to password safe entries in Pleasant Password Server before 7.8.3. To perform those actions …	CWE-862 Missing Authorization	CVE-2017-17707	2024-11-21 12:18	2018-07-31	Show	GitHub Exploit DB Packet Storm

250429	6.1	MEDIUM Network	fortinet	fortianalyzer_firmware fortimanager_firmware	A Cross-site Scripting (XSS) vulnerability in Fortinet FortiManager 6.0.0, 5.6.4 and below versions, FortiAnalyzer 6.0.0, 5.6.4 and below versions allows inject Javascript code and HTML tags through …	CWE-79 Cross-site Scripting	CVE-2017-17541	2024-11-21 12:18	2018-07-17	Show	GitHub Exploit DB Packet Storm

250430	5.9	MEDIUM Network	microsoft horde google 9folders flipdogsolutions r2mail2 apple bloop freron kde gnome mozilla ibm emclient postbox-inc ritlabs	outlook horde_imp gmail nine maildroid r2mail2 mail airmail mailmate kmail trojita evolution thunderbird notes emclient postbox the_bat	The S/MIME specification allows a Cipher Block Chaining (CBC) malleability-gadget attack that can indirectly lead to plaintext exfiltration, aka EFAIL.	NVD-CWE-noinfo	CVE-2017-17689	2024-11-21 12:18	2018-05-17	Show	GitHub Exploit DB Packet Storm