Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 5, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
252231	8.3	危険	日立	-	日立の Groupmax 関連製品におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	-	2010-12-21 14:06	2010-11-17	Show	GitHub Exploit DB Packet Storm

252232	4.3	警告	The PHP Group アップルサイバートラスト株式会社レッドハット	-	PHP の var_export 関数における、重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2010-2531	2010-12-20 16:08	2010-07-22	Show	GitHub Exploit DB Packet Storm

252233	4.6	警告	サイバートラスト株式会社 Linux レッドハット	-	Hypervisor の命令のエミュレーションにおけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2010-0435	2010-12-20 16:01	2010-08-19	Show	GitHub Exploit DB Packet Storm

252234	5	警告	レッドハット Pidgin オラクル	-	Pidgin の MSN プロトコルプラグインの msn_emoticon_msg 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2010-1624	2010-12-20 16:00	2010-05-12	Show	GitHub Exploit DB Packet Storm

252235	4.3	警告	IBM Apache Software Foundation アップルサイバートラスト株式会社富士通ヒューレット・パッカードターボリナックス日立	-	Apache HTTP Server の 413 エラーメッセージにおける HTTP メソッドを適切に検査しない問題	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2007-6203	2010-12-20 15:38	2007-12-3	Show	GitHub Exploit DB Packet Storm

252236	4.3	警告	シマンテック	-	PGP Desktop にデータインジェクションの脆弱性	CWE-310 暗号の問題	CVE-2010-3618	2010-12-20 14:44	2010-11-19	Show	GitHub Exploit DB Packet Storm

252237	6.8	警告	アップル	-	Apple iOS の Telephony 内にある GSM 方式の通信管理の実装におけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-3832	2010-12-20 14:39	2010-11-26	Show	GitHub Exploit DB Packet Storm

252238	4.3	警告	アップル	-	Apple iOS の Photos における MobileMe アカウントのパスワードを読まれる脆弱性	CWE-200 情報漏えい	CVE-2010-3831	2010-12-20 14:32	2010-11-26	Show	GitHub Exploit DB Packet Storm

252239	7.2	危険	アップル	-	Apple iOS の Networking における権限昇格の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-3830	2010-12-20 14:30	2010-11-26	Show	GitHub Exploit DB Packet Storm

252240	4.3	警告	アップル	-	Apple iOS の iAd Content Display における電話をかけられる脆弱性	CWE-Other その他	CVE-2010-3828	2010-12-20 14:17	2010-11-26	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 5, 2026, 4:51 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
252421	7.8	HIGH Local	radare	radare2	The wasm_dis function in libr/asm/arch/wasm/wasm.c in radare2 2.0.0 allows remote attackers to cause a denial of service (stack-based buffer over-read and application crash) or possibly have unspecif…	CWE-125 Out-of-bounds Read	CVE-2017-15368	2024-11-21 12:14	2017-10-16	Show	GitHub Exploit DB Packet Storm

252422	6.1	MEDIUM Network	osticket	osticket	osTicket 1.10.1 allows arbitrary client-side JavaScript code execution on victims who click a crafted support/scp/tickets.php?status= link, aka XSS. Session ID and data theft may follow as well as th…	CWE-79 Cross-site Scripting	CVE-2017-15362	2024-11-21 12:14	2017-10-16	Show	GitHub Exploit DB Packet Storm

252423	7.8	HIGH Local	cpuid	cpu-z	In CPUID CPU-Z before 1.43, there is an arbitrary memory write that results directly in elevation of privileges, because any program running on the local machine (while CPU-Z is running) can issue an…	CWE-787 Out-of-bounds Write	CVE-2017-15303	2024-11-21 12:14	2017-10-16	Show	GitHub Exploit DB Packet Storm

252424	5.5	MEDIUM Local	ccsv_project	ccsv	The foreach function in ext/ccsv.c in Ccsv 1.1.0 allows remote attackers to cause a denial of service (double free and application crash) or possibly have unspecified other impact via a crafted file.	CWE-415 Double Free	CVE-2017-15364	2024-11-21 12:14	2017-10-16	Show	GitHub Exploit DB Packet Storm

252425	7.5	HIGH Network	luracast	restler	Directory traversal vulnerability in public/examples/resources/getsource.php in Luracast Restler through 3.0.0, as used in the restler extension before 1.7.1 for TYPO3, allows remote attackers to rea…	CWE-22 Path Traversal	CVE-2017-15363	2024-11-21 12:14	2017-10-16	Show	GitHub Exploit DB Packet Storm

252426	5.4	MEDIUM Network	paessler	prtg_network_monitor	PRTG Network Monitor version 17.3.33.2830 is vulnerable to stored Cross-Site Scripting on all group names created, related to incorrect error handling for an HTML encoded script.	CWE-79 Cross-site Scripting	CVE-2017-15360	2024-11-21 12:14	2017-10-16	Show	GitHub Exploit DB Packet Storm

252427	5.3	MEDIUM Network	ewbf	cuda_zcash_miner	The miner statistics HTTP API in EWBF Cuda Zcash Miner Version 0.3.4b hangs on incoming TCP connections until some sort of request is made (such as "GET / HTTP/1.1"), which allows for a Denial of Ser…	NVD-CWE-noinfo	CVE-2017-15300	2024-11-21 12:14	2017-10-15	Show	GitHub Exploit DB Packet Storm

252428	6.1	MEDIUM Network	nexusphp_project	nexusphp	XSS exists in NexusPHP 1.5 via the keyword parameter to messages.php.	CWE-79 Cross-site Scripting	CVE-2017-15305	2024-11-21 12:14	2017-10-15	Show	GitHub Exploit DB Packet Storm

252429	9.8	CRITICAL Network	airtame	hdmi_dongle_firmware	/bin/login.php in the Web Panel on the Airtame HDMI dongle with firmware before 3.0 allows an attacker to set his own session id via a "Cookie: PHPSESSID=" header. This can be used to achieve persist…	CWE-384 Session Fixation	CVE-2017-15304	2024-11-21 12:14	2017-10-15	Show	GitHub Exploit DB Packet Storm

252430	5.5	MEDIUM Local	linux	linux_kernel	The KEYS subsystem in the Linux kernel through 4.13.7 mishandles use of add_key for a key that already exists but is uninstantiated, which allows local users to cause a denial of service (NULL pointe…	CWE-476 NULL Pointer Dereference	CVE-2017-15299	2024-11-21 12:14	2017-10-15	Show	GitHub Exploit DB Packet Storm