Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 11, 2026, 2:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
252301	4.3	警告	GNU Project ターボリナックスサイバートラスト株式会社レッドハット	-	GNU Mailman の Cgi/confirm.py におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-0707	2011-06-3 08:58	2011-02-22	Show	GitHub Exploit DB Packet Storm

252302	3.5	注意	アップル GNU Project ターボリナックスサイバートラスト株式会社レッドハット	-	GNU Mailman におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-3089	2011-06-3 08:56	2011-03-1	Show	GitHub Exploit DB Packet Storm

252303	4.3	警告	アップル GNU Project ターボリナックスサイバートラスト株式会社レッドハット	-	Mailman における複数のクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-0564	2011-06-3 08:55	2008-02-5	Show	GitHub Exploit DB Packet Storm

252304	10	危険	7-Technologies	-	7-Technologies Interactive Graphical SCADA System の IGSSdataServer.exe におけるスタックベースのオーバーフロー脆弱性	CWE-119 バッファエラー	CVE-2011-1567	2011-06-2 09:51	2011-04-5	Show	GitHub Exploit DB Packet Storm

252305	10	危険	7-Technologies	-	7-Technologies Interactive Graphical SCADA System の dc.exe におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2011-1566	2011-06-2 09:50	2011-04-5	Show	GitHub Exploit DB Packet Storm

252306	10	危険	7-Technologies	-	7-Technologies Interactive Graphical SCADA System の IGSSdataServer.exe におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2011-1565	2011-06-2 09:48	2011-04-5	Show	GitHub Exploit DB Packet Storm

252307	10	危険	RealFlex Technologies	-	DATAC RealFlex RealWin の HMI アプリケーションにおける整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2011-1564	2011-06-2 09:47	2011-04-5	Show	GitHub Exploit DB Packet Storm

252308	10	危険	RealFlex Technologies	-	DATAC RealFlex RealWin の HMI アプリケーションにおけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2011-1563	2011-06-2 09:46	2011-04-5	Show	GitHub Exploit DB Packet Storm

252309	4.7	警告	レッドハット Richard W.M. Jones	-	virt-v2v および virt-inspector などの製品に使用される libguestfs におけるホスト OS 上のファイルを読まれる脆弱性	CWE-200 情報漏えい	CVE-2010-3851	2011-06-1 10:25	2010-11-4	Show	GitHub Exploit DB Packet Storm

252310	4.4	警告	Todd C. Miller レッドハット	-	sudo の check.c における認証要求を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-0010	2011-05-31 11:41	2011-01-18	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 11, 2026, 4:09 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
257911	5.4	MEDIUM Network	pluxml	pluxml	PluXml version 5.6 is vulnerable to stored cross-site scripting vulnerability, within the article creation page, which can result in escalation of privileges.	CWE-79 Cross-site Scripting	CVE-2017-1001001	2024-11-21 12:04	2017-11-2	Show	GitHub Exploit DB Packet Storm

257912	9.8	CRITICAL Network	jenkins	ssh	The SSH Plugin stores credentials which allow jobs to access remote servers via the SSH protocol. User passwords and passphrases for encrypted SSH keys are stored in plaintext in a configuration file.	CWE-522 Insufficiently Protected Credentials	CVE-2017-1000245	2024-11-21 12:04	2017-11-1	Show	GitHub Exploit DB Packet Storm

257913	8.8	HIGH Network	jenkins	favorite	Jenkins Favorite Plugin version 2.2.0 and older is vulnerable to CSRF resulting in data modification	CWE-352 Origin Validation Error	CVE-2017-1000244	2024-11-21 12:04	2017-11-1	Show	GitHub Exploit DB Packet Storm

257914	4.3	MEDIUM Network	jenkins	favorite_plugin	Jenkins Favorite Plugin 2.1.4 and older does not perform permission checks when changing favorite status, allowing any user to set any other user's favorites	CWE-862 Missing Authorization	CVE-2017-1000243	2024-11-21 12:04	2017-11-1	Show	GitHub Exploit DB Packet Storm

257915	3.3	LOW Local	jenkins	git_client	Jenkins Git Client Plugin 2.4.2 and earlier creates temporary file with insecure permissions resulting in information disclosure	CWE-200 Information Exposure	CVE-2017-1000242	2024-11-21 12:04	2017-11-1	Show	GitHub Exploit DB Packet Storm

257916	9.1	CRITICAL Network	haxx debian	libcurl debian_linux	An IMAP FETCH response line indicates the size of the returned data, in number of bytes. When that response says the data is zero bytes, libcurl would pass on that (non-existing) data with a pointer …	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2017-1000257	2024-11-21 12:04	2017-11-1	Show	GitHub Exploit DB Packet Storm

257917	5.5	MEDIUM Local	gnu	emacs	GNU Emacs version 25.3.1 (and other versions most likely) ignores umask when creating a backup save file ("[ORIGINAL_FILENAME]~") resulting in files that may be world readable or otherwise accessible…	CWE-200 Information Exposure	CVE-2017-1000383	2024-11-21 12:04	2017-11-1	Show	GitHub Exploit DB Packet Storm

257918	5.5	MEDIUM Local	vim	vim	VIM version 8.0.1187 (and other versions most likely) ignores umask when creating a swap file ("[ORIGINAL_FILENAME].swp") resulting in files that may be world readable or otherwise accessible in ways…	CWE-200 Information Exposure	CVE-2017-1000382	2024-11-21 12:04	2017-11-1	Show	GitHub Exploit DB Packet Storm

257919	8.1	HIGH Network	redhat debian	libvirt debian_linux	libvirt version 2.3.0 and later is vulnerable to a bad default configuration of "verify-peer=no" passed to QEMU by libvirt resulting in a failure to validate SSL/TLS certificates by default.	CWE-295 Improper Certificate Validation	CVE-2017-1000256	2024-11-21 12:04	2017-11-1	Show	GitHub Exploit DB Packet Storm

257920	5.5	MEDIUM Local	linux	linux_kernel	On Linux running on PowerPC hardware (Power8 or later) a user process can craft a signal frame and then do a sigreturn so that the kernel will take an exception (interrupt), and use the r1 value *fro…	CWE-787 Out-of-bounds Write	CVE-2017-1000255	2024-11-21 12:04	2017-10-31	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed