Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 17, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
252311	4.3	警告	Zabbix	-	Zabbix の acknow.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-2904	2011-09-14 10:48	2011-08-19	Show	GitHub Exploit DB Packet Storm

252312	5.4	警告	Squid-cache.org インターネットイニシアティブ	-	透過型プロキシサーバが HTTP の Host ヘッダに依存して接続を行う問題	CWE-264 認可・権限・アクセス制御	CVE-2009-0801	2011-09-14 10:47	2009-02-24	Show	GitHub Exploit DB Packet Storm

252313	6.8	警告	レッドハット Pango.org オラクル	-	HarfBuzz の hb-buffer.c 内にある hb_buffer_ensure 関数における任意のコードを実行される脆弱性	CWE-Other その他	CVE-2011-0064	2011-09-14 10:45	2011-03-1	Show	GitHub Exploit DB Packet Storm

252314	6.5	警告	ヒューレット・パッカードシマンテック日立	-	Symantec Backup Exec における NDMP コマンドを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2011-0546	2011-09-14 10:44	2011-05-26	Show	GitHub Exploit DB Packet Storm

252315	5	警告	The PHP Group	-	PHP で使用される crypt_blowfish におけるクリアテキストのパスワードを容易に推測される脆弱性	CWE-310 暗号の問題	CVE-2011-2483	2011-09-13 10:43	2011-08-25	Show	GitHub Exploit DB Packet Storm

252316	6.4	警告	The PHP Group	-	PHP の main/rfc1867.c 内にある rfc1867_post_handler 関数における任意のファイルを作成される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-2202	2011-09-13 10:42	2011-06-16	Show	GitHub Exploit DB Packet Storm

252317	7.5	危険	The PHP Group	-	PHP の socket_connect 関数におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2011-1938	2011-09-13 10:41	2011-05-31	Show	GitHub Exploit DB Packet Storm

252318	7.5	危険	The PHP Group	-	PHP の substr_replace 関数におけるサービス運用妨害 (メモリ破損) の脆弱性	CWE-399 リソース管理の問題	CVE-2011-1148	2011-09-13 10:39	2011-03-18	Show	GitHub Exploit DB Packet Storm

252319	6.8	警告	GNU Project オラクル	-	GNU Wget における任意のファイルを作成される脆弱性	CWE-20 不適切な入力確認	CVE-2010-2252	2011-09-12 09:56	2010-07-6	Show	GitHub Exploit DB Packet Storm

252320	9.3	危険	リアルネットワークス	-	RealNetworks RealPlayer および RealPlayer Enterprise における任意のコードを実行されるの脆弱性	CWE-399 リソース管理の問題	CVE-2011-2955	2011-09-12 09:53	2011-08-16	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 18, 2026, 4:12 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
258581	8.8	HIGH Network	adobe	acrobat acrobat_dc acrobat_reader acrobat_reader_dc reader	Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable heap overflow vulnerability in the JPEG parser. Suc…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2017-11211	2024-11-21 12:07	2017-08-12	Show	GitHub Exploit DB Packet Storm

258582	6.5	MEDIUM Network	adobe	acrobat acrobat_dc acrobat_reader acrobat_reader_dc reader	Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability in the font parsing…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2017-11210	2024-11-21 12:07	2017-08-12	Show	GitHub Exploit DB Packet Storm

258583	6.5	MEDIUM Network	adobe	acrobat acrobat_dc acrobat_reader acrobat_reader_dc reader	Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability that occurs when re…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2017-11209	2024-11-21 12:07	2017-08-12	Show	GitHub Exploit DB Packet Storm

258584	6.5	MEDIUM Network	synology	chat	Server-side request forgery (SSRF) vulnerability in link preview in Synology Chat before 1.1.0-0806 allows remote authenticated users to access intranet resources via unspecified vectors.	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2017-11148	2024-11-21 12:07	2017-08-12	Show	GitHub Exploit DB Packet Storm

258585	6.5	MEDIUM Network	fedoraproject mit	fedora kerberos kerberos_5	In MIT Kerberos 5 (aka krb5) 1.7 and later, an authenticated attacker can cause a KDC assertion failure by sending invalid S4U2Self or S4U2Proxy requests.	CWE-617 Reachable Assertion	CVE-2017-11368	2024-11-21 12:07	2017-08-10	Show	GitHub Exploit DB Packet Storm

258586	7.4	HIGH Network	tenable	nessus	When linking a Nessus scanner or agent to Tenable.io or other manager, Nessus 6.x before 6.11 does not verify the manager's TLS certificate when making the initial outgoing connection. This could all…	CWE-295 Improper Certificate Validation	CVE-2017-11506	2024-11-21 12:07	2017-08-9	Show	GitHub Exploit DB Packet Storm

258587	7.5	HIGH Network	synology	photo_station	An information exposure vulnerability in index.php in Synology Photo Station before 6.7.3-3432 and 6.3-2967 allows remote attackers to obtain sensitive system information via unspecified vectors.	CWE-200 Information Exposure	CVE-2017-11155	2024-11-21 12:07	2017-08-9	Show	GitHub Exploit DB Packet Storm

258588	7.2	HIGH Network	synology	photo_station	Unrestricted file upload vulnerability in PixlrEditorHandler.php in Synology Photo Station before 6.7.3-3432 and 6.3-2967 allows remote attackers to create arbitrary PHP scripts via the type paramete…	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2017-11154	2024-11-21 12:07	2017-08-9	Show	GitHub Exploit DB Packet Storm

258589	9.8	CRITICAL Network	synology	photo_station	Deserialization vulnerability in synophoto_csPhotoMisc.php in Synology Photo Station before 6.7.3-3432 and 6.3-2967 allows remote attackers to gain administrator privileges via a crafted serialized p…	CWE-502 Deserialization of Untrusted Data	CVE-2017-11153	2024-11-21 12:07	2017-08-9	Show	GitHub Exploit DB Packet Storm

258590	7.5	HIGH Network	synology	photo_station	Directory traversal vulnerability in PixlrEditorHandler.php in Synology Photo Station before 6.7.3-3432 and 6.3-2967 allows remote attackers to write arbitrary files via the path parameter.	CWE-22 Path Traversal	CVE-2017-11152	2024-11-21 12:07	2017-08-9	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed