Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 11, 2026, 10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
252401	4.3	警告	アドビシステムズ	-	Adobe ColdFusion における任意の HTTP ヘッダを挿入される脆弱性	CWE-20 不適切な入力確認	CVE-2011-0581	2011-03-17 15:41	2011-02-8	Show	GitHub Exploit DB Packet Storm

252402	4.3	警告	アドビシステムズ	-	Adobe ColdFusion の administrator コンソールにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-0580	2011-03-17 15:39	2011-02-8	Show	GitHub Exploit DB Packet Storm

252403	9.3	危険	アドビシステムズ	-	Adobe Shockwave Player の Font Xtra.x32 モジュールにおける任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2011-0569	2011-03-17 15:37	2011-02-8	Show	GitHub Exploit DB Packet Storm

252404	9.3	危険	アドビシステムズ	-	Adobe Shockwave Player における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2011-0557	2011-03-17 08:38	2011-02-8	Show	GitHub Exploit DB Packet Storm

252405	9.3	危険	アドビシステムズ	-	Adobe Shockwave Player の Font Xtra.x32 モジュールにおける任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2011-0556	2011-03-17 08:37	2011-02-8	Show	GitHub Exploit DB Packet Storm

252406	9.3	危険	アドビシステムズ	-	Adobe Shockwave Player の TextXtra.x32 モジュールにおける任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2011-0555	2011-03-17 08:37	2011-02-8	Show	GitHub Exploit DB Packet Storm

252407	9.3	危険	アドビシステムズ	-	Adobe Shockwave Player におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-4307	2011-03-17 08:36	2011-02-8	Show	GitHub Exploit DB Packet Storm

252408	9.3	危険	アドビシステムズ	-	Adobe Shockwave Player における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-4306	2011-03-17 08:36	2011-02-8	Show	GitHub Exploit DB Packet Storm

252409	9.3	危険	アドビシステムズ	-	Adobe Shockwave Player の Shockwave 3d Asset モジュールにおける任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2010-4196	2011-03-17 08:36	2011-02-8	Show	GitHub Exploit DB Packet Storm

252410	7.5	危険	アップル VMware サン・マイクロシステムズヒューレット・パッカードレッドハット	-	複数の Oracle 製品の Java 2D コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0849	2011-03-17 08:18	2010-03-30	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 11, 2026, 4:09 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
247861	9.0	CRITICAL Network	intel	nuc7i3bnk_bios nuc7i5bnk_bios nuc7i7bnh_bios stk2mv64cc_bios stk2m3w64cc_bios nuc6i7kyk_bios nuc6i3syk_bios nuc6i5syk_bios r1304sposhor_bios r1304sposhorr_bios r1208spos…	Incorrect check in Intel processors from 6th and 7th Generation Intel Core Processor Families, Intel Xeon E3-1500M v5 and v6 Product Families, and Intel Xeon E3-1200 v5 and v6 Product Families allows…	NVD-CWE-noinfo	CVE-2017-5691	2024-11-21 12:28	2017-07-27	Show	GitHub Exploit DB Packet Storm

247862	7.0	HIGH Local	waves	maxxaudio	Waves MaxxAudio, as installed on Dell laptops, adds a "WavesSysSvc" Windows service with File Version 1.1.6.0. This service has a vulnerability known as Unquoted Service Path. This could potentially …	NVD-CWE-noinfo	CVE-2017-6005	2024-11-21 12:28	2017-07-26	Show	GitHub Exploit DB Packet Storm

247863	7.5	HIGH Network	apache	impala	During a routine security analysis, it was found that one of the ports in Apache Impala (incubating) 2.7.0 to 2.8.0 sent data in plaintext even when the cluster was configured to use TLS. The port in…	CWE-319 Cleartext Transmission of Sensitive Information	CVE-2017-5652	2024-11-21 12:28	2017-07-11	Show	GitHub Exploit DB Packet Storm

247864	9.8	CRITICAL Network	apache	impala	It was noticed that a malicious process impersonating an Impala daemon in Apache Impala (incubating) 2.7.0 to 2.8.0 could cause Impala daemons to skip authentication checks when Kerberos is enabled (…	CWE-287 Improper Authentication	CVE-2017-5640	2024-11-21 12:28	2017-07-11	Show	GitHub Exploit DB Packet Storm

247865	8.8	HIGH Network	bestpractical	request_tracker	The dashboard subscription interface in Request Tracker (RT) 4.x before 4.0.25, 4.2.x before 4.2.14, and 4.4.x before 4.4.2 might allow remote authenticated users with certain privileges to execute a…	CWE-20 Improper Input Validation	CVE-2017-5944	2024-11-21 12:28	2017-07-4	Show	GitHub Exploit DB Packet Storm

247866	8.8	HIGH Network	bestpractical	request_tracker	Request Tracker (RT) 4.x before 4.0.25, 4.2.x before 4.2.14, and 4.4.x before 4.4.2 allows remote attackers to obtain sensitive information about cross-site request forgery (CSRF) verification tokens…	CWE-352 Origin Validation Error	CVE-2017-5943	2024-11-21 12:28	2017-07-4	Show	GitHub Exploit DB Packet Storm

247867	7.5	HIGH Network	sierra_wireless	airlink_raven_xe_firmware airlink_raven_xt_firmware	An Insufficiently Protected Credentials issue was discovered in Sierra Wireless AirLink Raven XE, all versions prior to 4.0.14, and AirLink Raven XT, all versions prior to 4.0.11. Sensitive informati…	CWE-200 Information Exposure	CVE-2017-6046	2024-11-21 12:28	2017-06-30	Show	GitHub Exploit DB Packet Storm

247868	9.8	CRITICAL Network	sierra_wireless	airlink_raven_xe_firmware airlink_raven_xt_firmware	An Improper Authorization issue was discovered in Sierra Wireless AirLink Raven XE, all versions prior to 4.0.14, and AirLink Raven XT, all versions prior to 4.0.11. Several files and directories can…	CWE-306 Missing Authentication for Critical Function	CVE-2017-6044	2024-11-21 12:28	2017-06-30	Show	GitHub Exploit DB Packet Storm

247869	8.8	HIGH Network	sierra_wireless	airlink_raven_xe_firmware airlink_raven_xt_firmware	A Cross-Site Request Forgery issue was discovered in Sierra Wireless AirLink Raven XE, all versions prior to 4.0.14, and AirLink Raven XT, all versions prior to 4.0.11. Affected devices do not verify…	CWE-352 Origin Validation Error	CVE-2017-6042	2024-11-21 12:28	2017-06-30	Show	GitHub Exploit DB Packet Storm

247870	5.3	MEDIUM Network	belden_hirschmann	gecko_lite_managed_switch_firmware	An Information Exposure issue was discovered in Belden Hirschmann GECKO Lite Managed switch, Version 2.0.00 and prior versions. Non-sensitive information can be obtained anonymously.	CWE-200 Information Exposure	CVE-2017-6040	2024-11-21 12:28	2017-06-30	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed