Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 13, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
252471 4.3 警告 ModSecurity - ModSecurity の PDF XSS 保護機能におけるサービス運用妨害 (DoS) の脆弱性 CWE-16
環境設定 		CVE-2009-1903 2011-06-7 10:13 2009-03-12 Show GitHub Exploit DB Packet Storm
252472 7.8 危険 ModSecurity - ModSecurity の multipart processor におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他 		CVE-2009-1902 2011-06-7 10:11 2009-03-12 Show GitHub Exploit DB Packet Storm
252473 5 警告 ModSecurity - ModSecurity モジュールにおけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2008-5676 2011-06-7 10:08 2010-08-1 Show GitHub Exploit DB Packet Storm
252474 7.5 危険 Ecava - Ecava IntegraXor HMI における認証を回避される脆弱性 CWE-89
SQLインジェクション 		CVE-2011-1562 2011-06-6 14:47 2011-04-5 Show GitHub Exploit DB Packet Storm
252475 6.8 警告 IntelliCom Innovation AB - 複数の IntelliCom 製品の cgi-bin/read.cgi における絶対パストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2010-4731 2011-06-6 14:46 2011-02-15 Show GitHub Exploit DB Packet Storm
252476 9 危険 IntelliCom Innovation AB - 複数の IntelliCom 製品の cgi-bin/read.cgi における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2010-4732 2011-06-6 14:44 2011-02-15 Show GitHub Exploit DB Packet Storm
252477 6.8 警告 IntelliCom Innovation AB - 複数の IntelliCom 製品の cgi-bin/read.cgi におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2010-4730 2011-06-6 14:34 2011-02-15 Show GitHub Exploit DB Packet Storm
252478 7.8 危険 Imperva Inc. - Imperva SecureSphere の Web Application Firewall および Database Firewall における intrusion-prevention 機能を回避される脆弱性 CWE-noinfo
情報不足 		CVE-2010-1329 2011-06-6 14:29 2010-04-5 Show GitHub Exploit DB Packet Storm
252479 4.3 警告 Imperva Inc. - Imperva SecureSphere MX Management Server の management GUI におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-1463 2011-06-6 14:27 2008-03-18 Show GitHub Exploit DB Packet Storm
252480 6.5 警告 バラクーダネットワークス - Barracuda Spam Firewall の Account View ページ内にある index.cgi における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-1094 2011-06-6 14:23 2008-12-15 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 13, 2026, 5:05 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
247711 7.5 HIGH
Network 		gnu binutils The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, has an aout_link_add_symbols function in bfd/aoutx.h that is vulnerable to a heap-based buffer over-read (o… CWE-125
Out-of-bounds Read 		CVE-2017-7300 2024-11-21 12:31 2017-03-30 Show GitHub Exploit DB Packet Storm
247712 5.5 MEDIUM
Local 		gnu binutils The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, has an invalid read (of size 8) because the code to emit relocs (bfd_elf_final_link function in bfd/elflink… CWE-125
Out-of-bounds Read 		CVE-2017-7299 2024-11-21 12:31 2017-03-30 Show GitHub Exploit DB Packet Storm
247713 7.5 HIGH
Network 		mikrotik routeros A vulnerability in the network stack of MikroTik Version 6.38.5 released 2017-03-09 could allow an unauthenticated remote attacker to exhaust all available CPU via a flood of TCP RST packets, prevent… CWE-400
 Uncontrolled Resource Consumption 		CVE-2017-7285 2024-11-21 12:31 2017-03-29 Show GitHub Exploit DB Packet Storm
247714 5.4 MEDIUM
Network 		moodle moodle In Moodle 3.2.2+, there is XSS in the Course summary filter of the "Add a new course" page, as demonstrated by a crafted attribute of an SVG element. CWE-79
Cross-site Scripting 		CVE-2017-7298 2024-11-21 12:31 2017-03-29 Show GitHub Exploit DB Packet Storm
247715 7.8 HIGH
Local 		linux linux_kernel The vmw_surface_define_ioctl function in drivers/gpu/drm/vmwgfx/vmwgfx_surface.c in the Linux kernel through 4.10.6 does not validate addition of certain levels data, which allows local users to trig… CWE-787
CWE-190
 Out-of-bounds Write
 Integer Overflow or Wraparound 		CVE-2017-7294 2024-11-21 12:31 2017-03-29 Show GitHub Exploit DB Packet Storm
247716 8.8 HIGH
Network 		suse rancher Rancher Labs rancher server 1.2.0+ is vulnerable to authenticated users disabling access control via an API call. This is fixed in versions rancher/server:v1.2.4, rancher/server:v1.3.5, rancher/serve… NVD-CWE-noinfo
CVE-2017-7297 2024-11-21 12:31 2017-03-29 Show GitHub Exploit DB Packet Storm
247717 7.1 HIGH
Local 		linux linux_kernel The TCP stack in the Linux kernel through 4.10.6 mishandles the SCM_TIMESTAMPING_OPT_STATS feature, which allows local users to obtain sensitive information from the kernel's internal socket data str… CWE-125
Out-of-bounds Read 		CVE-2017-7277 2024-11-21 12:31 2017-03-28 Show GitHub Exploit DB Packet Storm
247718 5.5 MEDIUM
Local 		imagemagick imagemagick The ReadPCXImage function in coders/pcx.c in ImageMagick 7.0.4.9 allows remote attackers to cause a denial of service (attempted large memory allocation and application crash) via a crafted file. NOT… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2017-7275 2024-11-21 12:31 2017-03-28 Show GitHub Exploit DB Packet Storm
247719 5.5 MEDIUM
Local 		radare radare2 The r_pkcs7_parse_cms function in libr/util/r_pkcs7.c in radare2 1.3.0 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted PE file. CWE-476
 NULL Pointer Dereference 		CVE-2017-7274 2024-11-21 12:31 2017-03-28 Show GitHub Exploit DB Packet Storm
247720 6.6 MEDIUM
Physics 		linux linux_kernel The cp_report_fixup function in drivers/hid/hid-cypress.c in the Linux kernel 3.2 and 4.x before 4.9.4 allows physically proximate attackers to cause a denial of service (integer underflow) or possib… NVD-CWE-Other
CVE-2017-7273 2024-11-21 12:31 2017-03-28 Show GitHub Exploit DB Packet Storm