Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 13, 2026, 4:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
252491	10	危険	Google	-	Google Chrome の GPU プロセスにおける任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2011-1301	2011-06-3 10:21	2011-04-14	Show	GitHub Exploit DB Packet Storm

252492	10	危険	Google Mozilla Foundation	-	Windows 上で稼働する Mozilla Firefox、および Google Chrome における任意のコードを実行される脆弱性	CWE-189 数値処理の問題	CVE-2011-1300	2011-06-3 09:55	2011-04-7	Show	GitHub Exploit DB Packet Storm

252493	5	警告	Google	-	WebKit の counterToCSSValue 関数におけるサービス運用妨害(DoS) の脆弱性	CWE-Other その他	CVE-2011-1691	2011-06-3 09:53	2011-03-28	Show	GitHub Exploit DB Packet Storm

252494	4.3	警告	サイバートラスト株式会社 Rdesktop レッドハット	-	rdesktop の disk_create 関数におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2011-1595	2011-06-3 09:50	2010-05-8	Show	GitHub Exploit DB Packet Storm

252495	4.3	警告	GNU Project ターボリナックスサイバートラスト株式会社レッドハット	-	GNU Mailman の Cgi/confirm.py におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-0707	2011-06-3 08:58	2011-02-22	Show	GitHub Exploit DB Packet Storm

252496	3.5	注意	アップル GNU Project ターボリナックスサイバートラスト株式会社レッドハット	-	GNU Mailman におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-3089	2011-06-3 08:56	2011-03-1	Show	GitHub Exploit DB Packet Storm

252497	4.3	警告	アップル GNU Project ターボリナックスサイバートラスト株式会社レッドハット	-	Mailman における複数のクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-0564	2011-06-3 08:55	2008-02-5	Show	GitHub Exploit DB Packet Storm

252498	10	危険	7-Technologies	-	7-Technologies Interactive Graphical SCADA System の IGSSdataServer.exe におけるスタックベースのオーバーフロー脆弱性	CWE-119 バッファエラー	CVE-2011-1567	2011-06-2 09:51	2011-04-5	Show	GitHub Exploit DB Packet Storm

252499	10	危険	7-Technologies	-	7-Technologies Interactive Graphical SCADA System の dc.exe におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2011-1566	2011-06-2 09:50	2011-04-5	Show	GitHub Exploit DB Packet Storm

252500	10	危険	7-Technologies	-	7-Technologies Interactive Graphical SCADA System の IGSSdataServer.exe におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2011-1565	2011-06-2 09:48	2011-04-5	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 13, 2026, 5:05 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
253391	7.8	HIGH Local	tgsoft	vir.it_explorer	TG Soft Vir.IT eXplorer Lite 8.5.42 allows local users to cause a denial of service (NULL pointer dereference) or possibly have unspecified other impact via a NULL value in a 0x82730010 DeviceIoContr…	CWE-476 NULL Pointer Dereference	CVE-2017-17049	2024-11-21 12:17	2017-11-29	Show	GitHub Exploit DB Packet Storm

253392	6.5	MEDIUM Local	xen	xen	An issue was discovered in Xen through 4.9.x on the ARM platform allowing guest OS users to obtain sensitive information from DRAM after a reboot, because disjoint blocks, and physical addresses that…	CWE-200 Information Exposure	CVE-2017-17046	2024-11-21 12:17	2017-11-29	Show	GitHub Exploit DB Packet Storm

253393	8.8	HIGH Local	xen	xen	An issue was discovered in Xen through 4.9.x allowing HVM guest OS users to gain privileges on the host OS, obtain sensitive information, or cause a denial of service (BUG and host OS crash) by lever…	CWE-416 Use After Free	CVE-2017-17045	2024-11-21 12:17	2017-11-29	Show	GitHub Exploit DB Packet Storm

253394	6.5	MEDIUM Local	xen	xen	An issue was discovered in Xen through 4.9.x allowing HVM guest OS users to cause a denial of service (infinite loop and host OS hang) by leveraging the mishandling of Populate on Demand (PoD) errors.	CWE-754 CWE-755 CWE-835 Improper Check for Unusual or Exceptional Conditions Improper Handling of Exceptional Conditions Loop with Unreachable Exit Condition ('Infinite Loop')	CVE-2017-17044	2024-11-21 12:17	2017-11-29	Show	GitHub Exploit DB Packet Storm

253395	6.1	MEDIUM Network	zitec	emag_marketplace_connector	The Emag Marketplace Connector plugin 1.0.0 for WordPress has reflected XSS because the parameter "post" to /wp-content/plugins/emag-marketplace-connector/templates/order/awb-meta-box.php is not filt…	CWE-79 Cross-site Scripting	CVE-2017-17043	2024-11-21 12:17	2017-11-29	Show	GitHub Exploit DB Packet Storm

253396	7.5	HIGH Network	yardoc	yard	lib/yard/core_ext/file.rb in the server in YARD before 0.9.11 does not block relative paths with an initial ../ sequence, which allows attackers to conduct directory traversal attacks and read arbitr…	CWE-22 Path Traversal	CVE-2017-17042	2024-11-21 12:17	2017-11-29	Show	GitHub Exploit DB Packet Storm

253397	5.5	MEDIUM Local	kmplayer	kmplayer	KMPlayer 4.2.2.4 allows remote attackers to cause a denial of service via a crafted NSV file.	CWE-20 Improper Input Validation	CVE-2017-16952	2024-11-21 12:17	2017-11-29	Show	GitHub Exploit DB Packet Storm

253398	5.5	MEDIUM Local	audiovalley	winamp_pro	Winamp Pro 5.66 Build 3512 allows remote attackers to cause a denial of service via a crafted WAV, WMV, AU, ASF, AIFF, or AIF file.	CWE-20 Improper Input Validation	CVE-2017-16951	2024-11-21 12:17	2017-11-29	Show	GitHub Exploit DB Packet Storm

253399	5.5	MEDIUM Local	linux	linux_kernel	The walk_hugetlb_range function in mm/pagewalk.c in the Linux kernel before 4.14.2 mishandles holes in hugetlb ranges, which allows local users to obtain sensitive information from uninitialized kern…	CWE-200 Information Exposure	CVE-2017-16994	2024-11-21 12:17	2017-11-28	Show	GitHub Exploit DB Packet Storm

253400	6.1	MEDIUM Network	communigate	communigate_pro	The WebMail components (Crystal, pronto, and pronto4) in CommuniGate Pro before 6.2.1 have stored XSS vulnerabilities via (1) the location or details field of a Google Calendar invitation, (2) a craf…	CWE-79 Cross-site Scripting	CVE-2017-16962	2024-11-21 12:17	2017-11-27	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed