Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 9, 2026, 2 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
252791	-	-	（複数のベンダ）	-	侵入検知システム (IDS) および侵入防止システム (IPS) の機能を回避可能な問題	-	-	2011-01-21 16:30	2010-12-16	Show	GitHub Exploit DB Packet Storm

252792	6.9	警告	Ecava	-	Ecava IntegraXor における権限昇格の脆弱性	CWE-Other その他	CVE-2010-4599	2011-01-21 15:52	2010-12-17	Show	GitHub Exploit DB Packet Storm

252793	5	警告	Ecava	-	Ecava IntegraXor におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2010-4598	2011-01-21 15:38	2011-01-12	Show	GitHub Exploit DB Packet Storm

252794	6.8	警告	Lunascape	-	Lunascape における DLL 読み込みに関する脆弱性	CWE-Other その他	CVE-2010-3927	2011-01-21 11:02	2011-01-21	Show	GitHub Exploit DB Packet Storm

252795	7.8	危険	シスコシステムズ	-	Cisco Linksys WRT54GC におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2011-0352	2011-01-21 11:02	2011-01-21	Show	GitHub Exploit DB Packet Storm

252796	9.3	危険	マイクロソフト	-	Microsoft WMI Administrative Tools の WBEMSingleView.ocx ActiveX コントロールにおける任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-4588	2011-01-20 13:58	2010-12-23	Show	GitHub Exploit DB Packet Storm

252797	5.8	警告	Mozilla Foundation オラクル	-	複数の Mozilla 製品の Math.random 関数におけるユーザを追跡される脆弱性	CWE-310 暗号の問題	CVE-2010-3171	2011-01-20 13:51	2010-06-22	Show	GitHub Exploit DB Packet Storm

252798	4.3	警告	Git project レッドハット	-	Git の Gitweb におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-3906	2011-01-20 13:47	2010-12-14	Show	GitHub Exploit DB Packet Storm

252799	9.3	危険	Google レッドハット	-	Google Chrome の WebM libvpx におけるサービス運用妨害 (DoS) の脆弱性	CWE-119 バッファエラー	CVE-2010-4203	2011-01-20 13:41	2010-11-4	Show	GitHub Exploit DB Packet Storm

252800	10	危険	Ecava	-	Ecava IntegraXor にバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-4597	2011-01-20 13:33	2010-12-20	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 9, 2026, 5:07 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
254991	9.8	CRITICAL Network	hp	bsm_platform_application_performance_management_system_health	An authentication vulnerability in HPE BSM Platform Application Performance Management System Health product versions 9.26, 9.30 and 9.40, allows remote users to bypass authentication.	CWE-287 Improper Authentication	CVE-2017-13983	2024-11-21 12:11	2017-09-30	Show	GitHub Exploit DB Packet Storm

254992	8.8	HIGH Network	hp	bsm_platform_application_performance_management_system_health	A directory traversal vulnerability in HPE BSM Platform Application Performance Management System Health product versions 9.26, 9.30 and 9.40, allows users to upload unrestricted files.	CWE-22 CWE-434 Path Traversal Unrestricted Upload of File with Dangerous Type	CVE-2017-13982	2024-11-21 12:11	2017-09-30	Show	GitHub Exploit DB Packet Storm

254993	7.8	HIGH Local	unisys	mcp-firmware	Unisys Libra 64xx and 84xx and FS601 class systems with MCP-FIRMWARE before 43.211 allow remote authenticated users to cause a denial of service (program crash) or have unspecified other impact via v…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2017-13684	2024-11-21 12:11	2017-09-30	Show	GitHub Exploit DB Packet Storm

254994	7.0	HIGH Local	norton	remove_\&_reinstall	Norton Remove & Reinstall can be susceptible to a DLL preloading vulnerability. These types of issues occur when an application looks to call a DLL for execution and an attacker provides a malicious …	CWE-94 Code Injection	CVE-2017-13676	2024-11-21 12:11	2017-09-28	Show	GitHub Exploit DB Packet Storm

254995	8.8	HIGH Network	digium	asterisk_gui	An Improper Neutralization of Special Elements used in an OS Command issue was discovered in Digium Asterisk GUI 2.1.0 and prior. An OS command injection vulnerability has been identified that may al…	CWE-78 OS Command	CVE-2017-14001	2024-11-21 12:11	2017-09-26	Show	GitHub Exploit DB Packet Storm

254996	6.5	MEDIUM Network	fastly	fastly	The Fastly CDN module before 1.2.26 for Magento2, when used with a third-party authentication plugin, might allow remote authenticated users to obtain sensitive information from authenticated session…	CWE-200 Information Exposure	CVE-2017-13761	2024-11-21 12:11	2017-09-15	Show	GitHub Exploit DB Packet Storm

254997	7.8	HIGH Local	gstn	india_goods_and_services_tax_network_offline_utility_tool	GSTN_offline_tool in India Goods and Services Tax Network (GSTN) Offline Utility tool before 1.2 executes winstart-server.vbs from the "C:\GST Offline Tool" directory, which has insecure permissions.…	CWE-732 Incorrect Permission Assignment for Critical Resource	CVE-2017-13779	2024-11-21 12:11	2017-09-14	Show	GitHub Exploit DB Packet Storm

254998	9.8	CRITICAL Network	tcpdump debian	tcpdump debian_linux	The IPv6 routing header parser in tcpdump before 4.9.2 has a buffer over-read in print-rt6.c:rt6_print().	CWE-125 Out-of-bounds Read	CVE-2017-13725	2024-11-21 12:11	2017-09-14	Show	GitHub Exploit DB Packet Storm

254999	9.8	CRITICAL Network	tcpdump	tcpdump	The IKEv2 parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.c, several functions.	CWE-125 Out-of-bounds Read	CVE-2017-13690	2024-11-21 12:11	2017-09-14	Show	GitHub Exploit DB Packet Storm

255000	9.8	CRITICAL Network	tcpdump	tcpdump	The IKEv1 parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.c:ikev1_id_print().	CWE-125 Out-of-bounds Read	CVE-2017-13689	2024-11-21 12:11	2017-09-14	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed