Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 1, 2026, 2 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
252871 3.3 注意 レッドハット - Firefox の SPICE プラグインにおける重要な情報を取得される脆弱性 CWE-362
競合状態
CVE-2010-2792 2010-09-15 17:13 2010-08-25 Show GitHub Exploit DB Packet Storm
252872 1.9 注意 シトリックス・システムズ - Citrix XenServer におけるサービス運用妨害 (DoS) の脆弱性 CWE-DesignError
CVE-2010-2619 2010-09-14 15:55 2010-06-17 Show GitHub Exploit DB Packet Storm
252873 4.6 警告 シトリックス・システムズ - Citrix XenServer における認証を回避され Xen API (XAPI) を実行される脆弱性 CWE-noinfo
情報不足
CVE-2010-0633 2010-09-14 15:54 2010-02-12 Show GitHub Exploit DB Packet Storm
252874 4.3 警告 シトリックス・システムズ - 複数の Citrix XenServer 製品の XenAPI HTTP インターフェイスにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-3253 2010-09-14 15:54 2008-07-16 Show GitHub Exploit DB Packet Storm
252875 7.5 危険 シトリックス・システムズ - Citrix XenCenterWeb の XenServer Resource Kit における PHP コードを挿入される脆弱性 CWE-94
コード・インジェクション
CVE-2009-3760 2010-09-14 15:54 2009-10-22 Show GitHub Exploit DB Packet Storm
252876 6 警告 シトリックス・システムズ - Citrix XenCenterWeb の XenServer Resource Kit におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2009-3759 2010-09-14 15:54 2009-10-22 Show GitHub Exploit DB Packet Storm
252877 7.5 危険 シトリックス・システムズ - Citrix XenCenterWeb の XenServer Resource Kit における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2009-3758 2010-09-14 15:53 2009-10-22 Show GitHub Exploit DB Packet Storm
252878 4.3 警告 シトリックス・システムズ - Citrix XenCenterWeb の XenServer Resource Kit におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2009-3757 2010-09-14 15:53 2009-10-22 Show GitHub Exploit DB Packet Storm
252879 7.2 危険 シトリックス・システムズ - Xen の xend におけるサービス運用妨害 (DoS) の脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2008-5716 2010-09-14 15:53 2008-12-24 Show GitHub Exploit DB Packet Storm
252880 6 警告 VMware - VMware Studio の Virtual Appliance Management Infrastructure における任意のコマンドを実行される脆弱性 CWE-noinfo
情報不足
CVE-2010-2667 2010-09-13 16:05 2010-07-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 1, 2026, 4:54 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
248691 5.3 MEDIUM
Network
ibm bigfix_compliance IBM BigFix Compliance 1.7 through 1.9.91 discloses sensitive information to unauthorized users. The information can be used to mount further attacks on the system. IBM X-Force ID: 123429. CWE-200
Information Exposure
CVE-2017-1177 2024-11-21 12:21 2019-02-6 Show GitHub Exploit DB Packet Storm
248692 5.3 MEDIUM
Network
ibm security_guardium IBM Security Guardium 10.0 and 10.5 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer h… CWE-200
Information Exposure
CVE-2017-1272 2024-11-21 12:21 2018-12-18 Show GitHub Exploit DB Packet Storm
248693 5.9 MEDIUM
Network
ibm security_guardium IBM Security Guardium 10.0, 10.0.1, 10.1, 10.1.2, 10.1.3, 10.1.4, and 10.5 does not validate, or incorrectly validates, a certificate. This weakness might allow an attacker to spoof a trusted entity … CWE-295
Improper Certificate Validation 
CVE-2017-1265 2024-11-21 12:21 2018-12-18 Show GitHub Exploit DB Packet Storm
248694 7.5 HIGH
Network
ibm security_guardium IBM Security Guardium 10 and 10.5 uses a one-way cryptographic hash against an input that should not be reversible, such as a password, but the software does not also use a salt as part of the input.… CWE-310
Cryptographic Issues
CVE-2017-1268 2024-11-21 12:21 2018-12-14 Show GitHub Exploit DB Packet Storm
248695 5.5 MEDIUM
Local
ibm integration_bus
websphere_message_broker
IBM Integration Bus 9.0.0.0, 9.0.0.11, 10.0.0.0, and 10.0.0.14 (including IBM WebSphere Message Broker 8.0.0.0 and 8.0.0.9) has insecure permissions on certain files. A local attacker could exploit t… CWE-275
 Permission Issues
CVE-2017-1418 2024-11-21 12:21 2018-11-27 Show GitHub Exploit DB Packet Storm
248696 4.3 MEDIUM
Network
ibm marketing_operations IBM Marketing Operations 9.1.0, 9.1.2, and 10.1 could allow a remote attacker to obtain sensitive information. An attacker could send a specially-crafted request to cause an error message to be retur… CWE-200
Information Exposure
CVE-2017-1119 2024-11-21 12:21 2018-11-9 Show GitHub Exploit DB Packet Storm
248697 7.8 HIGH
Local
ibm bigfix_platform IBM BigFix Platform 9.5 - 9.5.9 stores user credentials in plain in clear text which can be read by a local user. IBM X-Force ID: 123910. CWE-522
 Insufficiently Protected Credentials
CVE-2017-1231 2024-11-21 12:21 2018-10-12 Show GitHub Exploit DB Packet Storm
248698 7.8 HIGH
Local
freebsd freebsd In FreeBSD before 11.2-RELEASE, an application which calls setrlimit() to increase RLIMIT_STACK may turn a read-only memory region below the stack into a read-write region. A specially crafted execut… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2017-1085 2024-11-21 12:21 2018-09-12 Show GitHub Exploit DB Packet Storm
248699 7.5 HIGH
Network
freebsd freebsd In FreeBSD before 11.2-RELEASE, multiple issues with the implementation of the stack guard-page reduce the protections afforded by the guard-page. This results in the possibility a poorly written pro… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2017-1084 2024-11-21 12:21 2018-09-12 Show GitHub Exploit DB Packet Storm
248700 7.5 HIGH
Network
freebsd freebsd In FreeBSD before 11.2-RELEASE, a stack guard-page is available but is disabled by default. This results in the possibility a poorly written process could be cause a stack overflow. CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2017-1083 2024-11-21 12:21 2018-09-12 Show GitHub Exploit DB Packet Storm