Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 8, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
252881 9.3 危険 リアルネットワークス - RealNetworks RealPlayer の Cook Audio Codec におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-4377 2011-01-7 15:35 2010-12-10 Show GitHub Exploit DB Packet Storm
252882 9.3 危険 リアルネットワークス - RealNetworks RealPlayer の RTSP GIF の解析処理におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-4376 2011-01-7 15:34 2010-12-10 Show GitHub Exploit DB Packet Storm
252883 9.3 危険 リアルネットワークス - RealNetworks RealPlayer の pnen3260.dll モジュールにおける整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2010-4397 2011-01-7 15:34 2010-12-10 Show GitHub Exploit DB Packet Storm
252884 9.3 危険 リアルネットワークス - RealNetworks RealPlayer の AAC MLLT Atom 解析処理における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2010-2999 2011-01-7 15:34 2010-12-10 Show GitHub Exploit DB Packet Storm
252885 9.3 危険 レッドハット
リアルネットワークス		 - RealNetworks RealPlayer における任意のコードを実行される脆弱性 CWE-399
リソース管理の問題 		CVE-2010-2997 2011-01-7 15:33 2010-12-10 Show GitHub Exploit DB Packet Storm
252886 2.6 注意 アップル
サイバートラスト株式会社
レッドハット
SquirrelMail Project		 - SquirrelMail におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2009-2964 2011-01-7 11:03 2009-08-12 Show GitHub Exploit DB Packet Storm
252887 4.3 警告 レッドハット
SquirrelMail Project		 - SquirrelMail におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-1262 2011-01-7 11:02 2007-05-9 Show GitHub Exploit DB Packet Storm
252888 9.3 危険 レッドハット
リアルネットワークス		 - RealNetworks RealPlayer のマルチレートオーディオにおけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-4375 2011-01-6 16:23 2010-12-10 Show GitHub Exploit DB Packet Storm
252889 9.3 危険 レッドハット
リアルネットワークス		 - RealNetworks RealPlayer の RealMedia メディアプロパティーヘッダーにおける任意のコードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2010-4384 2011-01-6 16:18 2010-12-10 Show GitHub Exploit DB Packet Storm
252890 4.3 警告 Mozilla Foundation
オラクル		 - 複数の Mozilla 製品の nsAuthSSPI::Unwrap 関数における任意のコードを実行される脆弱性 CWE-399
リソース管理の問題 		CVE-2010-0161 2011-01-6 16:01 2010-03-16 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 8, 2026, 4:54 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
253231 6.5 MEDIUM
Network 		3cx 3cx In the 3CX Phone System 15.5.3554.1, the Management Console typically listens to port 5001 and is prone to a directory traversal attack: "/api/RecordingList/DownloadRecord?file=" and "/api/SupportInf… CWE-22
Path Traversal 		CVE-2017-15359 2024-11-21 12:14 2017-10-19 Show GitHub Exploit DB Packet Storm
253232 6.0 MEDIUM
Local 		xen xen An issue was discovered in Xen 4.4.x through 4.9.x allowing ARM guest OS users to cause a denial of service (prevent physical CPU usage) because of lock mishandling upon detection of an add-to-physma… CWE-400
 Uncontrolled Resource Consumption 		CVE-2017-15596 2024-11-21 12:14 2017-10-18 Show GitHub Exploit DB Packet Storm
253233 8.8 HIGH
Local 		xen xen An issue was discovered in Xen through 4.9.x allowing x86 PV guest OS users to cause a denial of service (unbounded recursion, stack consumption, and hypervisor crash) or possibly gain privileges via… CWE-400
 Uncontrolled Resource Consumption 		CVE-2017-15595 2024-11-21 12:14 2017-10-18 Show GitHub Exploit DB Packet Storm
253234 8.8 HIGH
Local 		xen xen An issue was discovered in Xen through 4.9.x allowing x86 SVM PV guest OS users to cause a denial of service (hypervisor crash) or gain privileges because IDT settings are mishandled during CPU hotpl… NVD-CWE-noinfo
CVE-2017-15594 2024-11-21 12:14 2017-10-18 Show GitHub Exploit DB Packet Storm
253235 6.5 MEDIUM
Local 		xen xen An issue was discovered in Xen through 4.9.x allowing x86 PV guest OS users to cause a denial of service (memory leak) because reference counts are mishandled. CWE-772
 Missing Release of Resource after Effective Lifetime 		CVE-2017-15593 2024-11-21 12:14 2017-10-18 Show GitHub Exploit DB Packet Storm
253236 8.8 HIGH
Local 		xen xen An issue was discovered in Xen through 4.9.x allowing x86 HVM guest OS users to cause a denial of service (hypervisor crash) or possibly gain privileges because self-linear shadow mappings are mishan… CWE-668
 Exposure of Resource to Wrong Sphere 		CVE-2017-15592 2024-11-21 12:14 2017-10-18 Show GitHub Exploit DB Packet Storm
253237 6.5 MEDIUM
Local 		xen xen An issue was discovered in Xen 4.5.x through 4.9.x allowing attackers (who control a stub domain kernel or tool stack) to cause a denial of service (host OS crash) because of a missing comparison (of… CWE-20
 Improper Input Validation  		CVE-2017-15591 2024-11-21 12:14 2017-10-18 Show GitHub Exploit DB Packet Storm
253238 8.8 HIGH
Local 		xen xen An issue was discovered in Xen through 4.9.x allowing x86 guest OS users to cause a denial of service (hypervisor crash) or possibly gain privileges because MSI mapping was mishandled. NVD-CWE-noinfo
CVE-2017-15590 2024-11-21 12:14 2017-10-18 Show GitHub Exploit DB Packet Storm
253239 6.5 MEDIUM
Local 		xen xen An issue was discovered in Xen through 4.9.x allowing x86 HVM guest OS users to obtain sensitive information from the host OS (or an arbitrary guest OS) because intercepted I/O operations can cause a… CWE-200
Information Exposure 		CVE-2017-15589 2024-11-21 12:14 2017-10-18 Show GitHub Exploit DB Packet Storm
253240 7.8 HIGH
Local 		xen xen An issue was discovered in Xen through 4.9.x allowing x86 PV guest OS users to execute arbitrary code on the host OS because of a race condition that can cause a stale TLB entry. CWE-362
Race Condition 		CVE-2017-15588 2024-11-21 12:14 2017-10-18 Show GitHub Exploit DB Packet Storm