Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 17, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
252991	6.2	警告	Linux レッドハット	-	Linux kernel の caiaq Native Instruments USB オーディオ機能におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2011-0712	2011-05-26 10:21	2011-02-18	Show	GitHub Exploit DB Packet Storm

252992	4.3	警告	アクセラテクノロジ	-	Accela BizSearch の標準検索画面におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	-	2011-05-26 10:07	2010-04-25	Show	GitHub Exploit DB Packet Storm

252993	4.3	警告	アクセラテクノロジ	-	Accela BizSearch の標準検索画面におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	-	2011-05-26 10:06	2010-04-25	Show	GitHub Exploit DB Packet Storm

252994	4.3	警告	アクセラテクノロジ	-	Accela BizSearch の標準検索画面におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	-	2011-05-26 10:03	2010-04-25	Show	GitHub Exploit DB Packet Storm

252995	5	警告	The Perl Foundation レッドハット	-	Perl の lc、lcfirst、uc および ucfirst 関数における汚染 (Taint) 保護メカニズムを回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-1487	2011-05-26 09:55	2011-03-1	Show	GitHub Exploit DB Packet Storm

252996	7.5	危険	IBM サイバートラスト株式会社サン・マイクロシステムズ Sendmail Consortium ターボリナックスヒューレット・パッカードレッドハット	-	sendmail における X.509 証明書の処理に関する任意の SSL-based SMTP サーバになりすまされる脆弱性	CWE-310 暗号の問題	CVE-2009-4565	2011-05-26 09:52	2010-01-4	Show	GitHub Exploit DB Packet Storm

252997	5	警告	シックス・アパート株式会社	-	Movable Type におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-5845	2011-05-25 14:03	2011-05-25	Show	GitHub Exploit DB Packet Storm

252998	9.3	危険	マイクロソフト	-	Microsoft PowerPoint におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2011-1270	2011-05-25 12:24	2011-05-10	Show	GitHub Exploit DB Packet Storm

252999	9.3	危険	マイクロソフト	-	複数の Microsoft 製品における任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2011-1269	2011-05-25 12:22	2011-05-10	Show	GitHub Exploit DB Packet Storm

253000	9.3	危険	マイクロソフト	-	Microsoft Windows の WINS における任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2011-1248	2011-05-25 12:15	2011-05-10	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 18, 2026, 4:12 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
246981	5.6	MEDIUM Local	qemu debian	qemu debian_linux	QEMU (aka Quick Emulator), when built with the e1000e NIC emulation support, allows local guest OS privileged users to cause a denial of service (infinite loop) via vectors related to setting the ini…	CWE-835 Loop with Unreachable Exit Condition ('Infinite Loop')	CVE-2017-9310	2024-11-21 12:35	2017-06-9	Show	GitHub Exploit DB Packet Storm

246982	7.5	HIGH Network	strongswan	strongswan	The ASN.1 parser in strongSwan before 5.5.3 improperly handles CHOICE types when the x509 plugin is enabled, which allows remote attackers to cause a denial of service (infinite loop) via a crafted c…	NVD-CWE-noinfo CWE-835 Loop with Unreachable Exit Condition ('Infinite Loop')	CVE-2017-9023	2024-11-21 12:35	2017-06-9	Show	GitHub Exploit DB Packet Storm

246983	7.5	HIGH Network	strongswan debian canonical	strongswan debian_linux ubuntu_linux	The gmp plugin in strongSwan before 5.5.3 does not properly validate RSA public keys before calling mpz_powm_sec, which allows remote peers to cause a denial of service (floating point exception and …	CWE-20 Improper Input Validation	CVE-2017-9022	2024-11-21 12:35	2017-06-9	Show	GitHub Exploit DB Packet Storm

246984	7.4	HIGH Network	subsonic	subsonic	XML external entity (XXE) vulnerability in the import playlist feature in Subsonic 6.1.1 might allow remote attackers to conduct server-side request forgery (SSRF) attacks via a crafted XSPF playlist…	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2017-9355	2024-11-21 12:35	2017-06-8	Show	GitHub Exploit DB Packet Storm

246985	6.1	MEDIUM Network	pivotx	pivotx	The smarty_self function in modules/module_smarty.php in PivotX 2.3.11 mishandles the URI, allowing XSS via vectors involving quotes in the self Smarty tag.	CWE-79 Cross-site Scripting	CVE-2017-9332	2024-11-21 12:35	2017-06-6	Show	GitHub Exploit DB Packet Storm

246986	8.8	HIGH Network	open-emr	openemr	OpenEMR 5.0.0 and prior allows low-privilege users to upload files of dangerous types which can result in arbitrary code execution within the context of the vulnerable application.	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2017-9380	2024-11-21 12:35	2017-06-3	Show	GitHub Exploit DB Packet Storm

246987	8.8	HIGH Network	bigtreecms	bigtree_cms	Multiple CSRF issues exist in BigTree CMS through 4.2.18 - the clear parameter to core\admin\modules\dashboard\vitals-statistics\404\clear.php and the from or to parameter to core\admin\modules\dashb…	CWE-352 Origin Validation Error	CVE-2017-9379	2024-11-21 12:35	2017-06-3	Show	GitHub Exploit DB Packet Storm

246988	6.5	MEDIUM Network	bigtreecms	bigtree_cms	BigTree CMS through 4.2.18 does not prevent a user from deleting their own account. This could have security relevance because deletion was supposed to be an admin-only action, and the admin may have…	CWE-863 Incorrect Authorization	CVE-2017-9378	2024-11-21 12:35	2017-06-3	Show	GitHub Exploit DB Packet Storm

246989	7.5	HIGH Network	digium	open_source certified_asterisk	PJSIP, as used in Asterisk Open Source 13.x before 13.15.1 and 14.x before 14.4.1, Certified Asterisk 13.13 before 13.13-cert4, and other products, allows remote attackers to cause a denial of servic…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2017-9372	2024-11-21 12:35	2017-06-2	Show	GitHub Exploit DB Packet Storm

246990	4.8	MEDIUM Network	epesi	epesi	Telaxus EPESI 1.8.2 and earlier has a Stored Cross-site Scripting (XSS) vulnerability in modules/Base/Dashboard/Dashboard_0.php, which allows remote attackers to inject arbitrary web script or HTML v…	CWE-79 Cross-site Scripting	CVE-2017-9366	2024-11-21 12:35	2017-06-2	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed