Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 13, 2026, 4:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
253141 6.8 警告 Lomtec - Lomtec ActiveWeb Professional 3.0 CMS における任意のファイルをアップロードおよび実行可能な脆弱性 CWE-Other
その他 		CVE-2011-0678 2011-02-28 16:25 2011-01-26 Show GitHub Exploit DB Packet Storm
253142 4.9 警告 サイバートラスト株式会社
VMware
Xen プロジェクト
レッドハット		 - Xen の arch/ia64/xen/faults.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他 		CVE-2010-2070 2011-02-28 14:55 2010-06-16 Show GitHub Exploit DB Packet Storm
253143 7.1 危険 サイバートラスト株式会社
VMware
Linux
レッドハット		 - Linux kernel の Bluetooth ソケットにおけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2010-1084 2011-02-28 14:54 2010-04-6 Show GitHub Exploit DB Packet Storm
253144 5 警告 Eyrie
VMware
レッドハット		 - pam_krb5 における有効なユーザ名を列挙される脆弱性 CWE-287
不適切な認証 		CVE-2009-1384 2011-02-28 14:51 2009-05-28 Show GitHub Exploit DB Packet Storm
253145 4.4 警告 サイバートラスト株式会社
VMware
レッドハット		 - Red Hat Enterprise Linux の pam_krb5 における権限昇格の脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-3825 2011-02-28 14:48 2008-10-2 Show GitHub Exploit DB Packet Storm
253146 6.8 警告 Haxx
アップル
VMware
サイバートラスト株式会社
レッドハット		 - libcurl の content_encoding.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-0734 2011-02-28 14:41 2010-02-9 Show GitHub Exploit DB Packet Storm
253147 4.3 警告 VMware
OpenSSL Project		 - OpenSSL クライアントの ssl3_get_key_exchange 関数における任意のコードを実行される脆弱性 CWE-399
リソース管理の問題 		CVE-2010-2939 2011-02-28 14:39 2010-08-17 Show GitHub Exploit DB Packet Storm
253148 10 危険 アップル
サイバートラスト株式会社
VMware
サン・マイクロシステムズ
レッドハット		 - 複数の Oracle 製品 の Java Deployment Toolkit コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-0886 2011-02-28 14:16 2010-04-15 Show GitHub Exploit DB Packet Storm
253149 8.3 危険 インターネットイニシアティブ - SEIL シリーズにおけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2011-0454 2011-02-28 12:08 2011-02-28 Show GitHub Exploit DB Packet Storm
253150 6.8 警告 Google - OpenCORE の Huffman デコーディング機能における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2009-0475 2011-02-25 14:13 2009-02-17 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 13, 2026, 5:05 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
258671 4.8 MEDIUM
Network 		mahara mahara Mahara 1.8 before 1.8.7 and 1.9 before 1.9.5 and 1.10 before 1.10.3 and 15.04 before 15.04.0 are vulnerable to a maliciously created .swf files that can have its code executed when a user tries to do… CWE-79
Cross-site Scripting 		CVE-2017-1000132 2024-11-21 12:04 2017-11-4 Show GitHub Exploit DB Packet Storm
258672 6.5 MEDIUM
Network 		mahara mahara Mahara 15.04 before 15.04.8 and 15.10 before 15.10.4 and 16.04 before 16.04.2 are vulnerable to users staying logged in to their Mahara account even when they have been logged out of Moodle (when usi… CWE-613
 Insufficient Session Expiration 		CVE-2017-1000131 2024-11-21 12:04 2017-11-4 Show GitHub Exploit DB Packet Storm
258673 5.3 MEDIUM
Network 		webkitgtk webkitgtk\+ The UNIX IPC layer in WebKit, including WebKitGTK+ prior to 2.16.3, does not properly validate certain message metadata, allowing a compromised secondary process to cause a denial of service (release… CWE-20
 Improper Input Validation  		CVE-2017-1000122 2024-11-21 12:04 2017-11-2 Show GitHub Exploit DB Packet Storm
258674 9.8 CRITICAL
Network 		webkitgtk webkitgtk\+ The UNIX IPC layer in WebKit, including WebKitGTK+ prior to 2.16.3, does not properly validate message size metadata, allowing a compromised secondary process to trigger an integer overflow and subse… CWE-190
 Integer Overflow or Wraparound 		CVE-2017-1000121 2024-11-21 12:04 2017-11-2 Show GitHub Exploit DB Packet Storm
258675 5.4 MEDIUM
Network 		pluxml pluxml PluXml version 5.6 is vulnerable to stored cross-site scripting vulnerability, within the article creation page, which can result in escalation of privileges. CWE-79
Cross-site Scripting 		CVE-2017-1001001 2024-11-21 12:04 2017-11-2 Show GitHub Exploit DB Packet Storm
258676 9.8 CRITICAL
Network 		jenkins ssh The SSH Plugin stores credentials which allow jobs to access remote servers via the SSH protocol. User passwords and passphrases for encrypted SSH keys are stored in plaintext in a configuration file. CWE-522
 Insufficiently Protected Credentials 		CVE-2017-1000245 2024-11-21 12:04 2017-11-1 Show GitHub Exploit DB Packet Storm
258677 8.8 HIGH
Network 		jenkins favorite Jenkins Favorite Plugin version 2.2.0 and older is vulnerable to CSRF resulting in data modification CWE-352
 Origin Validation Error 		CVE-2017-1000244 2024-11-21 12:04 2017-11-1 Show GitHub Exploit DB Packet Storm
258678 4.3 MEDIUM
Network 		jenkins favorite_plugin Jenkins Favorite Plugin 2.1.4 and older does not perform permission checks when changing favorite status, allowing any user to set any other user's favorites CWE-862
 Missing Authorization 		CVE-2017-1000243 2024-11-21 12:04 2017-11-1 Show GitHub Exploit DB Packet Storm
258679 3.3 LOW
Local 		jenkins git_client Jenkins Git Client Plugin 2.4.2 and earlier creates temporary file with insecure permissions resulting in information disclosure CWE-200
Information Exposure 		CVE-2017-1000242 2024-11-21 12:04 2017-11-1 Show GitHub Exploit DB Packet Storm
258680 9.1 CRITICAL
Network 		haxx
debian 		libcurl
debian_linux 		An IMAP FETCH response line indicates the size of the returned data, in number of bytes. When that response says the data is zero bytes, libcurl would pass on that (non-existing) data with a pointer … CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2017-1000257 2024-11-21 12:04 2017-11-1 Show GitHub Exploit DB Packet Storm