Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":April 30, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
253191	4.3	警告	オラクル	-	Oracle E-Business Suite の Oracle Transportation Management コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0869	2010-05-13 15:10	2010-04-13	Show	GitHub Exploit DB Packet Storm

253192	4.3	警告	オラクル	-	Oracle E-Business Suite の Oracle Agile Engineering Data Management コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0871	2010-05-13 15:10	2010-04-13	Show	GitHub Exploit DB Packet Storm

253193	4.3	警告	オラクル	-	Oracle E-Business Suite の Oracle Agile Engineering Data Management コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0865	2010-05-13 15:09	2010-04-13	Show	GitHub Exploit DB Packet Storm

253194	5	警告	オラクル	-	Oracle E-Business Suite の Oracle HRMS (Self Service) コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0861	2010-05-13 15:09	2010-04-13	Show	GitHub Exploit DB Packet Storm

253195	7.6	危険	マイクロソフト	-	Internet Explorer において VBScript および Windows Help を使用する際に任意のコードが実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-0483	2010-05-12 15:20	2010-03-2	Show	GitHub Exploit DB Packet Storm

253196	7.1	危険	マイクロソフト	-	Microsoft Windows の kernel における SMB 応答パケットの処理に関するサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2009-3676	2010-05-12 15:20	2009-11-13	Show	GitHub Exploit DB Packet Storm

253197	5.8	警告	オラクル	-	Oracle E-Business Suite の Oracle iStore コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0868	2010-05-12 15:19	2010-04-13	Show	GitHub Exploit DB Packet Storm

253198	6.4	警告	オラクル	-	Oracle E-Business Suite の Oracle Application Object Library コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0859	2010-05-12 15:19	2010-04-13	Show	GitHub Exploit DB Packet Storm

253199	4.3	警告	オラクル	-	Oracle Collaboration Suite の User Interface コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0881	2010-05-12 15:19	2010-04-13	Show	GitHub Exploit DB Packet Storm

253200	4.3	警告	オラクル	-	Oracle Fusion Middleware の Portal コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0855	2010-05-12 15:19	2010-04-13	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:April 30, 2026, 4:58 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
250331	7.8	HIGH Local	flexense	syncbreeze	There exists an unauthenticated SEH based Buffer Overflow vulnerability in the HTTP server of Flexense SyncBreeze Enterprise v10.1.16. When sending a GET request with an excessive length, it is possi…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2017-17099	2024-11-21 12:17	2017-12-4	Show	GitHub Exploit DB Packet Storm

250332	6.1	MEDIUM Network	content_cards_project	content_cards	Cross-site scripting (XSS) vulnerability in the Content Cards plugin before 0.9.7 for WordPress allows remote attackers to inject arbitrary JavaScript via crafted OpenGraph data.	CWE-79 Cross-site Scripting	CVE-2017-17096	2024-11-21 12:17	2017-12-4	Show	GitHub Exploit DB Packet Storm

250333	8.8	HIGH Network	libtiff	libtiff	tools/pal2rgb.c in pal2rgb in LibTIFF 4.0.9 allows remote attackers to cause a denial of service (TIFFSetupStrips heap-based buffer overflow and application crash) or possibly have unspecified other …	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2017-17095	2024-11-21 12:17	2017-12-2	Show	GitHub Exploit DB Packet Storm

250334	5.4	MEDIUM Network	wordpress debian	wordpress debian_linux	wp-includes/feed.php in WordPress before 4.9.1 does not properly restrict enclosures in RSS and Atom fields, which might allow attackers to conduct XSS attacks via a crafted URL.	CWE-79 Cross-site Scripting	CVE-2017-17094	2024-11-21 12:17	2017-12-2	Show	GitHub Exploit DB Packet Storm

250335	5.4	MEDIUM Network	wordpress debian	wordpress debian_linux	wp-includes/general-template.php in WordPress before 4.9.1 does not properly restrict the lang attribute of an HTML element, which might allow attackers to conduct XSS attacks via the language settin…	CWE-79 Cross-site Scripting	CVE-2017-17093	2024-11-21 12:17	2017-12-2	Show	GitHub Exploit DB Packet Storm

250336	5.4	MEDIUM Network	wordpress debian	wordpress debian_linux	wp-includes/functions.php in WordPress before 4.9.1 does not require the unfiltered_html capability for upload of .js files, which might allow remote attackers to conduct XSS attacks via a crafted fi…	CWE-79 Cross-site Scripting	CVE-2017-17092	2024-11-21 12:17	2017-12-2	Show	GitHub Exploit DB Packet Storm

250337	8.8	HIGH Network	wordpress	wordpress	wp-admin/user-new.php in WordPress before 4.9.1 sets the newbloguser key to a string that can be directly derived from the user ID, which allows remote attackers to bypass intended access restriction…	CWE-330 Use of Insufficiently Random Values	CVE-2017-17091	2024-11-21 12:17	2017-12-2	Show	GitHub Exploit DB Packet Storm

250338	7.5	HIGH Network	digium	certified_asterisk asterisk	An issue was discovered in chan_skinny.c in Asterisk Open Source 13.18.2 and older, 14.7.2 and older, and 15.1.2 and older, and Certified Asterisk 13.13-cert7 and older. If the chan_skinny (aka SCCP …	CWE-459 Incomplete Cleanup	CVE-2017-17090	2024-11-21 12:17	2017-12-2	Show	GitHub Exploit DB Packet Storm

250339	7.5	HIGH Network	zte	zxdsl_831cii_firmware	connoppp.cgi on ZTE ZXDSL 831CII devices does not require HTTP Basic Authentication, which allows remote attackers to modify the PPPoE configuration or set up a malicious configuration via a GET requ…	CWE-287 Improper Authentication	CVE-2017-16953	2024-11-21 12:17	2017-12-2	Show	GitHub Exploit DB Packet Storm

250340	7.8	HIGH Local	arqbackup	arq	The (1) arq_updater, (2) arqcommitter, (3) standardrestorer, (4) arqglacierrestorer, and (5) arqs3glacierrestorer helper apps in Arq 5.x before 5.10 for Mac allow local users to gain root privileges …	CWE-732 Incorrect Permission Assignment for Critical Resource	CVE-2017-16895	2024-11-21 12:17	2017-12-2	Show	GitHub Exploit DB Packet Storm