Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 4, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
253251	4.3	警告	アップル	-	Apple Mac OS X のヘルプビューアにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-1373	2010-07-8 18:27	2010-06-15	Show	GitHub Exploit DB Packet Storm

253252	3.3	注意	アップル	-	Apple Mac OS X の Folder Manager における任意のフォルダを削除される脆弱性	CWE-59 リンク解釈の問題	CVE-2010-0546	2010-07-8 18:27	2010-06-15	Show	GitHub Exploit DB Packet Storm

253253	4.4	警告	アップル	-	Apple Mac OS X の DesktopServices におけるアクセス制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-0545	2010-07-8 18:26	2010-06-15	Show	GitHub Exploit DB Packet Storm

253254	10	危険	ヒューレット・パッカード SGI IBM	-	rpc.pcnfsd の _msgout 関数における任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2010-1039	2010-07-8 18:03	2010-05-18	Show	GitHub Exploit DB Packet Storm

253255	1.2	注意	IBM OpenBSD	-	OpenSSH における X11 転送ポートをハイジャックされる脆弱性	CWE-200 情報漏えい	CVE-2008-3259	2010-07-7 16:40	2008-07-22	Show	GitHub Exploit DB Packet Storm

253256	4.3	警告	アップルサイバートラスト株式会社レッドハット SquirrelMail Project	-	SquirrelMail におけるユーザインターフェースを偽装される脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-1581	2010-07-6 19:19	2009-05-12	Show	GitHub Exploit DB Packet Storm

253257	6.8	警告	アップル SquirrelMail Project	-	SquirrelMail におけるセッション固定の脆弱性	CWE-287 不適切な認証	CVE-2009-1580	2010-07-6 19:18	2009-05-11	Show	GitHub Exploit DB Packet Storm

253258	6.8	警告	アップルサイバートラスト株式会社レッドハット SquirrelMail Project	-	SquirrelMail における任意のコマンドを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2009-1579	2010-07-6 19:18	2009-05-10	Show	GitHub Exploit DB Packet Storm

253259	4.3	警告	アップルサイバートラスト株式会社レッドハット SquirrelMail Project	-	SquirrelMail におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-1578	2010-07-6 19:18	2009-05-8	Show	GitHub Exploit DB Packet Storm

253260	8.5	危険	マイクロソフト	-	Microsoft IIS における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-1256	2010-07-5 17:52	2010-06-8	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 5, 2026, 4:51 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
255341	9.8	CRITICAL Network	datataker	dt8x_firmware	dataTaker DT8x dEX 1.72.007 allows remote attackers to compose programs or schedules, for purposes such as sending e-mail messages or making outbound connections to FTP servers for uploading data.	CWE-522 Insufficiently Protected Credentials	CVE-2017-11349	2024-11-21 12:07	2017-07-17	Show	GitHub Exploit DB Packet Storm

255342	5.7	MEDIUM Network	octopus	octopus_deploy octopus_server	In Octopus Deploy 3.x before 3.15.4, an authenticated user with PackagePush permission to upload packages could upload a maliciously crafted NuGet package, potentially overwriting other packages or m…	CWE-22 Path Traversal	CVE-2017-11348	2024-11-21 12:07	2017-07-17	Show	GitHub Exploit DB Packet Storm

255343	8.8	HIGH Network	metinfo	metinfo	Authenticated Code Execution Vulnerability in MetInfo 5.3.17 allows a remote authenticated attacker to generate a PHP script with the content of a malicious image, related to admin/include/common.inc…	NVD-CWE-noinfo	CVE-2017-11347	2024-11-21 12:07	2017-07-17	Show	GitHub Exploit DB Packet Storm

255344	9.8	CRITICAL Network	zohocorp	manageengine_desktop_central	Zoho ManageEngine Desktop Central before build 100092 allows remote attackers to execute arbitrary code via vectors involving the upload of help desk videos.	CWE-20 Improper Input Validation	CVE-2017-11346	2024-11-21 12:07	2017-07-17	Show	GitHub Exploit DB Packet Storm

255345	7.8	HIGH Local	asuswrt-merlin_project	rt-ac5300_firmware rt_ac1900p_firmware rt-ac68u_firmware rt-ac68p_firmware rt-ac88u_firmware rt-ac66u_firmware rt-ac66u_b1_firmware rt-ac58u_firmware rt-ac56u_firmware rt-a…	Stack buffer overflow in networkmap in Asuswrt-Merlin firmware for ASUS devices and ASUS firmware for ASUS RT-AC5300, RT_AC1900P, RT-AC68U, RT-AC68P, RT-AC88U, RT-AC66U, RT-AC66U_B1, RT-AC58U, RT-AC5…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2017-11345	2024-11-21 12:07	2017-07-17	Show	GitHub Exploit DB Packet Storm

255346	7.5	HIGH Network	call-cc	chicken	Due to an incomplete fix for CVE-2012-6125, all versions of CHICKEN Scheme up to and including 4.12.0 are vulnerable to an algorithmic complexity attack. An attacker can provide crafted input which, …	CWE-407 Inefficient Algorithmic Complexity	CVE-2017-11343	2024-11-21 12:07	2017-07-17	Show	GitHub Exploit DB Packet Storm

255347	7.5	HIGH Network	libsass	libsass	There is an illegal address access in ast.cpp of LibSass 3.4.5. A crafted input will lead to a remote denial of service attack.	CWE-20 Improper Input Validation	CVE-2017-11342	2024-11-21 12:07	2017-07-17	Show	GitHub Exploit DB Packet Storm

255348	7.5	HIGH Network	libsass	libsass	There is a heap based buffer over-read in lexer.hpp of LibSass 3.4.5. A crafted input will lead to a remote denial of service attack.	CWE-125 Out-of-bounds Read	CVE-2017-11341	2024-11-21 12:07	2017-07-17	Show	GitHub Exploit DB Packet Storm

255349	6.5	MEDIUM Network	exiv2	exiv2	There is a Segmentation fault in the XmpParser::terminate() function in Exiv2 0.26, related to an exit call. A Crafted input will lead to a remote denial of service attack.	CWE-20 Improper Input Validation	CVE-2017-11340	2024-11-21 12:07	2017-07-17	Show	GitHub Exploit DB Packet Storm

255350	6.5	MEDIUM Network	exiv2	exiv2	There is a heap-based buffer overflow in the Image::printIFDStructure function of image.cpp in Exiv2 0.26. A Crafted input will lead to a remote denial of service attack.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2017-11339	2024-11-21 12:07	2017-07-17	Show	GitHub Exploit DB Packet Storm