Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 17, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
253281	4.6	警告	Linux レッドハット	-	Linux kernel の KVM 実装におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2010-3698	2011-04-8 11:23	2010-10-20	Show	GitHub Exploit DB Packet Storm

253282	5	警告	IBM	-	IBM WebSphere Application Server の SOAP with Attachments API for Java (SAAJ) 実装におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2011-1322	2011-04-7 15:40	2010-07-29	Show	GitHub Exploit DB Packet Storm

253283	6.5	警告	IBM	-	IBM WebSphere Application Server の AuthCache パージ実装における権限を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-1321	2011-04-7 15:38	2010-10-18	Show	GitHub Exploit DB Packet Storm

253284	5	警告	IBM	-	IBM WebSphere Application Server の com.ibm.ws.jsp.runtime.WASJSPStrBufferImpl におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2011-1317	2011-04-7 15:35	2010-07-29	Show	GitHub Exploit DB Packet Storm

253285	5	警告	IBM	-	IBM WebSphere Application Server の org.apache.jasper.runtime.JspWriterImpl.response におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2011-1318	2011-04-7 15:25	2010-09-22	Show	GitHub Exploit DB Packet Storm

253286	5	警告	IBM	-	IBM WebSphere Application Server の Session Initiation Protocol におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2011-1316	2011-04-7 15:23	2010-09-23	Show	GitHub Exploit DB Packet Storm

253287	5	警告	IBM	-	IBM WebSphere Application Server のメッセージングエンジンにおけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2011-1315	2011-04-7 15:21	2010-09-30	Show	GitHub Exploit DB Packet Storm

253288	5	警告	IBM	-	IBM WebSphere Application Server の Service Integration Bus メッセージングエンジンにおけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2011-1314	2011-04-7 15:19	2010-08-4	Show	GitHub Exploit DB Packet Storm

253289	4	警告	IBM	-	IBM WebSphere Application Server の管理コンソールコンポーネントにおけるアクセス制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-1312	2011-04-7 15:15	2009-06-11	Show	GitHub Exploit DB Packet Storm

253290	4	警告	サイバートラスト株式会社レッドハット	-	vsftpd の vsf_filename_passes_filter 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2011-0762	2011-04-7 14:31	2011-03-2	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 17, 2026, 4:15 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
253971	8.8	HIGH Network	tp-link	tl-wvr450l_firmware tl-wvr458l_firmware tl-wvr900l_firmware tl-wvr1200l_firmware tl-wvr1300l_firmware tl-wvr1750l_firmware tl-wvr2600l_firmware tl-wvr4300l_firmware tl-war450l…	TP-Link TL-WVR and TL-WAR devices allow remote authenticated users to execute arbitrary commands via shell metacharacters in the interface field of an admin/dhcps command to cgi-bin/luci, related to …	CWE-78 OS Command	CVE-2017-17758	2024-11-21 12:18	2017-12-19	Show	GitHub Exploit DB Packet Storm

253972	8.8	HIGH Network	tp-link	tl-wvr450l_firmware tl-wvr458l_firmware tl-wvr900l_firmware tl-wvr1200l_firmware tl-wvr1300l_firmware tl-wvr1750l_firmware tl-wvr2600l_firmware tl-wvr4300l_firmware tl-war450l…	TP-Link TL-WVR and TL-WAR devices allow remote authenticated users to execute arbitrary commands via shell metacharacters in the interface field of an admin/wportal command to cgi-bin/luci, related t…	CWE-78 OS Command	CVE-2017-17757	2024-11-21 12:18	2017-12-19	Show	GitHub Exploit DB Packet Storm

253973	9.8	CRITICAL Network	zuuse	beims_contractorweb_.net	CWEBNET/WOSummary/List in ZUUSE BEIMS ContractorWeb .NET 5.18.0.0 allows SQL injection via the tradestatus, assetno, assignto, building, domain, jobtype, site, trade, woType, workorderno, or workorde…	CWE-89 SQL Injection	CVE-2017-17721	2024-11-21 12:18	2017-12-19	Show	GitHub Exploit DB Packet Storm

253974	9.8	CRITICAL Network	paid_to_read_script_project	paid_to_read_script	Paid To Read Script 2.0.5 has SQL Injection via the admin/userview.php uid parameter, the admin/viewemcamp.php fnum parameter, or the admin/viewvisitcamp.php fn parameter.	CWE-89 SQL Injection	CVE-2017-17651	2024-11-21 12:18	2017-12-18	Show	GitHub Exploit DB Packet Storm

253975	6.1	MEDIUM Network	readymade_video_sharing_script_project	readymade_video_sharing_script	Readymade Video Sharing Script 3.2 has HTML Injection via the single-video-detail.php comment parameter.	CWE-94 Code Injection	CVE-2017-17649	2024-11-21 12:18	2017-12-18	Show	GitHub Exploit DB Packet Storm

253976	9.8	CRITICAL Network	phpautoclassifiedscript	bus_booking_script	Bus Booking Script 1.0 has SQL Injection via the txtname parameter to admin/index.php.	CWE-89 SQL Injection	CVE-2017-17645	2024-11-21 12:18	2017-12-18	Show	GitHub Exploit DB Packet Storm

253977	9.8	CRITICAL Network	lynda_clone_project	lynda_clone	FS Lynda Clone 1.0 has SQL Injection via the keywords parameter to tutorial/.	CWE-89 SQL Injection	CVE-2017-17643	2024-11-21 12:18	2017-12-18	Show	GitHub Exploit DB Packet Storm

253978	6.5	MEDIUM Local	linux debian	linux_kernel debian_linux	The KVM implementation in the Linux kernel through 4.14.7 allows attackers to obtain potentially sensitive information from kernel memory, aka a write_mmio stack-based out-of-bounds read, related to …	CWE-125 Out-of-bounds Read	CVE-2017-17741	2024-11-21 12:18	2017-12-18	Show	GitHub Exploit DB Packet Storm

253979	7.5	HIGH Network	openldap opensuse oracle mcafee	openldap leap blockchain_platform policy_auditor	contrib/slapd-modules/nops/nops.c in OpenLDAP through 2.4.45, when both the nops module and the memberof overlay are enabled, attempts to free a buffer that was allocated on the stack, which allows r…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2017-17740	2024-11-21 12:18	2017-12-18	Show	GitHub Exploit DB Packet Storm

253980	9.8	CRITICAL Network	brightsign	4k242_firmware	The BrightSign Digital Signage (4k242) device (Firmware 6.2.63 and below) has directory traversal via the /storage.html rp parameter, allowing an attacker to read or write to files.	CWE-22 Path Traversal	CVE-2017-17739	2024-11-21 12:18	2017-12-18	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed