Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":April 30, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
253311	4.3	警告	アップル Ruby on Rails project	-	Ruby on Rails の strip_tags 関数におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-4214	2010-04-16 16:58	2009-12-7	Show	GitHub Exploit DB Packet Storm

253312	4.3	警告	アップル Ruby on Rails project	-	Ruby on Rails におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-3009	2010-04-16 16:58	2009-09-8	Show	GitHub Exploit DB Packet Storm

253313	7.5	危険	アップル Ruby on Rails project	-	Ruby on Rails のダイジェスト認証における認証を回避される脆弱性	CWE-287 不適切な認証	CVE-2009-2422	2010-04-16 16:57	2009-07-10	Show	GitHub Exploit DB Packet Storm

253314	6.8	警告	アップル	-	Apple Mac OS X の QuickTime におけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-0526	2010-04-16 16:57	2010-03-29	Show	GitHub Exploit DB Packet Storm

253315	6.8	警告	アップル	-	Apple Mac OS X の QuickTime におけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-0520	2010-04-16 16:57	2010-03-29	Show	GitHub Exploit DB Packet Storm

253316	6.8	警告	アップル	-	Apple Mac OS X の QuickTime における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2010-0519	2010-04-16 16:57	2010-03-29	Show	GitHub Exploit DB Packet Storm

253317	6.8	警告	アップル	-	Apple Mac OS X の QuickTime における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-0518	2010-04-16 16:56	2010-03-29	Show	GitHub Exploit DB Packet Storm

253318	6.8	警告	アップル	-	Apple Mac OS X の QuickTime におけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-0517	2010-04-16 16:56	2010-03-29	Show	GitHub Exploit DB Packet Storm

253319	6.8	警告	アップル	-	Apple Mac OS X の QuickTime におけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-0516	2010-04-15 18:39	2010-03-29	Show	GitHub Exploit DB Packet Storm

253320	6.8	警告	アップル	-	Apple Mac OS X の QuickTime における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-0515	2010-04-15 18:39	2010-03-29	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:April 30, 2026, 4:58 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
249381	9.8	CRITICAL Network	pvpgn	stats	An issue was discovered in PvPGN Stats 2.4.6. SQL Injection exists in ladder/stats.php via the GET game parameter.	CWE-89 SQL Injection	CVE-2017-18288	2024-11-21 12:19	2018-06-13	Show	GitHub Exploit DB Packet Storm

249382	9.8	CRITICAL Network	pvpgn	stats	An issue was discovered in PvPGN Stats 2.4.6. SQL Injection exists in ladder/stats.php via the POST user_search parameter.	CWE-89 SQL Injection	CVE-2017-18287	2024-11-21 12:19	2018-06-13	Show	GitHub Exploit DB Packet Storm

249383	7.8	HIGH Local	google	android	A crafted binder request can cause an arbitrary unmap in MediaServer in all Android releases from CAF (Android for MSM, Firefox OS for MSM, QRD Android) using the Linux Kernel.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2017-18154	2024-11-21 12:19	2018-06-7	Show	GitHub Exploit DB Packet Storm

249384	5.4	MEDIUM Network	nzedb	nzedb	nZEDb v0.7.3.3 has XSS in the 404 error page.	CWE-79 Cross-site Scripting	CVE-2017-18286	2024-11-21 12:19	2018-06-5	Show	GitHub Exploit DB Packet Storm

249385	7.1	HIGH Local	burp_project	burp	The Gentoo app-backup/burp package before 2.1.32 has incorrect group ownership of the /etc/burp directory, which might allow local users to obtain read and write access to arbitrary files by leveragi…	CWE-732 Incorrect Permission Assignment for Critical Resource	CVE-2017-18285	2024-11-21 12:19	2018-06-4	Show	GitHub Exploit DB Packet Storm

249386	7.1	HIGH Local	burp_project	burp	The Gentoo app-backup/burp package before 2.1.32 sets the ownership of the PID file directory to the burp account, which might allow local users to kill arbitrary processes by leveraging access to th…	CWE-732 Incorrect Permission Assignment for Critical Resource	CVE-2017-18284	2024-11-21 12:19	2018-06-4	Show	GitHub Exploit DB Packet Storm

249387	6.5	MEDIUM Network	imagemagick debian canonical	imagemagick debian_linux ubuntu_linux	In ImageMagick 7.0.7-16 Q16 x86_64 2017-12-22, an infinite loop vulnerability was found in the function ReadTXTImage in coders/txt.c, which allows attackers to cause a denial of service (CPU exhausti…	CWE-835 Loop with Unreachable Exit Condition ('Infinite Loop')	CVE-2017-18273	2024-11-21 12:19	2018-05-19	Show	GitHub Exploit DB Packet Storm

249388	6.5	MEDIUM Network	imagemagick	imagemagick	In ImageMagick 7.0.7-16 Q16 x86_64 2017-12-25, there is a use-after-free in ReadOneMNGImage in coders/png.c, which allows attackers to cause a denial of service via a crafted MNG image file that is m…	CWE-416 Use After Free	CVE-2017-18272	2024-11-21 12:19	2018-05-19	Show	GitHub Exploit DB Packet Storm

249389	6.5	MEDIUM Network	imagemagick canonical debian	imagemagick ubuntu_linux debian_linux	In ImageMagick 7.0.7-16 Q16 x86_64 2017-12-22, an infinite loop vulnerability was found in the function ReadMIFFImage in coders/miff.c, which allows attackers to cause a denial of service (CPU exhaus…	CWE-835 Loop with Unreachable Exit Condition ('Infinite Loop')	CVE-2017-18271	2024-11-21 12:19	2018-05-19	Show	GitHub Exploit DB Packet Storm

249390	7.1	HIGH Local	linux	linux_kernel	In the Linux kernel before 4.13.5, a local user could create keyrings for other users via keyctl commands, setting unwanted defaults or causing a denial of service.	NVD-CWE-noinfo	CVE-2017-18270	2024-11-21 12:19	2018-05-19	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed