Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 18, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
253451	4.3	警告	アップル GNU Project ターボリナックスサイバートラスト株式会社レッドハット	-	Mailman における複数のクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-0564	2011-06-3 08:55	2008-02-5	Show	GitHub Exploit DB Packet Storm

253452	10	危険	7-Technologies	-	7-Technologies Interactive Graphical SCADA System の IGSSdataServer.exe におけるスタックベースのオーバーフロー脆弱性	CWE-119 バッファエラー	CVE-2011-1567	2011-06-2 09:51	2011-04-5	Show	GitHub Exploit DB Packet Storm

253453	10	危険	7-Technologies	-	7-Technologies Interactive Graphical SCADA System の dc.exe におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2011-1566	2011-06-2 09:50	2011-04-5	Show	GitHub Exploit DB Packet Storm

253454	10	危険	7-Technologies	-	7-Technologies Interactive Graphical SCADA System の IGSSdataServer.exe におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2011-1565	2011-06-2 09:48	2011-04-5	Show	GitHub Exploit DB Packet Storm

253455	10	危険	RealFlex Technologies	-	DATAC RealFlex RealWin の HMI アプリケーションにおける整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2011-1564	2011-06-2 09:47	2011-04-5	Show	GitHub Exploit DB Packet Storm

253456	10	危険	RealFlex Technologies	-	DATAC RealFlex RealWin の HMI アプリケーションにおけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2011-1563	2011-06-2 09:46	2011-04-5	Show	GitHub Exploit DB Packet Storm

253457	4.7	警告	レッドハット Richard W.M. Jones	-	virt-v2v および virt-inspector などの製品に使用される libguestfs におけるホスト OS 上のファイルを読まれる脆弱性	CWE-200 情報漏えい	CVE-2010-3851	2011-06-1 10:25	2010-11-4	Show	GitHub Exploit DB Packet Storm

253458	4.4	警告	Todd C. Miller レッドハット	-	sudo の check.c における認証要求を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-0010	2011-05-31 11:41	2011-01-18	Show	GitHub Exploit DB Packet Storm

253459	-	-	SmarterTools Inc.	-	SmarterTools 製ウェブサーバに複数の脆弱性	-	-	2011-05-31 11:40	2011-05-19	Show	GitHub Exploit DB Packet Storm

253460	-	-	OpenSSL Project	-	OpenSSL における ECDSA 秘密鍵が漏えいしてしまう問題	-	-	2011-05-31 11:23	2011-05-18	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 19, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
254021	9.8	CRITICAL Network	jextn	jextn_video_gallery	The JEXTN Video Gallery extension 3.0.5 for Joomla! has SQL Injection via the id parameter in a view=category action.	CWE-89 SQL Injection	CVE-2017-17872	2024-11-21 12:18	2017-12-28	Show	GitHub Exploit DB Packet Storm

254022	9.8	CRITICAL Network	jextn	jextn_question_and_answer	The "JEXTN Question And Answer" extension 3.1.0 for Joomla! has SQL Injection via the an parameter in a view=tags action, or the ques-srch parameter.	CWE-89 SQL Injection	CVE-2017-17871	2024-11-21 12:18	2017-12-28	Show	GitHub Exploit DB Packet Storm

254023	9.8	CRITICAL Network	jbuildozer	jbuildozer	The JBuildozer extension 1.4.1 for Joomla! has SQL Injection via the appid parameter in an entriessearch action.	CWE-89 SQL Injection	CVE-2017-17870	2024-11-21 12:18	2017-12-28	Show	GitHub Exploit DB Packet Storm

254024	6.1	MEDIUM Network	mgl-instagram-gallery_project	mgl-instagram-gallery	The mgl-instagram-gallery plugin for WordPress has XSS via the single-gallery.php media parameter.	CWE-79 Cross-site Scripting	CVE-2017-17869	2024-11-21 12:18	2017-12-28	Show	GitHub Exploit DB Packet Storm

254025	6.1	MEDIUM Network	liferay	liferay_portal	In Liferay Portal 6.1.0, the tags section has XSS via a Public Render Parameter (p_r_p) value, as demonstrated by p_r_p_564233524_tag.	CWE-79 Cross-site Scripting	CVE-2017-17868	2024-11-21 12:18	2017-12-28	Show	GitHub Exploit DB Packet Storm

254026	7.8	HIGH Local	artifex debian	mupdf debian_linux	pdf/pdf-write.c in Artifex MuPDF before 1.12.0 mishandles certain length changes when a repair operation occurs during a clean operation, which allows remote attackers to cause a denial of service (b…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2017-17866	2024-11-21 12:18	2017-12-28	Show	GitHub Exploit DB Packet Storm

254027	3.3	LOW Local	linux debian	linux_kernel debian_linux	kernel/bpf/verifier.c in the Linux kernel through 4.14.8 mishandles states_equal comparisons between the pointer data type and the UNKNOWN_VALUE data type, which allows local users to obtain potentia…	CWE-200 Information Exposure	CVE-2017-17864	2024-11-21 12:18	2017-12-28	Show	GitHub Exploit DB Packet Storm

254028	7.8	HIGH Local	linux debian	linux_kernel debian_linux	kernel/bpf/verifier.c in the Linux kernel 4.9.x through 4.9.71 does not check the relationship between pointer values and the BPF stack, which allows local users to cause a denial of service (integer…	CWE-190 Integer Overflow or Wraparound	CVE-2017-17863	2024-11-21 12:18	2017-12-28	Show	GitHub Exploit DB Packet Storm

254029	5.5	MEDIUM Local	linux debian	linux_kernel debian_linux	kernel/bpf/verifier.c in the Linux kernel through 4.14.8 ignores unreachable code, even though it would still be processed by JIT compilers. This behavior, also considered an improper branch-pruning …	CWE-20 Improper Input Validation	CVE-2017-17862	2024-11-21 12:18	2017-12-28	Show	GitHub Exploit DB Packet Storm

254030	6.1	MEDIUM Network	samsung	internet_browser	Samsung Internet Browser 6.2.01.12 allows remote attackers to bypass the Same Origin Policy, and conduct UXSS attacks to obtain sensitive information, via vectors involving an IFRAME element inside X…	CWE-79 Cross-site Scripting	CVE-2017-17859	2024-11-21 12:18	2017-12-28	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed