Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 13, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
253521	2.1	注意	アップル	-	Windows 上で稼働する Apple QuickTime における重要な情報を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-0530	2010-12-27 15:07	2010-12-9	Show	GitHub Exploit DB Packet Storm

253522	9.3	危険	アップル	-	Windows 上で稼働する Apple QuickTime におけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-1508	2010-12-27 15:06	2010-12-9	Show	GitHub Exploit DB Packet Storm

253523	9.3	危険	アップル	-	Apple QuickTime における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-3800	2010-12-27 14:59	2010-12-9	Show	GitHub Exploit DB Packet Storm

253524	9.3	危険	マイクロソフト	-	Microsoft Internet Explorer における無効なフラグ参照に起因する脆弱性	CWE-399 リソース管理の問題	CVE-2010-3962	2010-12-27 14:36	2010-11-4	Show	GitHub Exploit DB Packet Storm

253525	10	危険	CA Technologies	-	CA PSFormX および CA WebScan ActiveX コントロールにおける任意のコードを実行される脆弱性	CWE-20 CWE-noinfo	CVE-2010-2193	2010-12-27 11:49	2010-06-8	Show	GitHub Exploit DB Packet Storm

253526	2.6	注意	CA Technologies	-	CA eHealth Performance Manager におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-0640	2010-12-27 11:44	2010-02-24	Show	GitHub Exploit DB Packet Storm

253527	9.3	危険	CA Technologies	-	CA eTrust PestPatrol の PestPatrol ActiveX コントロールにおけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2009-4225	2010-12-27 11:41	2009-12-8	Show	GitHub Exploit DB Packet Storm

253528	4.3	警告	CA Technologies	-	CA Service Desk の Web インターフェイスにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-4149	2010-12-27 11:38	2009-12-8	Show	GitHub Exploit DB Packet Storm

253529	4.3	警告	CA Technologies	-	複数の CA 製品の Anti-Virus エンジン内にある arclib コンポーネントおけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2009-3588	2010-12-27 11:36	2009-10-8	Show	GitHub Exploit DB Packet Storm

253530	9.3	危険	CA Technologies	-	複数の CA 製品の Anti-Virus エンジン内にある arclib コンポーネントにおける任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2009-3587	2010-12-27 11:32	2009-10-8	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 13, 2026, 5:05 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
247321	5.5	MEDIUM Local	entropymine	imageworsener	The iw_read_bmp_file function in imagew-bmp.c in libimageworsener.a in ImageWorsener 1.3.0 allows remote attackers to consume an amount of available memory via a crafted file.	CWE-772 Missing Release of Resource after Effective Lifetime	CVE-2017-7624	2024-11-21 12:32	2017-04-11	Show	GitHub Exploit DB Packet Storm

247322	5.5	MEDIUM Local	entropymine	imageworsener	The iwmiffr_convert_row32 function in imagew-miff.c in libimageworsener.a in ImageWorsener 1.3.0 allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted file.	CWE-125 Out-of-bounds Read	CVE-2017-7623	2024-11-21 12:32	2017-04-11	Show	GitHub Exploit DB Packet Storm

247323	8.8	HIGH Network	deepin	deepin_desktop_environment	dde-daemon, the daemon process of DDE (Deepin Desktop Environment) 15.0 through 15.3, runs with root privileges and hardly does anything to identify the user who calls the function through D-Bus. Any…	CWE-862 Missing Authorization	CVE-2017-7622	2024-11-21 12:32	2017-04-11	Show	GitHub Exploit DB Packet Storm

247324	7.5	HIGH Network	imagemagick	imagemagick	In ImageMagick 7.0.4-9, an infinite loop can occur because of a floating-point rounding error in some of the color algorithms. This affects ModulateHSL, ModulateHCL, ModulateHCLp, ModulateHSB, Modula…	CWE-835 Loop with Unreachable Exit Condition ('Infinite Loop')	CVE-2017-7619	2024-11-21 12:32	2017-04-10	Show	GitHub Exploit DB Packet Storm

247325	7.5	HIGH Network	linux	linux_kernel	crypto/ahash.c in the Linux kernel through 4.10.9 allows attackers to cause a denial of service (API operation calling its own callback, and infinite recursion) by triggering EBUSY on a full queue.	CWE-835 Loop with Unreachable Exit Condition ('Infinite Loop')	CVE-2017-7618	2024-11-21 12:32	2017-04-10	Show	GitHub Exploit DB Packet Storm

247326	8.8	HIGH Network	digium	asterisk certified_asterisk	Remote code execution can occur in Asterisk Open Source 13.x before 13.14.1 and 14.x before 14.3.1 and Certified Asterisk 13.13 before 13.13-cert3 because of a buffer overflow in a CDR user field, re…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2017-7617	2024-11-21 12:32	2017-04-10	Show	GitHub Exploit DB Packet Storm

247327	5.5	MEDIUM Local	linux	linux_kernel	Incorrect error handling in the set_mempolicy and mbind compat syscalls in mm/mempolicy.c in the Linux kernel through 4.10.9 allows local users to obtain sensitive information from uninitialized stac…	CWE-388 7PK - Errors	CVE-2017-7616	2024-11-21 12:32	2017-04-10	Show	GitHub Exploit DB Packet Storm

247328	9.8	CRITICAL Network	gnu	binutils	elflink.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, has a "member access within null pointer" undefined behavior issue, which might allow remote a…	CWE-476 NULL Pointer Dereference	CVE-2017-7614	2024-11-21 12:32	2017-04-9	Show	GitHub Exploit DB Packet Storm

247329	5.5	MEDIUM Local	elfutils_project debian canonical	elfutils debian_linux ubuntu_linux	elflint.c in elfutils 0.168 does not validate the number of sections and the number of segments, which allows remote attackers to cause a denial of service (memory consumption) via a crafted ELF file.	CWE-20 Improper Input Validation	CVE-2017-7613	2024-11-21 12:32	2017-04-9	Show	GitHub Exploit DB Packet Storm

247330	5.5	MEDIUM Local	elfutils_project debian canonical	elfutils debian_linux ubuntu_linux	The check_sysv_hash function in elflint.c in elfutils 0.168 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted ELF file.	CWE-125 Out-of-bounds Read	CVE-2017-7612	2024-11-21 12:32	2017-04-9	Show	GitHub Exploit DB Packet Storm