Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 10, 2026, 10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
253521	4.3	警告	有限会社のれんずプロ	-	AD-EDIT2 におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-2367	2010-10-5 11:02	2010-10-5	Show	GitHub Exploit DB Packet Storm

253522	9.3	危険	アップル	-	iPhone および iPod touch 上で稼動する Apple iOS の ImageIO におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-1817	2010-10-4 17:59	2010-09-8	Show	GitHub Exploit DB Packet Storm

253523	5.8	警告	アップル	-	iPhone および iPod touch 上で稼動する Apple iOS の FaceTime における通話をリダイレクトされる脆弱性	CWE-Other その他	CVE-2010-1810	2010-10-4 17:55	2010-09-8	Show	GitHub Exploit DB Packet Storm

253524	10	危険	アップル	-	iPhone および iPod touch 上で稼動する Apple iOS の Accessibility コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-1809	2010-10-4 17:55	2010-09-8	Show	GitHub Exploit DB Packet Storm

253525	4	警告	ISC, Inc. IBM サイバートラスト株式会社サン・マイクロシステムズターボリナックスヒューレット・パッカードレッドハット	-	BIND 9 の DNSSEC 検証処理における脆弱性	CWE-noinfo 情報不足	CVE-2009-4022	2010-10-1 17:39	2009-12-2	Show	GitHub Exploit DB Packet Storm

253526	4	警告	ISC, Inc. サイバートラスト株式会社ターボリナックスヒューレット・パッカードレッドハット	-	ISC BIND における DNS キャッシュ汚染の脆弱性	CWE-noinfo 情報不足	CVE-2010-0290	2010-10-1 17:39	2010-01-22	Show	GitHub Exploit DB Packet Storm

253527	7.6	危険	ISC, Inc. ヒューレット・パッカード	-	ISC BIND における処理範囲外のデータ処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2010-0382	2010-10-1 17:38	2010-01-22	Show	GitHub Exploit DB Packet Storm

253528	9	危険	日立	-	Groupmax Scheduler Server における複数の脆弱性	CWE-noinfo 情報不足	-	2010-10-1 17:37	2010-09-6	Show	GitHub Exploit DB Packet Storm

253529	5.8	警告	富士通アクセラテクノロジ	-	Accela BizSearch の文書参照画面におけるフィッシング脅威の脆弱性	CWE-noinfo 情報不足	-	2010-10-1 17:37	2010-09-2	Show	GitHub Exploit DB Packet Storm

253530	9.3	危険	Mozilla Foundation	-	Windows 上で稼働する複数の Mozilla 製品における任意のコードを実行される脆弱性	CWE-Other その他	CVE-2010-3131	2010-10-1 17:31	2010-09-7	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 10, 2026, 4:58 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
254971	8.8	HIGH Network	google	android	A remote code execution vulnerability in the Android media framework (libmpeg2). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID A-63874456.	CWE-682 Incorrect Calculation	CVE-2017-13151	2024-11-21 12:11	2017-12-6	Show	GitHub Exploit DB Packet Storm

254972	9.1	CRITICAL Network	google	android	An information disclosure vulnerability in the Android media framework (n/a). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0. Android ID A-38328132.	CWE-200 Information Exposure	CVE-2017-13150	2024-11-21 12:11	2017-12-6	Show	GitHub Exploit DB Packet Storm

254973	9.1	CRITICAL Network	google	android	An information disclosure vulnerability in the Android media framework (n/a). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0. Android ID A-65719872.	CWE-200 Information Exposure	CVE-2017-13149	2024-11-21 12:11	2017-12-6	Show	GitHub Exploit DB Packet Storm

254974	6.5	MEDIUM Network	google	android	A denial of service vulnerability in the Android media framework (libmpeg2). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID A-65717533.	CWE-20 Improper Input Validation	CVE-2017-13148	2024-11-21 12:11	2017-12-6	Show	GitHub Exploit DB Packet Storm

254975	4.8	MEDIUM Physics	ethicon	endo-surgery_generator_gen11_firmware	An improper authentication issue was discovered in Johnson & Johnson Ethicon Endo-Surgery Generator Gen11, all versions released before November 29, 2017. The security authentication mechanism used b…	CWE-287 Improper Authentication	CVE-2017-14018	2024-11-21 12:11	2017-12-6	Show	GitHub Exploit DB Packet Storm

254976	9.8	CRITICAL Network	ismartalarm	cubeone_firmware	Password file exposure in firmware in iSmartAlarm CubeOne version 2.2.4.8 and earlier allows attackers to execute arbitrary commands with administrative privileges by retrieving credentials from this…	CWE-200 Information Exposure	CVE-2017-13664	2024-11-21 12:11	2017-12-2	Show	GitHub Exploit DB Packet Storm

254977	7.5	HIGH Network	ismartalarm	cubeone_firmware	Encryption key exposure in firmware in iSmartAlarm CubeOne version 2.2.4.8 and earlier allows attackers to decrypt log files via an exposed key.	CWE-312 Cleartext Storage of Sensitive Information	CVE-2017-13663	2024-11-21 12:11	2017-12-2	Show	GitHub Exploit DB Packet Storm

254978	8.1	HIGH Network	apple	mac_os_x	An issue was discovered in certain Apple products. macOS High Sierra before Security Update 2017-001 is affected. The issue involves the "Directory Utility" component. It allows attackers to obtain a…	CWE-287 Improper Authentication	CVE-2017-13872	2024-11-21 12:11	2017-11-30	Show	GitHub Exploit DB Packet Storm

254979	9.8	CRITICAL Network	moxa	eds-g512e_firmware	An issue was discovered on MOXA EDS-G512E 5.1 build 16072215 devices. The backup file contains sensitive information in a insecure way. There is no salt for password hashing. Indeed passwords are sto…	CWE-200 Information Exposure	CVE-2017-13701	2024-11-21 12:11	2017-11-24	Show	GitHub Exploit DB Packet Storm

254980	7.5	HIGH Network	moxa	eds-g512e_firmware	An issue was discovered on MOXA EDS-G512E 5.1 build 16072215 devices. The password encryption method can be retrieved from the firmware. This encryption method is based on a chall value that is sent …	CWE-326 Inadequate Encryption Strength	CVE-2017-13699	2024-11-21 12:11	2017-11-24	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed