Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":May 1, 2026, 6 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 253721 | 5 | 警告 | サン・マイクロシステムズ | - | Sun ONE/iPlanet Web Server におけるサービス運用妨害 (DoS) の脆弱性 |
CWE-noinfo
情報不足 |
CVE-2003-1590 | 2010-03-15 16:39 | 2003-08-13 | Show | GitHub Exploit DB Packet Storm |
| 253722 | 7.1 | 危険 | サイバートラスト株式会社 Linux レッドハット |
- | Linux kernel の handle_dr 関数におけるサービス運用妨害 (DoS) の脆弱性 |
CWE-264
認可・権限・アクセス制御 |
CVE-2009-3722 | 2010-03-15 15:23 | 2009-10-30 | Show | GitHub Exploit DB Packet Storm |
| 253723 | 4.3 | 警告 | シュナイダーエレクトリック株式会社 (旧社名株式会社エーピーシー・ジャパン) | - | APC Switched Rack PDU におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2009-4406 | 2010-03-12 15:13 | 2009-12-23 | Show | GitHub Exploit DB Packet Storm |
| 253724 | 4.3 | 警告 | シュナイダーエレクトリック株式会社 (旧社名株式会社エーピーシー・ジャパン) | - | APC Network Management Card におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2009-1798 | 2010-03-12 15:13 | 2009-12-28 | Show | GitHub Exploit DB Packet Storm |
| 253725 | 6.8 | 警告 | シュナイダーエレクトリック株式会社 (旧社名株式会社エーピーシー・ジャパン) | - | APC Network Management Card におけるクロスサイトリクエストフォージェリの脆弱性 |
CWE-352
同一生成元ポリシー違反 |
CVE-2009-1797 | 2010-03-12 15:12 | 2009-12-28 | Show | GitHub Exploit DB Packet Storm |
| 253726 | 6.6 | 警告 | 日立 | - | JP1/Cm2/Network Node Manager のリモートコンソールにおけるファイルパーミッションの脆弱性 |
CWE-264
認可・権限・アクセス制御 |
- | 2010-03-12 15:12 | 2010-02-26 | Show | GitHub Exploit DB Packet Storm |
| 253727 | 9.3 | 危険 | Panda Security | - | Panda Security ActiveScan におけるコンポーネントのデジタル署名を検証しない問題 |
CWE-94
コード・インジェクション |
CVE-2009-3735 | 2010-03-12 15:12 | 2010-02-12 | Show | GitHub Exploit DB Packet Storm |
| 253728 | 5 | 警告 | サイバートラスト株式会社 OpenSSL Project IBM レッドハット |
- | OpenSSL の dtls1_retrieve_buffered_fragment 関数におけるサービス運用妨害 (DoS) の脆弱性 |
CWE-399
リソース管理の問題 |
CVE-2009-1379 | 2010-03-12 14:44 | 2009-05-19 | Show | GitHub Exploit DB Packet Storm |
| 253729 | 5 | 警告 | サイバートラスト株式会社 OpenSSL Project IBM レッドハット |
- | OpenSSL の dtls1_process_out_of_seq_message 関数におけるサービス運用妨害 (DoS) の脆弱性 |
CWE-399
リソース管理の問題 |
CVE-2009-1378 | 2010-03-12 14:44 | 2009-05-19 | Show | GitHub Exploit DB Packet Storm |
| 253730 | 5 | 警告 | サイバートラスト株式会社 OpenSSL Project IBM レッドハット |
- | OpenSSL の dtls1_buffer_record 関数におけるサービス運用妨害 (DoS) の脆弱性 |
CWE-119
バッファエラー |
CVE-2009-1377 | 2010-03-12 14:43 | 2009-05-19 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:May 1, 2026, 4:54 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 252481 | 5.3 |
MEDIUM
Network |
trendmicro | officescan | Information disclosure vulnerabilities in Trend Micro OfficeScan 11.0 and XG may allow unauthenticated users who can access the OfficeScan server to query the network's NT domain or the PHP version a… |
CWE-200
Information Exposure |
CVE-2017-14085 | 2024-11-21 12:12 | 2017-10-6 | Show | GitHub Exploit DB Packet Storm |
| 252482 | 8.1 |
HIGH
Network |
trendmicro | officescan | A potential Man-in-the-Middle (MitM) attack vulnerability in Trend Micro OfficeScan 11.0 and XG may allow attackers to execute arbitrary code on vulnerable installations. |
NVD-CWE-noinfo
|
CVE-2017-14084 | 2024-11-21 12:12 | 2017-10-6 | Show | GitHub Exploit DB Packet Storm |
| 252483 | 7.5 |
HIGH
Network |
trendmicro | officescan | A vulnerability in Trend Micro OfficeScan 11.0 and XG allows remote unauthenticated users who can access the system to download the OfficeScan encryption file. |
NVD-CWE-noinfo
|
CVE-2017-14083 | 2024-11-21 12:12 | 2017-10-6 | Show | GitHub Exploit DB Packet Storm |
| 252484 | 6.1 |
MEDIUM
Network |
hp | ucmdb_foundation_software | A remote cross-site scripting vulnerability in HP UCMDB Foundation Software versions 10.10, 10.11, 10.20, 10.21, 10.22, 10.30, 10.31, 10.32, and 10.33 could be remotely exploited to allow cross-site … |
CWE-79
Cross-site Scripting |
CVE-2017-14354 | 2024-11-21 12:12 | 2017-10-6 | Show | GitHub Exploit DB Packet Storm |
| 252485 | 8.8 |
HIGH
Network |
hp | ucmdb_foundation_software | A remote code execution vulnerability in HP UCMDB Foundation Software versions 10.10, 10.11, 10.20, 10.21, 10.22, 10.30, 10.31, 10.32, and 10.33, could be remotely exploited to allow code execution. |
CWE-94
Code Injection |
CVE-2017-14353 | 2024-11-21 12:12 | 2017-10-6 | Show | GitHub Exploit DB Packet Storm |
| 252486 | 9.8 |
CRITICAL
Network |
thekelleys redhat canonical debian opensuse suse nvidia huawei arista siemens arubanetworks synology |
dnsmasq enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server ubuntu_linux debian_linux leap linux_enterprise_server linux_enterprise_debuginfo linu… |
Heap-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted DNS response. |
CWE-787
Out-of-bounds Write |
CVE-2017-14491 | 2024-11-21 12:12 | 2017-10-4 | Show | GitHub Exploit DB Packet Storm |
| 252487 | 7.5 |
HIGH
Network |
redhat debian novell canonical thekelleys |
enterprise_linux_desktop android enterprise_linux_workstation enterprise_linux_server debian_linux leap ubuntu_linux dnsmasq |
Integer underflow in the add_pseudoheader function in dnsmasq before 2.78 , when the --add-mac, --add-cpe-id or --add-subnet option is specified, allows remote attackers to cause a denial of service … |
CWE-191
Integer Underflow (Wrap or Wraparound) |
CVE-2017-14496 | 2024-11-21 12:12 | 2017-10-3 | Show | GitHub Exploit DB Packet Storm |
| 252488 | 7.5 |
HIGH
Network |
redhat debian canonical thekelleys |
enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server debian_linux ubuntu_linux dnsmasq |
Memory leak in dnsmasq before 2.78, when the --add-mac, --add-cpe-id or --add-subnet option is specified, allows remote attackers to cause a denial of service (memory consumption) via vectors involvi… |
CWE-772
Missing Release of Resource after Effective Lifetime |
CVE-2017-14495 | 2024-11-21 12:12 | 2017-10-3 | Show | GitHub Exploit DB Packet Storm |
| 252489 | 5.9 |
MEDIUM
Network |
redhat debian novell canonical thekelleys |
enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server debian_linux leap ubuntu_linux dnsmasq |
dnsmasq before 2.78, when configured as a relay, allows remote attackers to obtain sensitive memory information via vectors involving handling DHCPv6 forwarded requests. |
CWE-200
Information Exposure |
CVE-2017-14494 | 2024-11-21 12:12 | 2017-10-3 | Show | GitHub Exploit DB Packet Storm |
| 252490 | 9.8 |
CRITICAL
Network |
redhat debian canonical opensuse thekelleys |
enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server debian_linux ubuntu_linux leap dnsmasq |
Stack-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted DHCPv6 request. |
CWE-119
Incorrect Access of Indexable Resource ('Range Error') |
CVE-2017-14493 | 2024-11-21 12:12 | 2017-10-3 | Show | GitHub Exploit DB Packet Storm |