Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 5, 2026, 2 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
253831 9.3 危険 マイクロソフト - Microsoft Internet Explorer における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2010-0245 2010-02-22 12:13 2010-01-21 Show GitHub Exploit DB Packet Storm
253832 4.3 警告 マイクロソフト - Microsoft Internet Explorer の XSS フィルタにおけるクロスサイトスクリプティングの脆弱性 CWE-DesignError
CVE-2009-4074 2010-02-22 12:13 2009-11-25 Show GitHub Exploit DB Packet Storm
253833 6.6 警告 マイクロソフト - Microsoft Windows の kernel における権限昇格の脆弱性 CWE-20
不適切な入力確認
CVE-2010-0232 2010-02-22 12:12 2010-01-20 Show GitHub Exploit DB Packet Storm
253834 10 危険 Rockwell Automation - Rockwell Automation Allen-Bradley MicroLogix PLC に複数の脆弱性 CWE-noinfo
情報不足
CVE-2009-3739 2010-02-19 14:22 2010-01-21 Show GitHub Exploit DB Packet Storm
253835 9.3 危険 マイクロソフト - Microsoft Internet Explorer において任意のコードが実行される脆弱性 CWE-399
リソース管理の問題
CVE-2010-0249 2010-02-19 14:21 2010-01-15 Show GitHub Exploit DB Packet Storm
253836 7.5 危険 アップル
MySQL AB
- MySQL で使用される yaSSL におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2008-0227 2010-02-19 11:37 2008-01-10 Show GitHub Exploit DB Packet Storm
253837 7.5 危険 アップル
MySQL AB
- MySQL で使用される yaSSL における複数のバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2008-0226 2010-02-19 11:32 2008-01-10 Show GitHub Exploit DB Packet Storm
253838 7.5 危険 Linux
レッドハット
- Linux kernel の do_coredump 関数における任意のファイルを改ざんされる脆弱性 - CVE-2006-6304 2010-02-18 14:28 2006-12-14 Show GitHub Exploit DB Packet Storm
253839 7.8 危険 Linux
レッドハット
- Linux kernel の net/ipv4/route.c 用の特定のレッドハットパッチにおけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2009-4272 2010-02-18 14:28 2010-01-19 Show GitHub Exploit DB Packet Storm
253840 9.3 危険 レッドハット
リアルネットワークス
- Realnetworks RealPlayer におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2009-4248 2010-02-17 11:48 2010-01-19 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 5, 2026, 4:51 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
247951 7.8 HIGH
Local
libxls_project
debian
libxls
debian_linux
An exploitable stack based buffer overflow vulnerability exists in the xls_getfcell function of libxls 1.3.4. A specially crafted XLS file can cause a memory corruption resulting in remote code execu… CWE-787
 Out-of-bounds Write
CVE-2017-2919 2024-11-21 12:24 2017-11-21 Show GitHub Exploit DB Packet Storm
247952 7.8 HIGH
Local
libxls_project libxls An exploitable out-of-bounds write vulnerability exists in the read_MSAT function of libxls 1.4. A specially crafted XLS file can cause a memory corruption resulting in remote code execution. An atta… CWE-787
 Out-of-bounds Write
CVE-2017-2897 2024-11-21 12:24 2017-11-21 Show GitHub Exploit DB Packet Storm
247953 7.8 HIGH
Local
libxls_project
debian
libxls
debian_linux
An exploitable out-of-bounds write vulnerability exists in the xls_mergedCells function of libxls 1.4. . A specially crafted XLS file can cause a memory corruption resulting in remote code execution.… CWE-787
 Out-of-bounds Write
CVE-2017-2896 2024-11-21 12:24 2017-11-21 Show GitHub Exploit DB Packet Storm
247954 5.5 MEDIUM
Local
apache
debian
redhat
openoffice
debian_linux
enterprise_linux_desktop
enterprise_linux_workstation
enterprise_linux_server
enterprise_linux_server_tus
enterprise_linux_server_aus
enterprise_linux_ser…
By exploiting the way Apache OpenOffice before 4.1.4 renders embedded objects, an attacker could craft a document that allows reading in a file from the user's filesystem. Information could be retrie… CWE-200
Information Exposure
CVE-2017-3157 2024-11-21 12:24 2017-11-21 Show GitHub Exploit DB Packet Storm
247955 7.8 HIGH
Local
apache hadoop In Apache Hadoop versions 2.6.1 to 2.6.5, 2.7.0 to 2.7.3, and 3.0.0-alpha1, if a file in an encryption zone with access permissions that make it world readable is localized via YARN's localization me… CWE-732
 Incorrect Permission Assignment for Critical Resource
CVE-2017-3166 2024-11-21 12:24 2017-11-13 Show GitHub Exploit DB Packet Storm
247956 9.8 CRITICAL
Network
cesanta mongoose An exploitable memory corruption vulnerability exists in the Websocket protocol implementation of Cesanta Mongoose 6.8. A specially crafted websocket packet can cause a buffer to be allocated while l… CWE-416
 Use After Free
CVE-2017-2922 2024-11-21 12:24 2017-11-8 Show GitHub Exploit DB Packet Storm
247957 9.8 CRITICAL
Network
cesanta mongoose An exploitable memory corruption vulnerability exists in the Websocket protocol implementation of Cesanta Mongoose 6.8. A specially crafted websocket packet can cause an integer overflow, leading to … CWE-190
 Integer Overflow or Wraparound
CVE-2017-2921 2024-11-21 12:24 2017-11-8 Show GitHub Exploit DB Packet Storm
247958 8.8 HIGH
Network
meetcircle circle_with_disney_firmware An exploitable vulnerability exists in the notifications functionality of Circle with Disney running firmware 2.0.1. Specially crafted network packets can cause an OS command injection. An attacker c… CWE-78
OS Command 
CVE-2017-2917 2024-11-21 12:24 2017-11-8 Show GitHub Exploit DB Packet Storm
247959 8.8 HIGH
Network
meetcircle circle_with_disney_firmware An exploitable vulnerability exists in the /api/CONFIG/restore functionality of Circle with Disney running firmware 2.0.1. Specially crafted network packets can cause an arbitrary file to be overwrit… CWE-59
Link Following
CVE-2017-2916 2024-11-21 12:24 2017-11-8 Show GitHub Exploit DB Packet Storm
247960 8.0 HIGH
Adjacent
meetcircle circle_with_disney_firmware An exploitable vulnerability exists in the WiFi configuration functionality of Circle with Disney running firmware 2.0.1. A specially crafted SSID can cause the device to execute arbitrary shell comm… NVD-CWE-noinfo
CVE-2017-2915 2024-11-21 12:24 2017-11-8 Show GitHub Exploit DB Packet Storm