Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":May 1, 2026, 6 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 253991 | 4.6 | 警告 | IBM | - | IBM DB2 の dasauto における管理者権限を持たないユーザが実行可能な脆弱性 |
CWE-264
認可・権限・アクセス制御 |
CVE-2009-4150 | 2010-01-15 14:10 | 2009-12-2 | Show | GitHub Exploit DB Packet Storm |
| 253992 | 2.1 | 注意 | サン・マイクロシステムズ | - | Sun Solaris の ldap_cachemgr におけるサービス運用妨害 (DoS) の脆弱性 |
CWE-Other
その他 |
CVE-2009-4080 | 2010-01-15 14:10 | 2009-11-24 | Show | GitHub Exploit DB Packet Storm |
| 253993 | 5 | 警告 | サン・マイクロシステムズ | - | Sun Solaris の sshd におけるサービス運用妨害 (DoS) の脆弱性 |
CWE-noinfo
情報不足 |
CVE-2009-4075 | 2010-01-15 14:09 | 2009-11-23 | Show | GitHub Exploit DB Packet Storm |
| 253994 | 2.6 | 注意 | オラクル | - | Oracle Application Server におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
- | 2010-01-14 15:01 | 2010-01-14 | Show | GitHub Exploit DB Packet Storm |
| 253995 | 9.3 | 危険 | マイクロソフト | - | Microsoft Internet Explorer に脆弱性 |
CWE-94
コード・インジェクション |
CVE-2009-3672 | 2010-01-14 12:08 | 2009-11-25 | Show | GitHub Exploit DB Packet Storm |
| 253996 | 9.3 | 危険 | サン・マイクロシステムズ VMware |
- | Sun Java SE の java.lang パッケージにおける脆弱性 |
CWE-362
競合状態 |
CVE-2009-2724 | 2010-01-14 12:08 | 2009-08-10 | Show | GitHub Exploit DB Packet Storm |
| 253997 | 10 | 危険 | サン・マイクロシステムズ VMware |
- | Sun Java SE の Provider クラスにおける脆弱性 |
CWE-noinfo
情報不足 |
CVE-2009-2721 | 2010-01-14 12:08 | 2009-08-10 | Show | GitHub Exploit DB Packet Storm |
| 253998 | 5 | 警告 | 有限会社シースリー | - | WebCalenderC3 におけるディレクトリトラバーサルの脆弱性 |
CWE-22
パス・トラバーサル |
CVE-2010-0348 | 2010-01-12 15:01 | 2010-01-12 | Show | GitHub Exploit DB Packet Storm |
| 253999 | 4.3 | 警告 | 有限会社シースリー | - | WebCalenderC3 におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2010-0349 | 2010-01-12 15:00 | 2010-01-12 | Show | GitHub Exploit DB Packet Storm |
| 254000 | 10 | 危険 | サイバートラスト株式会社 XEmacs |
- | XEmacs の glyphs-eimage.c における整数オーバーフローの脆弱性 |
CWE-189
数値処理の問題 |
CVE-2009-2688 | 2010-01-12 14:48 | 2009-08-5 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:May 1, 2026, 4:54 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 252481 | 5.3 |
MEDIUM
Network |
trendmicro | officescan | Information disclosure vulnerabilities in Trend Micro OfficeScan 11.0 and XG may allow unauthenticated users who can access the OfficeScan server to query the network's NT domain or the PHP version a… |
CWE-200
Information Exposure |
CVE-2017-14085 | 2024-11-21 12:12 | 2017-10-6 | Show | GitHub Exploit DB Packet Storm |
| 252482 | 8.1 |
HIGH
Network |
trendmicro | officescan | A potential Man-in-the-Middle (MitM) attack vulnerability in Trend Micro OfficeScan 11.0 and XG may allow attackers to execute arbitrary code on vulnerable installations. |
NVD-CWE-noinfo
|
CVE-2017-14084 | 2024-11-21 12:12 | 2017-10-6 | Show | GitHub Exploit DB Packet Storm |
| 252483 | 7.5 |
HIGH
Network |
trendmicro | officescan | A vulnerability in Trend Micro OfficeScan 11.0 and XG allows remote unauthenticated users who can access the system to download the OfficeScan encryption file. |
NVD-CWE-noinfo
|
CVE-2017-14083 | 2024-11-21 12:12 | 2017-10-6 | Show | GitHub Exploit DB Packet Storm |
| 252484 | 6.1 |
MEDIUM
Network |
hp | ucmdb_foundation_software | A remote cross-site scripting vulnerability in HP UCMDB Foundation Software versions 10.10, 10.11, 10.20, 10.21, 10.22, 10.30, 10.31, 10.32, and 10.33 could be remotely exploited to allow cross-site … |
CWE-79
Cross-site Scripting |
CVE-2017-14354 | 2024-11-21 12:12 | 2017-10-6 | Show | GitHub Exploit DB Packet Storm |
| 252485 | 8.8 |
HIGH
Network |
hp | ucmdb_foundation_software | A remote code execution vulnerability in HP UCMDB Foundation Software versions 10.10, 10.11, 10.20, 10.21, 10.22, 10.30, 10.31, 10.32, and 10.33, could be remotely exploited to allow code execution. |
CWE-94
Code Injection |
CVE-2017-14353 | 2024-11-21 12:12 | 2017-10-6 | Show | GitHub Exploit DB Packet Storm |
| 252486 | 9.8 |
CRITICAL
Network |
thekelleys redhat canonical debian opensuse suse nvidia huawei arista siemens arubanetworks synology |
dnsmasq enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server ubuntu_linux debian_linux leap linux_enterprise_server linux_enterprise_debuginfo linu… |
Heap-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted DNS response. |
CWE-787
Out-of-bounds Write |
CVE-2017-14491 | 2024-11-21 12:12 | 2017-10-4 | Show | GitHub Exploit DB Packet Storm |
| 252487 | 7.5 |
HIGH
Network |
redhat debian novell canonical thekelleys |
enterprise_linux_desktop android enterprise_linux_workstation enterprise_linux_server debian_linux leap ubuntu_linux dnsmasq |
Integer underflow in the add_pseudoheader function in dnsmasq before 2.78 , when the --add-mac, --add-cpe-id or --add-subnet option is specified, allows remote attackers to cause a denial of service … |
CWE-191
Integer Underflow (Wrap or Wraparound) |
CVE-2017-14496 | 2024-11-21 12:12 | 2017-10-3 | Show | GitHub Exploit DB Packet Storm |
| 252488 | 7.5 |
HIGH
Network |
redhat debian canonical thekelleys |
enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server debian_linux ubuntu_linux dnsmasq |
Memory leak in dnsmasq before 2.78, when the --add-mac, --add-cpe-id or --add-subnet option is specified, allows remote attackers to cause a denial of service (memory consumption) via vectors involvi… |
CWE-772
Missing Release of Resource after Effective Lifetime |
CVE-2017-14495 | 2024-11-21 12:12 | 2017-10-3 | Show | GitHub Exploit DB Packet Storm |
| 252489 | 5.9 |
MEDIUM
Network |
redhat debian novell canonical thekelleys |
enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server debian_linux leap ubuntu_linux dnsmasq |
dnsmasq before 2.78, when configured as a relay, allows remote attackers to obtain sensitive memory information via vectors involving handling DHCPv6 forwarded requests. |
CWE-200
Information Exposure |
CVE-2017-14494 | 2024-11-21 12:12 | 2017-10-3 | Show | GitHub Exploit DB Packet Storm |
| 252490 | 9.8 |
CRITICAL
Network |
redhat debian canonical opensuse thekelleys |
enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server debian_linux ubuntu_linux leap dnsmasq |
Stack-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted DHCPv6 request. |
CWE-119
Incorrect Access of Indexable Resource ('Range Error') |
CVE-2017-14493 | 2024-11-21 12:12 | 2017-10-3 | Show | GitHub Exploit DB Packet Storm |