Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 8, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
254121	6.8	警告	サイバートラスト株式会社レッドハット	-	TeX Live 2009 および teTeX の dvips における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2010-0827	2010-05-27 17:40	2010-05-6	Show	GitHub Exploit DB Packet Storm

254122	6.8	警告	サイバートラスト株式会社レッドハット	-	teTeX および TeXlive 2007 の hpc.c における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2007-5935	2010-05-27 17:40	2007-11-13	Show	GitHub Exploit DB Packet Storm

254123	4.3	警告	サイバートラスト株式会社レッドハット	-	dvipng および teTeX の set.c における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-0829	2010-05-27 17:40	2010-05-6	Show	GitHub Exploit DB Packet Storm

254124	1.9	注意	IBM	-	IBM WebSphere Application Server における KeyRingPassword のパスワード情報が漏えいする脆弱性	CWE-255 証明書・パスワード管理	CVE-2010-0769	2010-05-27 17:25	2010-04-1	Show	GitHub Exploit DB Packet Storm

254125	4.3	警告	IBM	-	IBM WebSphere Application Server の管理コンソールにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-0768	2010-05-27 17:25	2010-04-1	Show	GitHub Exploit DB Packet Storm

254126	4	警告	IBM	-	IBM WebSphere Application Server におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2010-0770	2010-05-27 17:25	2010-04-1	Show	GitHub Exploit DB Packet Storm

254127	5	警告	IBM	-	IBM WebSphere Application Server (WAS) の Administrative Console コンポーネントにおける WAS セッションの内容を読まれる脆弱性	CWE-200 情報漏えい	CVE-2009-1898	2010-05-27 17:24	2009-06-3	Show	GitHub Exploit DB Packet Storm

254128	6.8	警告	サイバートラスト株式会社レッドハット	-	TeX Live 2009 および teTeX の dvipsk/dospecial.c における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2010-1440	2010-05-26 16:33	2010-05-6	Show	GitHub Exploit DB Packet Storm

254129	6.8	警告	サイバートラスト株式会社レッドハット	-	TeX Live および teTeX の predospecial 関数における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2010-0739	2010-05-26 16:32	2010-04-16	Show	GitHub Exploit DB Packet Storm

254130	9.3	危険	アドビシステムズ	-	Adobe Photoshop CS4 における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-1279	2010-05-26 16:32	2010-04-30	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 8, 2026, 4:54 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
252411	6.1	MEDIUM Network	geminabox_project	geminabox	Stored cross-site scripting (XSS) vulnerability in "geminabox" (Gem in a Box) before 0.13.10 allows attackers to inject arbitrary web script via the "homepage" value of a ".gemspec" file, related to …	CWE-79 Cross-site Scripting	CVE-2017-16792	2024-11-21 12:16	2017-11-13	Show	GitHub Exploit DB Packet Storm

252412	5.4	MEDIUM Network	cmsmadesimple	cmsmadesimple	In CMS Made Simple 2.2.3.1, in modules/New/action.addcategory.php, stored XSS is possible via the m1_name parameter to admin/moduleinterface.php during addition of a category, a related issue to CVE-…	CWE-79 Cross-site Scripting	CVE-2017-16799	2024-11-21 12:16	2017-11-13	Show	GitHub Exploit DB Packet Storm

252413	5.4	MEDIUM Network	cmsmadesimple	cms_made_simple	In CMS Made Simple 2.2.3.1, the is_file_acceptable function in modules/FileManager/action.upload.php only blocks file extensions that begin or end with a "php" substring, which allows remote attacker…	CWE-79 Cross-site Scripting	CVE-2017-16798	2024-11-21 12:16	2017-11-13	Show	GitHub Exploit DB Packet Storm

252414	7.8	HIGH Local	swftools	swftools	In SWFTools 0.9.2, the png_load function in lib/png.c does not properly validate an alloclen_64 multiplication of width and height values, which allows remote attackers to cause a denial of service (…	CWE-190 Integer Overflow or Wraparound	CVE-2017-16797	2024-11-21 12:16	2017-11-13	Show	GitHub Exploit DB Packet Storm

252415	7.8	HIGH Local	swftools	swftools	In SWFTools 0.9.2, the png_load function in lib/png.c does not check the return value of a realloc call, which allows remote attackers to cause a denial of service (invalid write and application cras…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2017-16796	2024-11-21 12:16	2017-11-13	Show	GitHub Exploit DB Packet Storm

252416	5.5	MEDIUM Local	swftools	swftools	The png_load function in lib/png.c in SWFTools 0.9.2 does not properly validate a multiplication of width and bits-per-pixel values, which allows remote attackers to cause a denial of service (heap-b…	CWE-125 Out-of-bounds Read	CVE-2017-16794	2024-11-21 12:16	2017-11-12	Show	GitHub Exploit DB Packet Storm

252417	7.8	HIGH Local	swftools	swftools	The wav_convert2mono function in lib/wav.c in SWFTools 0.9.2 does not properly validate WAV data, which allows remote attackers to cause a denial of service (incorrect malloc and heap-based buffer ov…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2017-16793	2024-11-21 12:16	2017-11-12	Show	GitHub Exploit DB Packet Storm

252418	7.5	HIGH Network	inedo	buildmaster	Inedo BuildMaster before 5.8.2 does not properly restrict creation of RequireManageAllPrivileges event listeners.	CWE-269 Improper Privilege Management	CVE-2017-16520	2024-11-21 12:16	2017-11-11	Show	GitHub Exploit DB Packet Storm

252419	6.1	MEDIUM Network	cacti	cacti	Cacti 1.1.27 has reflected XSS via the PATH_INFO to host.php.	CWE-79 Cross-site Scripting	CVE-2017-16785	2024-11-21 12:16	2017-11-11	Show	GitHub Exploit DB Packet Storm

252420	6.1	MEDIUM Network	cmsmadesimple	cms_made_simple	In CMS Made Simple 2.2.2, there is Reflected XSS via the cntnt01detailtemplate parameter.	CWE-79 Cross-site Scripting	CVE-2017-16784	2024-11-21 12:16	2017-11-11	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed