Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":May 7, 2026, 6 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 254131 | 6.8 | 警告 | IBM | - | IBM Lotus Domino Web Access におけるクロスサイトリクエストフォージェリの脆弱性 |
CWE-352
同一生成元ポリシー違反 |
CVE-2010-0921 | 2010-03-16 11:15 | 2010-03-3 | Show | GitHub Exploit DB Packet Storm |
| 254132 | 4.3 | 警告 | IBM | - | IBM Lotus Domino Web Access におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2010-0920 | 2010-03-16 11:14 | 2010-03-3 | Show | GitHub Exploit DB Packet Storm |
| 254133 | 10 | 危険 | IBM | - | IBM Lotus Domino Web Access の UltraLite 機能における脆弱性 |
CWE-noinfo
情報不足 |
CVE-2010-0918 | 2010-03-16 11:14 | 2010-03-3 | Show | GitHub Exploit DB Packet Storm |
| 254134 | 4.9 | 警告 | サイバートラスト株式会社 レッドハット SystemTap |
- | SystemTap の _get_argv および _get_compat_argv 関数におけるサービス運用妨害 (DoS) の脆弱性 |
CWE-189
数値処理の問題 |
CVE-2010-0411 | 2010-03-16 11:14 | 2010-02-8 | Show | GitHub Exploit DB Packet Storm |
| 254135 | 10 | 危険 | サイバートラスト株式会社 レッドハット SystemTap |
- | SystemTap の stap-server における任意のコマンドを実行される脆弱性 |
CWE-94
コード・インジェクション |
CVE-2009-4273 | 2010-03-16 11:14 | 2010-01-26 | Show | GitHub Exploit DB Packet Storm |
| 254136 | 6.5 | 警告 | サイバートラスト株式会社 Linux レッドハット |
- | KVM の x86 エミュレータにおける権限昇格の脆弱性 |
CWE-264
認可・権限・アクセス制御 |
CVE-2010-0298 | 2010-03-16 11:13 | 2010-02-9 | Show | GitHub Exploit DB Packet Storm |
| 254137 | 4.4 | 警告 | サイバートラスト株式会社 Fabrice Bellard レッドハット |
- | QEMU の usb_host_handle_control 関数におけるバッファオーバーフローの脆弱性 |
CWE-119
バッファエラー |
CVE-2010-0297 | 2010-03-16 11:13 | 2010-02-9 | Show | GitHub Exploit DB Packet Storm |
| 254138 | 6.8 | 警告 | サン・マイクロシステムズ freedesktop.org |
- | Poppler における整数オーバーフローの脆弱性 |
CWE-189
数値処理の問題 |
CVE-2009-3605 | 2010-03-15 16:40 | 2009-11-2 | Show | GitHub Exploit DB Packet Storm |
| 254139 | 4.1 | 警告 | Linux レッドハット |
- | Linux kernel の smbfs に関する脆弱性 | - | CVE-2006-5871 | 2010-03-15 16:40 | 2005-10-5 | Show | GitHub Exploit DB Packet Storm |
| 254140 | 7.8 | 危険 | Linux レッドハット |
- | Linux kernel の selinux_parse_skb_ipv6 関数におけるサービス運用妨害 (DoS) の脆弱性 |
CWE-189
数値処理の問題 |
CVE-2005-4886 | 2010-03-15 16:40 | 2005-10-5 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:May 8, 2026, 4:54 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 258011 | 6.7 |
MEDIUM
Local |
microsoft |
windows_server_2008 windows_7 |
The kernel in Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows locally authenticated attackers to gain privileges via a crafted application, or in Windows 7 for x64-based systems, cause d… |
NVD-CWE-noinfo
|
CVE-2017-0244 | 2024-11-21 12:02 | 2017-05-12 | Show | GitHub Exploit DB Packet Storm |
| 258012 | 5.3 |
MEDIUM
Network |
microsoft |
microsoft.aspnetcore.mvc.formatters.json microsoft.aspnetcore.mvc.cors microsoft.aspnetcore.mvc.apiexplorer microsoft.aspnetcore.mvc.localization microsoft.aspnetcore.mvc.taghelpers mi… |
A spoofing vulnerability exists when the ASP.NET Core fails to properly sanitize web requests. |
CWE-20
Improper Input Validation |
CVE-2017-0256 | 2024-11-21 12:02 | 2017-05-12 | Show | GitHub Exploit DB Packet Storm |
| 258013 | 7.8 |
HIGH
Local |
microsoft |
word office_web_apps office sharepoint_server word_rt office_compatibility_pack word_viewer |
Microsoft Word 2007, Office 2010 SP2, Word 2010 SP2, Office Compatibility Pack SP3, Office for Mac 2011, Office for Mac 2016, Microsoft Office Web Apps 2010 SP2, Office Web Apps Server 2013 SP1, Word… |
CWE-119
Incorrect Access of Indexable Resource ('Range Error') |
CVE-2017-0254 | 2024-11-21 12:02 | 2017-05-12 | Show | GitHub Exploit DB Packet Storm |
| 258014 | 7.3 |
HIGH
Network |
microsoft |
microsoft.aspnetcore.mvc.formatters.json microsoft.aspnetcore.mvc.cors microsoft.aspnetcore.mvc.apiexplorer microsoft.aspnetcore.mvc.localization microsoft.aspnetcore.mvc.taghelpers mi… |
An elevation of privilege vulnerability exists when the ASP.NET Core fails to properly sanitize web requests. |
CWE-20
Improper Input Validation |
CVE-2017-0249 | 2024-11-21 12:02 | 2017-05-12 | Show | GitHub Exploit DB Packet Storm |
| 258015 | 7.5 |
HIGH
Network |
microsoft |
microsoft.aspnetcore.mvc.formatters.json microsoft.aspnetcore.mvc.cors microsoft.aspnetcore.mvc.apiexplorer microsoft.aspnetcore.mvc.localization microsoft.aspnetcore.mvc.taghelpers mi… |
A denial of service vulnerability exists when the ASP.NET Core fails to properly validate web requests. NOTE: Microsoft has not commented on third-party claims that the issue is that the TextEncoder.… |
CWE-20
Improper Input Validation |
CVE-2017-0247 | 2024-11-21 12:02 | 2017-05-12 | Show | GitHub Exploit DB Packet Storm |
| 258016 | 7.0 |
HIGH
Local |
microsoft |
windows_rt_8.1 windows_server_2012 windows_server_2016 windows_7 windows_10 windows_8.1 windows_server_2008 |
The Graphics Component in the kernel-mode drivers in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, … |
NVD-CWE-noinfo
|
CVE-2017-0246 | 2024-11-21 12:02 | 2017-05-12 | Show | GitHub Exploit DB Packet Storm |
| 258017 | 5.5 |
MEDIUM
Local |
microsoft |
windows_server_2008 windows_7 |
An information disclosure vulnerability exists in the way some ActiveX objects are instantiated, aka "Microsoft ActiveX Information Disclosure Vulnerability." |
CWE-200
Information Exposure |
CVE-2017-0242 | 2024-11-21 12:02 | 2017-05-12 | Show | GitHub Exploit DB Packet Storm |
| 258018 | 5.3 |
MEDIUM
Network |
microsoft | edge | An elevation of privilege vulnerability exists when Microsoft Edge renders a domain-less page in the URL, which could allow Microsoft Edge to perform actions in the context of the Intranet Zone and a… |
NVD-CWE-noinfo
|
CVE-2017-0241 | 2024-11-21 12:02 | 2017-05-12 | Show | GitHub Exploit DB Packet Storm |
| 258019 | 7.5 |
HIGH
Network |
microsoft | edge | A remote code execution vulnerability exists in Microsoft Edge in the way affected Microsoft scripting engines render when handling objects in memory, aka "Microsoft Edge Memory Corruption Vulnerabil… |
CWE-119
Incorrect Access of Indexable Resource ('Range Error') |
CVE-2017-0240 | 2024-11-21 12:02 | 2017-05-12 | Show | GitHub Exploit DB Packet Storm |
| 258020 | 7.5 |
HIGH
Network |
microsoft |
internet_explorer edge |
A remote code execution vulnerability exists in Microsoft browsers in the way JavaScript scripting engines handle objects in memory, aka "Scripting Engine Memory Corruption Vulnerability." This CVE I… |
CWE-119
Incorrect Access of Indexable Resource ('Range Error') |
CVE-2017-0238 | 2024-11-21 12:02 | 2017-05-12 | Show | GitHub Exploit DB Packet Storm |