Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 17, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
254241	9.3	危険	アップルアドビシステムズターボリナックスレッドハット	-	Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2010-2164	2010-11-29 15:14	2010-06-10	Show	GitHub Exploit DB Packet Storm

254242	9.3	危険	アップルアドビシステムズターボリナックスレッドハット	-	Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2010-2163	2010-11-29 15:11	2010-06-10	Show	GitHub Exploit DB Packet Storm

254243	9.3	危険	アップルアドビシステムズターボリナックスレッドハット	-	Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-2162	2010-11-29 15:10	2010-06-10	Show	GitHub Exploit DB Packet Storm

254244	9.3	危険	アップルアドビシステムズターボリナックスレッドハット	-	Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-2161	2010-11-29 15:09	2010-06-10	Show	GitHub Exploit DB Packet Storm

254245	9.3	危険	アップルアドビシステムズターボリナックスレッドハット	-	Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-2160	2010-11-29 15:08	2010-06-10	Show	GitHub Exploit DB Packet Storm

254246	6	警告	アップルサイバートラスト株式会社 MySQL AB ターボリナックスレッドハット	-	MySQL におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-1850	2010-11-29 15:06	2010-05-5	Show	GitHub Exploit DB Packet Storm

254247	5	警告	アップルターボリナックス MySQL AB	-	MySQL の my_net_skip_rest 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2010-1849	2010-11-26 16:54	2010-05-5	Show	GitHub Exploit DB Packet Storm

254248	9.3	危険	アップル	-	iPhone および iPod touch 上で稼動する Apple iOS の ImageIO における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-1811	2010-11-26 16:53	2010-09-8	Show	GitHub Exploit DB Packet Storm

254249	6.8	警告	アップル	-	Apple iOS の CFNetwork におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-1752	2010-11-26 16:48	2010-06-22	Show	GitHub Exploit DB Packet Storm

254250	6.8	警告	アップル	-	Apple Mac OS X の CoreText における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-1837	2010-11-26 15:39	2010-11-15	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 18, 2026, 4:12 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
246981	5.6	MEDIUM Local	qemu debian	qemu debian_linux	QEMU (aka Quick Emulator), when built with the e1000e NIC emulation support, allows local guest OS privileged users to cause a denial of service (infinite loop) via vectors related to setting the ini…	CWE-835 Loop with Unreachable Exit Condition ('Infinite Loop')	CVE-2017-9310	2024-11-21 12:35	2017-06-9	Show	GitHub Exploit DB Packet Storm

246982	7.5	HIGH Network	strongswan	strongswan	The ASN.1 parser in strongSwan before 5.5.3 improperly handles CHOICE types when the x509 plugin is enabled, which allows remote attackers to cause a denial of service (infinite loop) via a crafted c…	NVD-CWE-noinfo CWE-835 Loop with Unreachable Exit Condition ('Infinite Loop')	CVE-2017-9023	2024-11-21 12:35	2017-06-9	Show	GitHub Exploit DB Packet Storm

246983	7.5	HIGH Network	strongswan debian canonical	strongswan debian_linux ubuntu_linux	The gmp plugin in strongSwan before 5.5.3 does not properly validate RSA public keys before calling mpz_powm_sec, which allows remote peers to cause a denial of service (floating point exception and …	CWE-20 Improper Input Validation	CVE-2017-9022	2024-11-21 12:35	2017-06-9	Show	GitHub Exploit DB Packet Storm

246984	7.4	HIGH Network	subsonic	subsonic	XML external entity (XXE) vulnerability in the import playlist feature in Subsonic 6.1.1 might allow remote attackers to conduct server-side request forgery (SSRF) attacks via a crafted XSPF playlist…	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2017-9355	2024-11-21 12:35	2017-06-8	Show	GitHub Exploit DB Packet Storm

246985	6.1	MEDIUM Network	pivotx	pivotx	The smarty_self function in modules/module_smarty.php in PivotX 2.3.11 mishandles the URI, allowing XSS via vectors involving quotes in the self Smarty tag.	CWE-79 Cross-site Scripting	CVE-2017-9332	2024-11-21 12:35	2017-06-6	Show	GitHub Exploit DB Packet Storm

246986	8.8	HIGH Network	open-emr	openemr	OpenEMR 5.0.0 and prior allows low-privilege users to upload files of dangerous types which can result in arbitrary code execution within the context of the vulnerable application.	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2017-9380	2024-11-21 12:35	2017-06-3	Show	GitHub Exploit DB Packet Storm

246987	8.8	HIGH Network	bigtreecms	bigtree_cms	Multiple CSRF issues exist in BigTree CMS through 4.2.18 - the clear parameter to core\admin\modules\dashboard\vitals-statistics\404\clear.php and the from or to parameter to core\admin\modules\dashb…	CWE-352 Origin Validation Error	CVE-2017-9379	2024-11-21 12:35	2017-06-3	Show	GitHub Exploit DB Packet Storm

246988	6.5	MEDIUM Network	bigtreecms	bigtree_cms	BigTree CMS through 4.2.18 does not prevent a user from deleting their own account. This could have security relevance because deletion was supposed to be an admin-only action, and the admin may have…	CWE-863 Incorrect Authorization	CVE-2017-9378	2024-11-21 12:35	2017-06-3	Show	GitHub Exploit DB Packet Storm

246989	7.5	HIGH Network	digium	open_source certified_asterisk	PJSIP, as used in Asterisk Open Source 13.x before 13.15.1 and 14.x before 14.4.1, Certified Asterisk 13.13 before 13.13-cert4, and other products, allows remote attackers to cause a denial of servic…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2017-9372	2024-11-21 12:35	2017-06-2	Show	GitHub Exploit DB Packet Storm

246990	4.8	MEDIUM Network	epesi	epesi	Telaxus EPESI 1.8.2 and earlier has a Stored Cross-site Scripting (XSS) vulnerability in modules/Base/Dashboard/Dashboard_0.php, which allows remote attackers to inject arbitrary web script or HTML v…	CWE-79 Cross-site Scripting	CVE-2017-9366	2024-11-21 12:35	2017-06-2	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed