Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 8, 2026, noon

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
254251	9.3	危険	マイクロソフト	-	Microsoft Internet Explorer における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-0246	2010-02-22 12:14	2010-01-21	Show	GitHub Exploit DB Packet Storm

254252	9.3	危険	マイクロソフト	-	Microsoft Internet Explorer における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-0245	2010-02-22 12:13	2010-01-21	Show	GitHub Exploit DB Packet Storm

254253	4.3	警告	マイクロソフト	-	Microsoft Internet Explorer の XSS フィルタにおけるクロスサイトスクリプティングの脆弱性	CWE-DesignError	CVE-2009-4074	2010-02-22 12:13	2009-11-25	Show	GitHub Exploit DB Packet Storm

254254	6.6	警告	マイクロソフト	-	Microsoft Windows の kernel における権限昇格の脆弱性	CWE-20 不適切な入力確認	CVE-2010-0232	2010-02-22 12:12	2010-01-20	Show	GitHub Exploit DB Packet Storm

254255	10	危険	Rockwell Automation	-	Rockwell Automation Allen-Bradley MicroLogix PLC に複数の脆弱性	CWE-noinfo 情報不足	CVE-2009-3739	2010-02-19 14:22	2010-01-21	Show	GitHub Exploit DB Packet Storm

254256	9.3	危険	マイクロソフト	-	Microsoft Internet Explorer において任意のコードが実行される脆弱性	CWE-399 リソース管理の問題	CVE-2010-0249	2010-02-19 14:21	2010-01-15	Show	GitHub Exploit DB Packet Storm

254257	7.5	危険	アップル MySQL AB	-	MySQL で使用される yaSSL におけるサービス運用妨害 (DoS) の脆弱性	CWE-119 バッファエラー	CVE-2008-0227	2010-02-19 11:37	2008-01-10	Show	GitHub Exploit DB Packet Storm

254258	7.5	危険	アップル MySQL AB	-	MySQL で使用される yaSSL における複数のバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2008-0226	2010-02-19 11:32	2008-01-10	Show	GitHub Exploit DB Packet Storm

254259	7.5	危険	Linux レッドハット	-	Linux kernel の do_coredump 関数における任意のファイルを改ざんされる脆弱性	-	CVE-2006-6304	2010-02-18 14:28	2006-12-14	Show	GitHub Exploit DB Packet Storm

254260	7.8	危険	Linux レッドハット	-	Linux kernel の net/ipv4/route.c 用の特定のレッドハットパッチにおけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2009-4272	2010-02-18 14:28	2010-01-19	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 8, 2026, 4:54 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
250631	5.3	MEDIUM Network	google	android	An issue was discovered on Samsung mobile devices with software through 2016-10-25 (Exynos5 chipsets). Attackers can read kernel addresses in the log because an incorrect format specifier is used. Th…	CWE-200 Information Exposure	CVE-2017-18694	2024-11-21 12:20	2020-04-7	Show	GitHub Exploit DB Packet Storm

250632	9.8	CRITICAL Network	google	android	An issue was discovered on Samsung mobile devices with KK(4.4), L(5.0/5.1), M(6.0), and N(7.0) software. There is a buffer overflow in the fps sysfs entry. The Samsung ID is SVE-2016-7510 (January 20…	CWE-120 Classic Buffer Overflow	CVE-2017-18693	2024-11-21 12:20	2020-04-7	Show	GitHub Exploit DB Packet Storm

250633	8.1	HIGH Network	google	android	An issue was discovered on Samsung mobile devices with M(6.0) and N(7.0) (MSM8939, MSM8996, MSM8998, Exynos7580, Exynos8890, or Exynos8895 chipsets) software. There is a race condition, with a result…	CWE-362 Race Condition	CVE-2017-18692	2024-11-21 12:20	2020-04-7	Show	GitHub Exploit DB Packet Storm

250634	6.5	MEDIUM Adjacent	syska	smartlight_rainbow_led_smart_bulb_firmware	Syska Smart Bulb devices through 2017-08-06 receive RGB parameters over cleartext Bluetooth Low Energy (BLE), leading to sniffing, reverse engineering, and replay attacks.	CWE-200 Information Exposure	CVE-2017-18642	2024-11-21 12:20	2020-02-11	Show	GitHub Exploit DB Packet Storm

250635	8.1	HIGH Network	linuxcontainers	lxc	In LXC 2.0, many template scripts download code over cleartext HTTP, and omit a digital-signature check, before running it to bootstrap containers.	CWE-287 Improper Authentication	CVE-2017-18641	2024-11-21 12:20	2020-02-10	Show	GitHub Exploit DB Packet Storm

250636	7.5	HIGH Network	snakeyaml_project fedoraproject quarkus oracle	snakeyaml fedora quarkus peoplesoft_enterprise_pt_peopletools	The Alias feature in SnakeYAML before 1.26 allows entity expansion during a load operation, a related issue to CVE-2003-1564.	CWE-776 XML Entity Expansion	CVE-2017-18640	2024-11-21 12:20	2019-12-12	Show	GitHub Exploit DB Packet Storm

250637	6.1	MEDIUM Network	progress	sitefinity_cms	Progress Sitefinity CMS before 10.1 allows XSS via /Pages Parameter : Page Title, /Content/News Parameter : News Title, /Content/List Parameter : List Title, /Content/Documents/LibraryDocuments/incid…	CWE-79 Cross-site Scripting	CVE-2017-18639	2024-11-21 12:20	2019-11-7	Show	GitHub Exploit DB Packet Storm

250638	7.5	HIGH Network	graphite_project	graphite	send_email in graphite-web/webapp/graphite/composer/views.py in Graphite through 1.1.5 is vulnerable to SSRF. The vulnerable SSRF endpoint can be used by an attacker to have the Graphite web server r…	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2017-18638	2024-11-21 12:20	2019-10-12	Show	GitHub Exploit DB Packet Storm

250639	7.5	HIGH Network	esafenet	cdg	CDG through 2017-01-01 allows downloadDocument.jsp?command=download&pathAndName= directory traversal.	CWE-22 Path Traversal	CVE-2017-18636	2024-11-21 12:20	2019-09-30	Show	GitHub Exploit DB Packet Storm

250640	6.1	MEDIUM Network	novnc debian canonical redhat	novnc debian_linux ubuntu_linux openstack	An XSS vulnerability was discovered in noVNC before 0.6.2 in which the remote VNC server could inject arbitrary HTML into the noVNC web page via the messages propagated to the status field, such as t…	CWE-79 Cross-site Scripting	CVE-2017-18635	2024-11-21 12:20	2019-09-26	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed