Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 13, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
254281 10 危険 アドビシステムズ - Adobe Shockwave Player における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2010-2863 2010-09-9 13:34 2010-08-24 Show GitHub Exploit DB Packet Storm
254282 6.4 警告 アップル - Apple Mac OS X の libsecurity における SSL サーバになりすまされる脆弱性 CWE-287
不適切な認証
CVE-2010-1802 2010-09-8 15:52 2010-08-25 Show GitHub Exploit DB Packet Storm
254283 6.8 警告 アップル - Apple Mac OS X の CoreGraphics におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2010-1801 2010-09-8 15:52 2010-08-25 Show GitHub Exploit DB Packet Storm
254284 5 警告 アップル
ClamAV
- ClamAV の libclamav/mspack.c における qtm_decompress 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2010-1311 2010-09-8 15:52 2010-04-8 Show GitHub Exploit DB Packet Storm
254285 5 警告 アップル - Apple Mac OS X の CFNetwork における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2010-1800 2010-09-8 15:51 2010-08-25 Show GitHub Exploit DB Packet Storm
254286 6.8 警告 アップル - Apple Mac OS X の Apple Type Services におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2010-1808 2010-09-8 15:51 2010-08-25 Show GitHub Exploit DB Packet Storm
254287 6.2 警告 サイバートラスト株式会社
Todd C. Miller
ターボリナックス
レッドハット
- sudo の secure path 機能における権限昇格の脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2010-1646 2010-09-8 15:50 2010-06-7 Show GitHub Exploit DB Packet Storm
254288 6.9 警告 サイバートラスト株式会社
Todd C. Miller
ターボリナックス
レッドハット
- sudo における任意のコマンドを実行される脆弱性 CWE-20
不適切な入力確認
CVE-2010-1163 2010-09-8 15:50 2010-04-16 Show GitHub Exploit DB Packet Storm
254289 10 危険 ESET
アップル
ClamAV
ソースネクスト
- 複数のアンチウィルス製品に脆弱性 CWE-noinfo
情報不足
CVE-2010-0098 2010-09-8 15:50 2010-04-13 Show GitHub Exploit DB Packet Storm
254290 7.5 危険 The PHP Group
アップル
- PHP の safe_mode 実装におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2010-1129 2010-09-8 15:49 2010-03-26 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 13, 2026, 5:05 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
258601 5.4 MEDIUM
Network
expressionengine expressionengine EllisLab ExpressionEngine 3.4.2 is vulnerable to cross-site scripting resulting in PHP code injection CWE-79
Cross-site Scripting
CVE-2017-1000160 2024-11-21 12:04 2017-11-17 Show GitHub Exploit DB Packet Storm
258602 9.8 CRITICAL
Network
python
debian
python
debian_linux
CPython (aka Python) up to 2.7.13 is vulnerable to an integer overflow in the PyString_DecodeEscape function in stringobject.c, resulting in heap-based buffer overflow (and possible arbitrary code ex… CWE-190
 Integer Overflow or Wraparound
CVE-2017-1000158 2024-11-21 12:04 2017-11-17 Show GitHub Exploit DB Packet Storm
258603 7.5 HIGH
Network
s9y serendipity Serendipity 2.0.3 is vulnerable to a SQL injection in the blog component resulting in information disclosure CWE-89
SQL Injection
CVE-2017-1000129 2024-11-21 12:04 2017-11-17 Show GitHub Exploit DB Packet Storm
258604 7.5 HIGH
Network
codiad codiad Codiad(full version) is vulnerable to write anything to configure file in the installation resulting upload a webshell. CWE-732
 Incorrect Permission Assignment for Critical Resource
CVE-2017-1000125 2024-11-21 12:04 2017-11-17 Show GitHub Exploit DB Packet Storm
258605 9.8 CRITICAL
Network
redis-store redis-store Redis-store <=v1.3.0 allows unsafe objects to be loaded from redis CWE-502
 Deserialization of Untrusted Data
CVE-2017-1000248 2024-11-21 12:04 2017-11-17 Show GitHub Exploit DB Packet Storm
258606 7.5 HIGH
Network
codeigniter codeigniter British Columbia Institute of Technology CodeIgniter 3.1.3 is vulnerable to HTTP Header Injection in the set_status_header() common function under Apache resulting in HTTP Header Injection flaws. CWE-20
 Improper Input Validation 
CVE-2017-1000247 2024-11-21 12:04 2017-11-17 Show GitHub Exploit DB Packet Storm
258607 5.3 MEDIUM
Network
pysaml2_project pysaml2 Python package pysaml2 version 4.4.0 and earlier reuses the initialization vector across encryptions in the IDP server, resulting in weak encryption of data. CWE-330
 Use of Insufficiently Random Values
CVE-2017-1000246 2024-11-21 12:04 2017-11-17 Show GitHub Exploit DB Packet Storm
258608 9.8 CRITICAL
Network
i-librarian i_librarian I, Librarian version <=4.6 & 4.7 is vulnerable to Server-Side Request Forgery in the ajaxsupplement.php resulting in the attacker being able to reset any user's password. CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2017-1000237 2024-11-21 12:04 2017-11-17 Show GitHub Exploit DB Packet Storm
258609 6.1 MEDIUM
Network
i-librarian i_librarian I, Librarian version <=4.6 & 4.7 is vulnerable to Reflected Cross-Site Scripting in the temp.php resulting in an attacker being able to inject malicious client side scripting which will be executed i… CWE-79
Cross-site Scripting
CVE-2017-1000236 2024-11-21 12:04 2017-11-17 Show GitHub Exploit DB Packet Storm
258610 9.8 CRITICAL
Network
i-librarian i_librarian I, Librarian version <=4.6 & 4.7 is vulnerable to OS Command Injection in batchimport.php resulting the web server being fully compromised. CWE-78
OS Command 
CVE-2017-1000235 2024-11-21 12:04 2017-11-17 Show GitHub Exploit DB Packet Storm