Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 24, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
254401	9.3	危険	アップル	-	Apple QuickTime における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2010-4009	2011-04-4 14:28	2010-12-9	Show	GitHub Exploit DB Packet Storm

254402	6.8	警告	アップル FreeType Project オラクル	-	FreeType の ttinterp.c 内にある Ins_SHZ 関数におけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-3814	2011-04-4 14:27	2010-11-26	Show	GitHub Exploit DB Packet Storm

254403	9.3	危険	アップル	-	Apple QuickTime における整数符号エラーの脆弱性	CWE-189 数値処理の問題	CVE-2010-3802	2011-04-4 14:23	2010-12-9	Show	GitHub Exploit DB Packet Storm

254404	9.3	危険	アップル	-	Apple QuickTime における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-3801	2011-04-4 14:22	2010-12-9	Show	GitHub Exploit DB Packet Storm

254405	4.3	警告	The PHP Group アップルレッドハット	-	PHP の filter_var 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2010-3710	2011-04-4 14:20	2010-10-25	Show	GitHub Exploit DB Packet Storm

254406	4.3	警告	The PHP Group アップルレッドハット	-	PHP の ZipArchive::getArchiveComment 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2010-3709	2011-04-4 14:18	2010-11-9	Show	GitHub Exploit DB Packet Storm

254407	7.6	危険	アップル	-	複数の Apple 製品の WebKit における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2011-0150	2011-04-1 15:32	2011-03-3	Show	GitHub Exploit DB Packet Storm

254408	7.6	危険	アップル	-	複数の Apple 製品の WebKit における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2011-0149	2011-04-1 15:31	2011-03-3	Show	GitHub Exploit DB Packet Storm

254409	7.6	危険	アップル	-	複数の Apple 製品の WebKit における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2011-0148	2011-04-1 15:24	2011-03-3	Show	GitHub Exploit DB Packet Storm

254410	7.6	危険	アップル	-	複数の Apple 製品の WebKit における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2011-0147	2011-04-1 15:23	2011-03-3	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 25, 2026, 4:01 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
259151	9.8	CRITICAL Network	clever	saml2-js	Clever saml2-js 2.0 and earlier may incorrectly utilize the results of XML DOM traversal and canonicalization APIs in such a way that an attacker may be able to manipulate the SAML data without inval…	CWE-287 Improper Authentication	CVE-2017-11429	2024-11-21 12:07	2019-04-17	Show	GitHub Exploit DB Packet Storm

259152	9.8	CRITICAL Network	onelogin	ruby-saml	OneLogin Ruby-SAML 1.6.0 and earlier may incorrectly utilize the results of XML DOM traversal and canonicalization APIs in such a way that an attacker may be able to manipulate the SAML data without …	CWE-287 Improper Authentication	CVE-2017-11428	2024-11-21 12:07	2019-04-17	Show	GitHub Exploit DB Packet Storm

259153	9.8	CRITICAL Network	onelogin	pythonsaml	OneLogin PythonSAML 2.3.0 and earlier may incorrectly utilize the results of XML DOM traversal and canonicalization APIs in such a way that an attacker may be able to manipulate the SAML data without…	CWE-287 Improper Authentication	CVE-2017-11427	2024-11-21 12:07	2019-04-17	Show	GitHub Exploit DB Packet Storm

259154	7.8	HIGH Local	google	android	In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, while processing the boot image header, an out of bounds read can occur in boot.	CWE-125 Out-of-bounds Read	CVE-2017-11078	2024-11-21 12:07	2018-11-28	Show	GitHub Exploit DB Packet Storm

259155	9.8	CRITICAL Network	qualcomm	msm8909w_firmware msm8996au_firmware sd_210_firmware sd_212_firmware sd_205_firmware sd_430_firmware sd_450_firmware sd_617_firmware sd_625_firmware sd_650_firmware sd_6…	Improper Input Validation in Linux io-prefetch in Snapdragon Mobile and Snapdragon Wear, A SQL injection vulnerability exists in versions MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 430, SD 450, SD…	CWE-89 SQL Injection	CVE-2017-11088	2024-11-21 12:07	2018-07-7	Show	GitHub Exploit DB Packet Storm

259156	6.1	MEDIUM Network	siemens	fin_stack	In J2 Innovations FIN Stack 4.0, the authentication webform is vulnerable to reflected XSS via the query string to /login.	CWE-79 Cross-site Scripting	CVE-2017-11175	2024-11-21 12:07	2018-07-6	Show	GitHub Exploit DB Packet Storm

259157	9.8	CRITICAL Network	adobe	acrobat acrobat_dc acrobat_reader acrobat_reader_dc	Adobe Acrobat and Reader versions 2017.012.20098 and earlier, 2017.011.30066 and earlier, 2015.006.30355 and earlier, 11.0.22 and earlier have an exploitable heap overflow vulnerability. Successful e…	CWE-787 Out-of-bounds Write	CVE-2017-11308	2024-11-21 12:07	2018-05-20	Show	GitHub Exploit DB Packet Storm

259158	9.8	CRITICAL Network	adobe	acrobat acrobat_dc acrobat_reader acrobat_reader_dc	Adobe Acrobat and Reader versions 2017.012.20098 and earlier, 2017.011.30066 and earlier, 2015.006.30355 and earlier, 11.0.22 and earlier have an exploitable out-of-bounds read vulnerability. Success…	CWE-125 Out-of-bounds Read	CVE-2017-11307	2024-11-21 12:07	2018-05-20	Show	GitHub Exploit DB Packet Storm

259159	9.8	CRITICAL Network	adobe	acrobat acrobat_dc acrobat_reader acrobat_reader_dc	Adobe Acrobat and Reader versions 2017.012.20098 and earlier, 2017.011.30066 and earlier, 2015.006.30355 and earlier, 11.0.22 and earlier have an exploitable out-of-bounds read vulnerability. Success…	CWE-125 Out-of-bounds Read	CVE-2017-11306	2024-11-21 12:07	2018-05-20	Show	GitHub Exploit DB Packet Storm

259160	9.8	CRITICAL Network	adobe	acrobat acrobat_dc acrobat_reader acrobat_reader_dc	Adobe Acrobat and Reader versions 2017.012.20098 and earlier, 2017.011.30066 and earlier, 2015.006.30355 and earlier, 11.0.22 and earlier have an exploitable out-of-bounds read vulnerability. Success…	CWE-125 Out-of-bounds Read	CVE-2017-11253	2024-11-21 12:07	2018-05-20	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed