Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 8, 2026, 10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
254411 6.8 警告 アップル
GNU Project
サン・マイクロシステムズ
サイバートラスト株式会社
レッドハット
- GNU tar の contains_dot_dot() 関数におけるディレクトリトラバーサルの脆弱性 - CVE-2007-4131 2010-01-18 12:21 2007-08-23 Show GitHub Exploit DB Packet Storm
254412 4.6 警告 IBM - IBM DB2 の dasauto における管理者権限を持たないユーザが実行可能な脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2009-4150 2010-01-15 14:10 2009-12-2 Show GitHub Exploit DB Packet Storm
254413 2.1 注意 サン・マイクロシステムズ - Sun Solaris の ldap_cachemgr におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2009-4080 2010-01-15 14:10 2009-11-24 Show GitHub Exploit DB Packet Storm
254414 5 警告 サン・マイクロシステムズ - Sun Solaris の sshd におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足
CVE-2009-4075 2010-01-15 14:09 2009-11-23 Show GitHub Exploit DB Packet Storm
254415 2.6 注意 オラクル - Oracle Application Server におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
- 2010-01-14 15:01 2010-01-14 Show GitHub Exploit DB Packet Storm
254416 9.3 危険 マイクロソフト - Microsoft Internet Explorer に脆弱性 CWE-94
コード・インジェクション
CVE-2009-3672 2010-01-14 12:08 2009-11-25 Show GitHub Exploit DB Packet Storm
254417 9.3 危険 サン・マイクロシステムズ
VMware
- Sun Java SE の java.lang パッケージにおける脆弱性 CWE-362
競合状態
CVE-2009-2724 2010-01-14 12:08 2009-08-10 Show GitHub Exploit DB Packet Storm
254418 10 危険 サン・マイクロシステムズ
VMware
- Sun Java SE の Provider クラスにおける脆弱性 CWE-noinfo
情報不足
CVE-2009-2721 2010-01-14 12:08 2009-08-10 Show GitHub Exploit DB Packet Storm
254419 5 警告 有限会社シースリー - WebCalenderC3 におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2010-0348 2010-01-12 15:01 2010-01-12 Show GitHub Exploit DB Packet Storm
254420 4.3 警告 有限会社シースリー - WebCalenderC3 におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-0349 2010-01-12 15:00 2010-01-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 8, 2026, 4:54 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
251391 6.1 MEDIUM
Network
liferay liferay_portal In Liferay Portal 6.1.0, the tags section has XSS via a Public Render Parameter (p_r_p) value, as demonstrated by p_r_p_564233524_tag. CWE-79
Cross-site Scripting
CVE-2017-17868 2024-11-21 12:18 2017-12-28 Show GitHub Exploit DB Packet Storm
251392 7.8 HIGH
Local
artifex
debian
mupdf
debian_linux
pdf/pdf-write.c in Artifex MuPDF before 1.12.0 mishandles certain length changes when a repair operation occurs during a clean operation, which allows remote attackers to cause a denial of service (b… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2017-17866 2024-11-21 12:18 2017-12-28 Show GitHub Exploit DB Packet Storm
251393 3.3 LOW
Local
linux
debian
linux_kernel
debian_linux
kernel/bpf/verifier.c in the Linux kernel through 4.14.8 mishandles states_equal comparisons between the pointer data type and the UNKNOWN_VALUE data type, which allows local users to obtain potentia… CWE-200
Information Exposure
CVE-2017-17864 2024-11-21 12:18 2017-12-28 Show GitHub Exploit DB Packet Storm
251394 7.8 HIGH
Local
linux
debian
linux_kernel
debian_linux
kernel/bpf/verifier.c in the Linux kernel 4.9.x through 4.9.71 does not check the relationship between pointer values and the BPF stack, which allows local users to cause a denial of service (integer… CWE-190
 Integer Overflow or Wraparound
CVE-2017-17863 2024-11-21 12:18 2017-12-28 Show GitHub Exploit DB Packet Storm
251395 5.5 MEDIUM
Local
linux
debian
linux_kernel
debian_linux
kernel/bpf/verifier.c in the Linux kernel through 4.14.8 ignores unreachable code, even though it would still be processed by JIT compilers. This behavior, also considered an improper branch-pruning … CWE-20
 Improper Input Validation 
CVE-2017-17862 2024-11-21 12:18 2017-12-28 Show GitHub Exploit DB Packet Storm
251396 6.1 MEDIUM
Network
samsung internet_browser Samsung Internet Browser 6.2.01.12 allows remote attackers to bypass the Same Origin Policy, and conduct UXSS attacks to obtain sensitive information, via vectors involving an IFRAME element inside X… CWE-79
Cross-site Scripting
CVE-2017-17859 2024-11-21 12:18 2017-12-28 Show GitHub Exploit DB Packet Storm
251397 7.8 HIGH
Local
linux
debian
linux_kernel
debian_linux
The check_stack_boundary function in kernel/bpf/verifier.c in the Linux kernel through 4.14.8 allows local users to cause a denial of service (memory corruption) or possibly have unspecified other im… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2017-17857 2024-11-21 12:18 2017-12-28 Show GitHub Exploit DB Packet Storm
251398 7.8 HIGH
Local
linux
debian
linux_kernel
debian_linux
kernel/bpf/verifier.c in the Linux kernel through 4.14.8 allows local users to cause a denial of service (memory corruption) or possibly have unspecified other impact by leveraging the lack of stack-… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2017-17856 2024-11-21 12:18 2017-12-28 Show GitHub Exploit DB Packet Storm
251399 7.8 HIGH
Local
linux
debian
linux_kernel
debian_linux
kernel/bpf/verifier.c in the Linux kernel through 4.14.8 allows local users to cause a denial of service (memory corruption) or possibly have unspecified other impact by leveraging improper use of po… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2017-17855 2024-11-21 12:18 2017-12-28 Show GitHub Exploit DB Packet Storm
251400 7.8 HIGH
Local
linux
debian
linux_kernel
debian_linux
kernel/bpf/verifier.c in the Linux kernel through 4.14.8 allows local users to cause a denial of service (integer overflow and memory corruption) or possibly have unspecified other impact by leveragi… CWE-190
 Integer Overflow or Wraparound
CVE-2017-17854 2024-11-21 12:18 2017-12-28 Show GitHub Exploit DB Packet Storm