Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 7, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
254411	6.8	警告	アップル GNU Project サン・マイクロシステムズサイバートラスト株式会社レッドハット	-	GNU tar の contains_dot_dot() 関数におけるディレクトリトラバーサルの脆弱性	-	CVE-2007-4131	2010-01-18 12:21	2007-08-23	Show	GitHub Exploit DB Packet Storm

254412	4.6	警告	IBM	-	IBM DB2 の dasauto における管理者権限を持たないユーザが実行可能な脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2009-4150	2010-01-15 14:10	2009-12-2	Show	GitHub Exploit DB Packet Storm

254413	2.1	注意	サン・マイクロシステムズ	-	Sun Solaris の ldap_cachemgr におけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2009-4080	2010-01-15 14:10	2009-11-24	Show	GitHub Exploit DB Packet Storm

254414	5	警告	サン・マイクロシステムズ	-	Sun Solaris の sshd におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2009-4075	2010-01-15 14:09	2009-11-23	Show	GitHub Exploit DB Packet Storm

254415	2.6	注意	オラクル	-	Oracle Application Server におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	-	2010-01-14 15:01	2010-01-14	Show	GitHub Exploit DB Packet Storm

254416	9.3	危険	マイクロソフト	-	Microsoft Internet Explorer に脆弱性	CWE-94 コード・インジェクション	CVE-2009-3672	2010-01-14 12:08	2009-11-25	Show	GitHub Exploit DB Packet Storm

254417	9.3	危険	サン・マイクロシステムズ VMware	-	Sun Java SE の java.lang パッケージにおける脆弱性	CWE-362 競合状態	CVE-2009-2724	2010-01-14 12:08	2009-08-10	Show	GitHub Exploit DB Packet Storm

254418	10	危険	サン・マイクロシステムズ VMware	-	Sun Java SE の Provider クラスにおける脆弱性	CWE-noinfo 情報不足	CVE-2009-2721	2010-01-14 12:08	2009-08-10	Show	GitHub Exploit DB Packet Storm

254419	5	警告	有限会社シースリー	-	WebCalenderC3 におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2010-0348	2010-01-12 15:01	2010-01-12	Show	GitHub Exploit DB Packet Storm

254420	4.3	警告	有限会社シースリー	-	WebCalenderC3 におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-0349	2010-01-12 15:00	2010-01-12	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 7, 2026, 4:22 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
255881	8.8	HIGH Network	metinfo	metinfo	Authenticated Code Execution Vulnerability in MetInfo 5.3.17 allows a remote authenticated attacker to generate a PHP script with the content of a malicious image, related to admin/include/common.inc…	NVD-CWE-noinfo	CVE-2017-11347	2024-11-21 12:07	2017-07-17	Show	GitHub Exploit DB Packet Storm

255882	9.8	CRITICAL Network	zohocorp	manageengine_desktop_central	Zoho ManageEngine Desktop Central before build 100092 allows remote attackers to execute arbitrary code via vectors involving the upload of help desk videos.	CWE-20 Improper Input Validation	CVE-2017-11346	2024-11-21 12:07	2017-07-17	Show	GitHub Exploit DB Packet Storm

255883	7.8	HIGH Local	asuswrt-merlin_project	rt-ac5300_firmware rt_ac1900p_firmware rt-ac68u_firmware rt-ac68p_firmware rt-ac88u_firmware rt-ac66u_firmware rt-ac66u_b1_firmware rt-ac58u_firmware rt-ac56u_firmware rt-a…	Stack buffer overflow in networkmap in Asuswrt-Merlin firmware for ASUS devices and ASUS firmware for ASUS RT-AC5300, RT_AC1900P, RT-AC68U, RT-AC68P, RT-AC88U, RT-AC66U, RT-AC66U_B1, RT-AC58U, RT-AC5…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2017-11345	2024-11-21 12:07	2017-07-17	Show	GitHub Exploit DB Packet Storm

255884	7.5	HIGH Network	call-cc	chicken	Due to an incomplete fix for CVE-2012-6125, all versions of CHICKEN Scheme up to and including 4.12.0 are vulnerable to an algorithmic complexity attack. An attacker can provide crafted input which, …	CWE-407 Inefficient Algorithmic Complexity	CVE-2017-11343	2024-11-21 12:07	2017-07-17	Show	GitHub Exploit DB Packet Storm

255885	7.5	HIGH Network	libsass	libsass	There is an illegal address access in ast.cpp of LibSass 3.4.5. A crafted input will lead to a remote denial of service attack.	CWE-20 Improper Input Validation	CVE-2017-11342	2024-11-21 12:07	2017-07-17	Show	GitHub Exploit DB Packet Storm

255886	7.5	HIGH Network	libsass	libsass	There is a heap based buffer over-read in lexer.hpp of LibSass 3.4.5. A crafted input will lead to a remote denial of service attack.	CWE-125 Out-of-bounds Read	CVE-2017-11341	2024-11-21 12:07	2017-07-17	Show	GitHub Exploit DB Packet Storm

255887	6.5	MEDIUM Network	exiv2	exiv2	There is a Segmentation fault in the XmpParser::terminate() function in Exiv2 0.26, related to an exit call. A Crafted input will lead to a remote denial of service attack.	CWE-20 Improper Input Validation	CVE-2017-11340	2024-11-21 12:07	2017-07-17	Show	GitHub Exploit DB Packet Storm

255888	6.5	MEDIUM Network	exiv2	exiv2	There is a heap-based buffer overflow in the Image::printIFDStructure function of image.cpp in Exiv2 0.26. A Crafted input will lead to a remote denial of service attack.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2017-11339	2024-11-21 12:07	2017-07-17	Show	GitHub Exploit DB Packet Storm

255889	7.8	HIGH Local	asuswrt-merlin_project	rt-ac5300_firmware rt_ac1900p_firmware rt-ac68u_firmware rt-ac68p_firmware rt-ac88u_firmware rt-ac66u_firmware rt-ac66u_b1_firmware rt-ac58u_firmware rt-ac56u_firmware rt-a…	Global buffer overflow in networkmap in Asuswrt-Merlin firmware for ASUS devices and ASUS firmware for ASUS RT-AC5300, RT_AC1900P, RT-AC68U, RT-AC68P, RT-AC88U, RT-AC66U, RT-AC66U_B1, RT-AC58U, RT-AC…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2017-11344	2024-11-21 12:07	2017-07-17	Show	GitHub Exploit DB Packet Storm

255890	6.5	MEDIUM Network	exiv2	exiv2	There is an infinite loop in the Exiv2::Image::printIFDStructure function of image.cpp in Exiv2 0.26. A crafted input will lead to a remote denial of service attack.	CWE-835 Loop with Unreachable Exit Condition ('Infinite Loop')	CVE-2017-11338	2024-11-21 12:07	2017-07-17	Show	GitHub Exploit DB Packet Storm