Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 8, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
254651	7.1	危険	アップルアドビシステムズ	-	Windows 上で稼動する Adobe Flash Player および Adobe AIR の Flash Player の ActiveX コントロールにおけるローカルファイルのファイル名を取得される脆弱性	CWE-200 情報漏えい	CVE-2009-3951	2010-02-10 13:36	2009-12-8	Show	GitHub Exploit DB Packet Storm

254652	9.3	危険	アップルアドビシステムズサン・マイクロシステムズレッドハット	-	Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2009-3800	2010-02-10 13:36	2009-12-8	Show	GitHub Exploit DB Packet Storm

254653	9.3	危険	アップルアドビシステムズサン・マイクロシステムズレッドハット	-	Adobe Flash Player および Adobe AIR の Verifier::parseExceptionHandlers 関数における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2009-3799	2010-02-10 13:36	2009-12-8	Show	GitHub Exploit DB Packet Storm

254654	9.3	危険	アップルアドビシステムズサン・マイクロシステムズレッドハット	-	Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2009-3798	2010-02-10 13:35	2009-12-8	Show	GitHub Exploit DB Packet Storm

254655	9.3	危険	マイクロソフト	-	Microsoft Windows XP で提供される Adobe Flash Player 6 における任意のコードを実行される脆弱性	CWE-Other その他	CVE-2010-0378	2010-02-9 13:56	2010-01-12	Show	GitHub Exploit DB Packet Storm

254656	9.3	危険	マイクロソフト	-	Microsoft Windows の Embedded OpenType フォントエンジンにおける任意のコードを実行される脆弱性	CWE-189 数値処理の問題	CVE-2010-0018	2010-02-9 13:55	2010-01-12	Show	GitHub Exploit DB Packet Storm

254657	9.3	危険	サン・マイクロシステムズアドビシステムズ	-	Adobe Acrobat におけるファイル拡張子の制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2009-3461	2010-02-9 13:55	2009-10-13	Show	GitHub Exploit DB Packet Storm

254658	9.3	危険	サン・マイクロシステムズアドビシステムズ	-	Adobe Acrobat における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2009-3460	2010-02-9 13:55	2009-10-13	Show	GitHub Exploit DB Packet Storm

254659	4.3	警告	サン・マイクロシステムズアドビシステムズ	-	Adobe Acrobat におけるサービス運用妨害 (DoS) の脆弱性	CWE-189 数値処理の問題	CVE-2009-2995	2010-02-9 13:55	2009-10-13	Show	GitHub Exploit DB Packet Storm

254660	9.3	危険	サン・マイクロシステムズアドビシステムズ	-	Adobe Acrobat における任意のコードを実行される脆弱性	CWE-189 数値処理の問題	CVE-2009-2989	2010-02-9 13:55	2009-10-13	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 8, 2026, 4:54 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
247651	7.5	HIGH Network	vipa_controls	winplc7_firmware	A Stack Buffer Overflow issue was discovered in VIPA Controls WinPLC7 5.0.45.5921 and prior. A stack-based buffer overflow vulnerability has been identified, where an attacker with a specially crafte…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2017-5177	2024-11-21 12:27	2017-05-19	Show	GitHub Exploit DB Packet Storm

247652	9.8	CRITICAL Network	geutebruck	ip_camera_g-cam_efd-2250_firmware	An Authentication Bypass issue was discovered in Geutebruck IP Camera G-Cam/EFD-2250 Version 1.11.0.12. An authentication bypass vulnerability has been identified. The existing file system architectu…	NVD-CWE-noinfo	CVE-2017-5174	2024-11-21 12:27	2017-05-19	Show	GitHub Exploit DB Packet Storm

247653	9.8	CRITICAL Network	geutebrueck	ip_camera_g-cam_efd-2250_firmware	An Improper Neutralization of Special Elements (in an OS command) issue was discovered in Geutebruck IP Camera G-Cam/EFD-2250 Version 1.11.0.12. An improper neutralization of special elements vulnera…	CWE-78 OS Command	CVE-2017-5173	2024-11-21 12:27	2017-05-19	Show	GitHub Exploit DB Packet Storm

247654	7.0	HIGH Local	rockwellautomation	connected_components_workbench	A DLL Hijack issue was discovered in Rockwell Automation Connected Components Workbench (CCW). The following versions are affected: Connected Components Workbench - Developer Edition, v9.01.00 and ea…	CWE-427 Uncontrolled Search Path Element	CVE-2017-5176	2024-11-21 12:27	2017-05-19	Show	GitHub Exploit DB Packet Storm

247655	9.8	CRITICAL Network	codextrous	b2j_contact	The Codextrous B2J Contact (aka b2j_contact) extension before 2.1.13 for Joomla! allows a rename attack that bypasses a "safe file extension" protection mechanism, leading to remote code execution.	CWE-20 Improper Input Validation	CVE-2017-5215	2024-11-21 12:27	2017-05-17	Show	GitHub Exploit DB Packet Storm

247656	7.5	HIGH Network	codextrous	b2j_contact	The Codextrous B2J Contact (aka b2j_contact) extension before 2.1.13 for Joomla! allows prediction of a uniqid value based on knowledge of a time value. This makes it easier to read arbitrary uploade…	CWE-335 Incorrect Usage of Seeds in Pseudo-Random Number Generator (PRNG)	CVE-2017-5214	2024-11-21 12:27	2017-05-17	Show	GitHub Exploit DB Packet Storm

247657	9.8	CRITICAL Network	mozilla	network_security_services	Mozilla Network Security Services (NSS) before 3.21.4, 3.22.x through 3.28.x before 3.28.4, 3.29.x before 3.29.5, and 3.30.x before 3.30.1 allows remote attackers to cause a denial of service (out-of…	CWE-787 Out-of-bounds Write	CVE-2017-5461	2024-11-21 12:27	2017-05-11	Show	GitHub Exploit DB Packet Storm

247658	6.5	MEDIUM Network	tibco	spotfire_server spotfire_analytics_platform_for_aws	TIBCO Spotfire Server 7.0.X before 7.0.2, 7.5.x before 7.5.1, 7.6.x before 7.6.1, 7.7.x before 7.7.1, and 7.8.x before 7.8.1 and Spotfire Analytics Platform for AWS Marketplace 7.8.0 and earlier cont…	CWE-89 SQL Injection	CVE-2017-5527	2024-11-21 12:27	2017-05-10	Show	GitHub Exploit DB Packet Storm

247659	8.8	HIGH Network	trendmicro	officescan	Trend Micro OfficeScan 11.0 before SP1 CP 6325 and XG before CP 1352 allows remote authenticated users to gain privileges by leveraging a leak of an encrypted password during a web-console operation.	CWE-200 Information Exposure	CVE-2017-5481	2024-11-21 12:27	2017-05-4	Show	GitHub Exploit DB Packet Storm

247660	7.5	HIGH Network	rapid7	appspider_pro	Editions of Rapid7 AppSpider Pro prior to version 6.14.060 contain a heap-based buffer overflow in the FLAnalyzer.exe component. A malicious or malformed Flash source file can cause a denial of servi…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2017-5240	2024-11-21 12:27	2017-05-4	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed