Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 17, 2026, 10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
254751	9.3	危険	アドビシステムズ	-	Adobe Shockwave Player の IML32.dll における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-2864	2010-09-9 13:34	2010-08-24	Show	GitHub Exploit DB Packet Storm

254752	10	危険	アドビシステムズ	-	Adobe Shockwave Player における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-2863	2010-09-9 13:34	2010-08-24	Show	GitHub Exploit DB Packet Storm

254753	6.4	警告	アップル	-	Apple Mac OS X の libsecurity における SSL サーバになりすまされる脆弱性	CWE-287 不適切な認証	CVE-2010-1802	2010-09-8 15:52	2010-08-25	Show	GitHub Exploit DB Packet Storm

254754	6.8	警告	アップル	-	Apple Mac OS X の CoreGraphics におけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-1801	2010-09-8 15:52	2010-08-25	Show	GitHub Exploit DB Packet Storm

254755	5	警告	アップル ClamAV	-	ClamAV の libclamav/mspack.c における qtm_decompress 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2010-1311	2010-09-8 15:52	2010-04-8	Show	GitHub Exploit DB Packet Storm

254756	5	警告	アップル	-	Apple Mac OS X の CFNetwork における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2010-1800	2010-09-8 15:51	2010-08-25	Show	GitHub Exploit DB Packet Storm

254757	6.8	警告	アップル	-	Apple Mac OS X の Apple Type Services におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-1808	2010-09-8 15:51	2010-08-25	Show	GitHub Exploit DB Packet Storm

254758	6.2	警告	サイバートラスト株式会社 Todd C. Miller ターボリナックスレッドハット	-	sudo の secure path 機能における権限昇格の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-1646	2010-09-8 15:50	2010-06-7	Show	GitHub Exploit DB Packet Storm

254759	6.9	警告	サイバートラスト株式会社 Todd C. Miller ターボリナックスレッドハット	-	sudo における任意のコマンドを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2010-1163	2010-09-8 15:50	2010-04-16	Show	GitHub Exploit DB Packet Storm

254760	10	危険	ESET アップル ClamAV ソースネクスト	-	複数のアンチウィルス製品に脆弱性	CWE-noinfo 情報不足	CVE-2010-0098	2010-09-8 15:50	2010-04-13	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 17, 2026, 4:15 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
254431	7.8	HIGH Local	ikarussecurity	anti.virus	ntguard_x64.sys 0.18780.0.0 in IKARUS anti.virus 2.16.15 has a Pool Corruption vulnerability via a 0x83000058 DeviceIoControl request.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2017-17112	2024-11-21 12:17	2017-12-4	Show	GitHub Exploit DB Packet Storm

254432	7.5	HIGH Network	fiyo	fiyo_cms	Fiyo CMS 2.0.7 has an arbitrary file read vulnerability in dapur/apps/app_theme/libs/check_file.php via $_GET['src'] or $_GET['name'].	CWE-200 Information Exposure	CVE-2017-17104	2024-11-21 12:17	2017-12-4	Show	GitHub Exploit DB Packet Storm

254433	8.8	HIGH Network	fiyo	fiyo_cms	Fiyo CMS 2.0.7 has SQL injection in /apps/app_user/sys_user.php via $_POST[name] or $_POST[email]. This vulnerability can lead to escalation from normal user privileges to administrator privileges.	CWE-89 SQL Injection	CVE-2017-17103	2024-11-21 12:17	2017-12-4	Show	GitHub Exploit DB Packet Storm

254434	7.5	HIGH Network	fiyo	fiyo_cms	Fiyo CMS 2.0.7 has SQL injection in /system/site.php via $_REQUEST['link'].	CWE-89 SQL Injection	CVE-2017-17102	2024-11-21 12:17	2017-12-4	Show	GitHub Exploit DB Packet Storm

254435	7.8	HIGH Local	flexense	syncbreeze	There exists an unauthenticated SEH based Buffer Overflow vulnerability in the HTTP server of Flexense SyncBreeze Enterprise v10.1.16. When sending a GET request with an excessive length, it is possi…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2017-17099	2024-11-21 12:17	2017-12-4	Show	GitHub Exploit DB Packet Storm

254436	6.1	MEDIUM Network	content_cards_project	content_cards	Cross-site scripting (XSS) vulnerability in the Content Cards plugin before 0.9.7 for WordPress allows remote attackers to inject arbitrary JavaScript via crafted OpenGraph data.	CWE-79 Cross-site Scripting	CVE-2017-17096	2024-11-21 12:17	2017-12-4	Show	GitHub Exploit DB Packet Storm

254437	8.8	HIGH Network	libtiff	libtiff	tools/pal2rgb.c in pal2rgb in LibTIFF 4.0.9 allows remote attackers to cause a denial of service (TIFFSetupStrips heap-based buffer overflow and application crash) or possibly have unspecified other …	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2017-17095	2024-11-21 12:17	2017-12-2	Show	GitHub Exploit DB Packet Storm

254438	5.4	MEDIUM Network	wordpress debian	wordpress debian_linux	wp-includes/feed.php in WordPress before 4.9.1 does not properly restrict enclosures in RSS and Atom fields, which might allow attackers to conduct XSS attacks via a crafted URL.	CWE-79 Cross-site Scripting	CVE-2017-17094	2024-11-21 12:17	2017-12-2	Show	GitHub Exploit DB Packet Storm

254439	5.4	MEDIUM Network	wordpress debian	wordpress debian_linux	wp-includes/general-template.php in WordPress before 4.9.1 does not properly restrict the lang attribute of an HTML element, which might allow attackers to conduct XSS attacks via the language settin…	CWE-79 Cross-site Scripting	CVE-2017-17093	2024-11-21 12:17	2017-12-2	Show	GitHub Exploit DB Packet Storm

254440	5.4	MEDIUM Network	wordpress debian	wordpress debian_linux	wp-includes/functions.php in WordPress before 4.9.1 does not require the unfiltered_html capability for upload of .js files, which might allow remote attackers to conduct XSS attacks via a crafted fi…	CWE-79 Cross-site Scripting	CVE-2017-17092	2024-11-21 12:17	2017-12-2	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed