Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 8, 2026, 2:21 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
254771	6.8	警告	マイクロソフト	-	Microsoft Windows の kernel における権限を取得される脆弱性	CWE-20 不適切な入力確認	CVE-2009-1127	2010-01-4 15:24	2009-11-10	Show	GitHub Exploit DB Packet Storm

254772	10	危険	マイクロソフト	-	Microsoft Windows の License Logging Server (llssrv.exe) における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2009-2523	2010-01-4 15:24	2009-11-10	Show	GitHub Exploit DB Packet Storm

254773	9.3	危険	マイクロソフト	-	Microsoft Windows の Web Services on Devices API (WSDAPI) における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2009-2512	2010-01-4 15:23	2009-11-10	Show	GitHub Exploit DB Packet Storm

254774	10	危険	アップル VMware サン・マイクロシステムズ	-	Sun Java SE の Provider クラスにおける詳細不明な脆弱性	CWE-noinfo 情報不足	CVE-2009-2722	2010-01-4 14:56	2009-08-10	Show	GitHub Exploit DB Packet Storm

254775	10	危険	アップル VMware サン・マイクロシステムズ	-	Sun Java SE の Provider クラスにおける詳細不明な脆弱性	CWE-noinfo 情報不足	CVE-2009-2723	2010-01-4 14:55	2009-08-10	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 8, 2026, 4:54 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
252691	5.9	MEDIUM Network	request_project	request	Request is an http client. If a request is made using ```multipart```, and the body type is a ```number```, then the specified number of non-zero memory is passed in the body. This affects Request >=…	CWE-20 Improper Input Validation	CVE-2017-16026	2024-11-21 12:15	2018-06-5	Show	GitHub Exploit DB Packet Storm

252692	5.9	MEDIUM Network	hapijs	nes	Nes is a websocket extension library for hapi. Hapi is a webserver framework. Versions below and including 6.4.0 have a denial of service vulnerability via an invalid Cookie header. This is only pres…	CWE-287 Improper Authentication	CVE-2017-16025	2024-11-21 12:15	2018-06-5	Show	GitHub Exploit DB Packet Storm

252693	6.5	MEDIUM Network	sync-exec_project nodejs	sync-exec node.js	The sync-exec module is used to simulate child_process.execSync in node versions <0.11.9. Sync-exec uses tmp directories as a buffer before returning values. Other users on the server have read acces…	CWE-200 Information Exposure	CVE-2017-16024	2024-11-21 12:15	2018-06-5	Show	GitHub Exploit DB Packet Storm

252694	7.5	HIGH Network	decamelize_project	decamelize	Decamelize is used to convert a dash/dot/underscore/space separated string to camelCase. Decamelize 1.1.0 through 1.1.1 uses regular expressions to evaluate a string and takes unescaped separator val…	CWE-20 Improper Input Validation	CVE-2017-16023	2024-11-21 12:15	2018-06-5	Show	GitHub Exploit DB Packet Storm

252695	6.1	MEDIUM Network	morris.js_project	morris.js	Morris.js creates an svg graph, with labels that appear when hovering over a point. The hovering label names are not escaped in versions 0.5.0 and earlier. If control over the labels is obtained, scr…	CWE-79 Cross-site Scripting	CVE-2017-16022	2024-11-21 12:15	2018-06-5	Show	GitHub Exploit DB Packet Storm

252696	6.5	MEDIUM Network	garycourt	uri-js	uri-js is a module that tries to fully implement RFC 3986. One of these features is validating whether or not a supplied URL is valid or not. To do this, uri-js uses a regular expression, This regula…	CWE-1333 Inefficient Regular Expression Complexity	CVE-2017-16021	2024-11-21 12:15	2018-06-5	Show	GitHub Exploit DB Packet Storm

252697	9.8	CRITICAL Network	summit_project	summit	Summit is a node web framework. When using the PouchDB driver in the module, Summit 0.1.0 and later allows an attacker to execute arbitrary commands via the collection name.	CWE-94 Code Injection	CVE-2017-16020	2024-11-21 12:15	2018-06-5	Show	GitHub Exploit DB Packet Storm

252698	6.1	MEDIUM Network	gitbook	gitbook	GitBook is a command line tool (and Node.js library) for building beautiful books using GitHub/Git and Markdown (or AsciiDoc). Stored Cross-Site-Scripting (XSS) is possible in GitBook before 3.2.2 by…	CWE-79 Cross-site Scripting	CVE-2017-16019	2024-11-21 12:15	2018-06-5	Show	GitHub Exploit DB Packet Storm

252699	6.1	MEDIUM Network	restify	restify	Restify is a framework for building REST APIs. Restify >=2.0.0 <=4.0.4 using URL encoded script tags in a non-existent URL, an attacker can get script to run in some browsers.	CWE-79 Cross-site Scripting	CVE-2017-16018	2024-11-21 12:15	2018-06-5	Show	GitHub Exploit DB Packet Storm

252700	6.1	MEDIUM Network	punkave	sanitize-html	sanitize-html is a library for scrubbing html input for malicious values Versions 1.2.2 and below have a cross site scripting vulnerability.	CWE-79 Cross-site Scripting	CVE-2017-16017	2024-11-21 12:15	2018-06-5	Show	GitHub Exploit DB Packet Storm