Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 20, 2026, 10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
254821	10	危険	IBM	-	IBM AIX の ftpd におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-3187	2010-11-22 15:19	2010-08-25	Show	GitHub Exploit DB Packet Storm

254822	4.3	警告	アップルアドビシステムズ	-	Mac OS X 上で稼働する Adobe Flash Player における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2010-3638	2010-11-19 14:13	2010-11-4	Show	GitHub Exploit DB Packet Storm

254823	-	-	Attachmate	-	Attachmate Reflection for the Web におけるクロスサイトスクリプティングの脆弱性	-	-	2010-11-19 13:55	2010-11-2	Show	GitHub Exploit DB Packet Storm

254824	9.3	危険	アドビシステムズ	-	Adobe Shockwave Player における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-4090	2010-11-18 15:47	2010-10-28	Show	GitHub Exploit DB Packet Storm

254825	9.3	危険	アドビシステムズ	-	Adobe Shockwave Player の IML32.dll における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-4089	2010-11-18 15:47	2010-10-28	Show	GitHub Exploit DB Packet Storm

254826	9.3	危険	アドビシステムズ	-	Adobe Shockwave Player の dirapi.dll における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-4088	2010-11-18 15:46	2010-10-28	Show	GitHub Exploit DB Packet Storm

254827	9.3	危険	アドビシステムズ	-	Adobe Shockwave Player の IML32.dll における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-4087	2010-11-17 16:51	2010-10-28	Show	GitHub Exploit DB Packet Storm

254828	9.3	危険	アドビシステムズ	-	Adobe Shockwave Player の dirapi.dll における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-4086	2010-11-17 16:50	2010-10-28	Show	GitHub Exploit DB Packet Storm

254829	9.3	危険	アドビシステムズ	-	Adobe Shockwave Player の dirapi.dll における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-4085	2010-11-17 16:50	2010-10-28	Show	GitHub Exploit DB Packet Storm

254830	9.3	危険	アドビシステムズ	-	Adobe Shockwave Player の dirapi.dll における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-4084	2010-11-17 16:50	2010-10-28	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 20, 2026, 4:14 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
258961	6.5	MEDIUM Network	imagemagick	imagemagick	The ReadOneDJVUImage function in coders/djvu.c in ImageMagick through 6.9.9-0 and 7.x through 7.0.6-1 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a ma…	CWE-835 Loop with Unreachable Exit Condition ('Infinite Loop')	CVE-2017-11478	2024-11-21 12:07	2017-07-21	Show	GitHub Exploit DB Packet Storm

258962	8.8	HIGH Network	glpi-project	glpi	GLPI before 9.1.5.1 has SQL Injection in the condition rule field, exploitable via front/rulesengine.test.php.	CWE-89 SQL Injection	CVE-2017-11475	2024-11-21 12:07	2017-07-20	Show	GitHub Exploit DB Packet Storm

258963	9.8	CRITICAL Network	glpi-project	glpi	GLPI before 9.1.5.1 has SQL Injection in the $crit variable in inc/computer_softwareversion.class.php, exploitable via ajax/common.tabs.php.	CWE-89 SQL Injection	CVE-2017-11474	2024-11-21 12:07	2017-07-20	Show	GitHub Exploit DB Packet Storm

258964	7.8	HIGH Local	linux canonical	linux_kernel ubuntu_linux	Buffer overflow in the mp_override_legacy_irq() function in arch/x86/kernel/acpi/boot.c in the Linux kernel through 3.2 allows local users to gain privileges via a crafted ACPI table.	CWE-120 Classic Buffer Overflow	CVE-2017-11473	2024-11-21 12:07	2017-07-20	Show	GitHub Exploit DB Packet Storm

258965	7.1	HIGH Local	linux	linux_kernel	The acpi_ns_terminate() function in drivers/acpi/acpica/nsutils.c in the Linux kernel before 4.12 does not flush the operand cache and causes a kernel stack dump, which allows local users to obtain s…	CWE-755 Improper Handling of Exceptional Conditions	CVE-2017-11472	2024-11-21 12:07	2017-07-20	Show	GitHub Exploit DB Packet Storm

258966	9.8	CRITICAL Network	idera	uptime_infrastructure_monitor	IDERA Uptime Monitor 7.8 has SQL injection in /gadgets/definitions/uptime.CapacityWhatIfGadget/getmetrics.php via the element parameter.	CWE-89 SQL Injection	CVE-2017-11471	2024-11-21 12:07	2017-07-20	Show	GitHub Exploit DB Packet Storm

258967	9.8	CRITICAL Network	idera	uptime_infrastructure_monitor	IDERA Uptime Monitor 7.8 has SQL injection in /gadgets/definitions/uptime.CapacityWhatifGadget/getxenmetrics.php via the element parameter.	CWE-89 SQL Injection	CVE-2017-11470	2024-11-21 12:07	2017-07-20	Show	GitHub Exploit DB Packet Storm

258968	7.5	HIGH Network	idera	uptime_infrastructure_monitor	get2post.php in IDERA Uptime Monitor 7.8 has directory traversal in the file_name parameter.	CWE-22 Path Traversal	CVE-2017-11469	2024-11-21 12:07	2017-07-20	Show	GitHub Exploit DB Packet Storm

258969	9.8	CRITICAL Network	orientdb	orientdb	OrientDB through 2.2.22 does not enforce privilege requirements during "where" or "fetchplan" or "order by" use, which allows remote attackers to execute arbitrary OS commands via a crafted request.	CWE-269 Improper Privilege Management	CVE-2017-11467	2024-11-21 12:07	2017-07-20	Show	GitHub Exploit DB Packet Storm

258970	7.2	HIGH Network	dotcms	dotcms	Arbitrary file upload vulnerability in com/dotmarketing/servlets/AjaxFileUploadServlet.class in dotCMS 4.1.1 allows remote authenticated administrators to upload .jsp files to arbitrary locations via…	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2017-11466	2024-11-21 12:07	2017-07-20	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed