Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 15, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
254921 10 危険 オラクル - Oracle Secure Backup における脆弱性 CWE-noinfo
情報不足
CVE-2010-0898 2010-08-5 16:31 2010-07-13 Show GitHub Exploit DB Packet Storm
254922 5 警告 オラクル - Oracle TimesTen In-Memory Database の Data Server コンポーネントにおける脆弱性 CWE-noinfo
情報不足
CVE-2010-0910 2010-08-5 16:31 2010-07-13 Show GitHub Exploit DB Packet Storm
254923 10 危険 オラクル - Oracle TimesTen In-Memory Database の Data Server コンポーネントにおける脆弱性 CWE-noinfo
情報不足
CVE-2010-0873 2010-08-5 16:30 2010-07-13 Show GitHub Exploit DB Packet Storm
254924 3.2 注意 オラクル - Oracle Solaris における Solaris Management コンソールの処理に関する脆弱性 CWE-noinfo
情報不足
CVE-2010-2384 2010-08-4 16:26 2010-07-13 Show GitHub Exploit DB Packet Storm
254925 3.2 注意 オラクル - Oracle Solaris における NFS の処理に関する脆弱性 CWE-noinfo
情報不足
CVE-2010-2383 2010-08-4 16:25 2010-07-13 Show GitHub Exploit DB Packet Storm
254926 3.2 注意 オラクル - Oracle Solaris における脆弱性 CWE-noinfo
情報不足
CVE-2010-2382 2010-08-4 16:25 2010-07-13 Show GitHub Exploit DB Packet Storm
254927 3.2 注意 オラクル - Oracle Solaris における Solaris Management コンソールの処理に関する脆弱性 CWE-noinfo
情報不足
CVE-2010-2376 2010-08-4 16:25 2010-07-13 Show GitHub Exploit DB Packet Storm
254928 3.8 注意 オラクル - Oracle Solaris における RPCの処理に関する脆弱性 CWE-noinfo
情報不足
CVE-2010-2393 2010-08-4 16:25 2010-07-13 Show GitHub Exploit DB Packet Storm
254929 4.6 警告 オラクル - Oracle Solaris における Kernel/Filesystem の処理に関する脆弱性 CWE-noinfo
情報不足
CVE-2010-2400 2010-08-4 16:24 2010-07-13 Show GitHub Exploit DB Packet Storm
254930 4.6 警告 オラクル - Oracle Solaris における Kernel/VM の処理に関する脆弱性 CWE-noinfo
情報不足
CVE-2010-2399 2010-08-4 16:24 2010-07-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 15, 2026, 4:28 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
248681 9.8 CRITICAL
Network
libraw libraw-demosaic-pack-gpl2 A boundary error within the "foveon_load_camf()" function (dcraw_foveon.c) when initializing a huffman table in LibRaw-demosaic-pack-GPL2 before 0.18.2 can be exploited to cause a stack-based buffer … CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2017-6890 2024-11-21 12:30 2017-05-16 Show GitHub Exploit DB Packet Storm
248682 9.8 CRITICAL
Network
libraw libraw-demosaic-pack-gpl2 An integer overflow error within the "foveon_load_camf()" function (dcraw_foveon.c) in LibRaw-demosaic-pack-GPL2 before 0.18.2 can be exploited to cause a heap-based buffer overflow. CWE-190
 Integer Overflow or Wraparound
CVE-2017-6889 2024-11-21 12:30 2017-05-16 Show GitHub Exploit DB Packet Storm
248683 4.9 MEDIUM
Network
siemens simatic_wincc_\(tia_portal\)
simatic_wincc
simatic_wincc_runtime
A vulnerability was discovered in Siemens SIMATIC WinCC (V7.3 before Upd 11 and V7.4 before SP1), SIMATIC WinCC Runtime Professional (V13 before SP2 and V14 before SP1), SIMATIC WinCC (TIA Portal) Pr… CWE-20
 Improper Input Validation 
CVE-2017-6867 2024-11-21 12:30 2017-05-11 Show GitHub Exploit DB Packet Storm
248684 6.5 MEDIUM
Adjacent
siemens sinaut_st7cc
simatic_step_7_\(tia_portal\)
simatic_winac_rtx_2010
simatic_wincc_\(tia_portal\)
sinumerik_808d_programming_tool
simatic_winac_rtx_f_2010
simatic_wincc_flexible_2008
A vulnerability has been identified in Primary Setup Tool (PST) (All versions < V4.2 HF1), SIMATIC Automation Tool (All versions < V3.0), SIMATIC NET PC-Software (All versions < V14 SP1), SIMATIC PCS… CWE-20
 Improper Input Validation 
CVE-2017-6865 2024-11-21 12:30 2017-05-11 Show GitHub Exploit DB Packet Storm
248685 7.8 HIGH
Local
gemalto smartdiag_diagnosis_tool Gemalto SmartDiag Diagnosis Tool v2.5 has a stack-based Buffer Overflow with SEH Overwrite via long "Register a new card" input fields. There may be a risk of local code execution with untrusted inpu… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2017-6953 2024-11-21 12:30 2017-05-9 Show GitHub Exploit DB Packet Storm
248686 8.8 HIGH
Network
xirrus arrayos SQL injection vulnerability in ArrayOS before AG 9.4.0.135, when the portal bookmark function is enabled, allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors. CWE-89
SQL Injection
CVE-2017-6557 2024-11-21 12:30 2017-05-5 Show GitHub Exploit DB Packet Storm
248687 5.3 MEDIUM
Network
cisco unity_connection A vulnerability in the ImageID parameter of Cisco Unity Connection 10.5(2) could allow an unauthenticated, remote attacker to access files in arbitrary locations on the filesystem of an affected devi… CWE-22
Path Traversal
CVE-2017-6629 2024-11-21 12:30 2017-05-4 Show GitHub Exploit DB Packet Storm
248688 6.8 MEDIUM
Network
cisco wide_area_application_services A vulnerability in SMART-SSL Accelerator functionality for Cisco Wide Area Application Services (WAAS) 6.2.1, 6.2.1a, and 6.2.3a could allow an unauthenticated, remote attacker to cause a denial of s… CWE-755
 Improper Handling of Exceptional Conditions
CVE-2017-6628 2024-11-21 12:30 2017-05-4 Show GitHub Exploit DB Packet Storm
248689 5.3 MEDIUM
Network
cisco ios A vulnerability in Cisco IOS 15.5(3)M Software for Cisco CallManager Express (CME) could allow an unauthenticated, remote attacker to make unauthorized phone calls. The vulnerability is due to a conf… CWE-287
Improper Authentication
CVE-2017-6624 2024-11-21 12:30 2017-05-4 Show GitHub Exploit DB Packet Storm
248690 5.3 MEDIUM
Network
cisco unified_contact_center_enterprise A vulnerability in the Cisco Finesse Notification Service for Cisco Unified Contact Center Enterprise (UCCE) 11.5(1) and 11.6(1) could allow an unauthenticated, remote attacker to retrieve informatio… CWE-200
Information Exposure
CVE-2017-6626 2024-11-21 12:30 2017-05-4 Show GitHub Exploit DB Packet Storm