Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 12, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
254921	10	危険	サイバートラスト株式会社レッドハット SystemTap	-	SystemTap の stap-server における任意のコマンドを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2009-4273	2010-03-16 11:14	2010-01-26	Show	GitHub Exploit DB Packet Storm

254922	6.5	警告	サイバートラスト株式会社 Linux レッドハット	-	KVM の x86 エミュレータにおける権限昇格の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-0298	2010-03-16 11:13	2010-02-9	Show	GitHub Exploit DB Packet Storm

254923	4.4	警告	サイバートラスト株式会社 Fabrice Bellard レッドハット	-	QEMU の usb_host_handle_control 関数におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-0297	2010-03-16 11:13	2010-02-9	Show	GitHub Exploit DB Packet Storm

254924	6.8	警告	サン・マイクロシステムズ freedesktop.org	-	Poppler における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2009-3605	2010-03-15 16:40	2009-11-2	Show	GitHub Exploit DB Packet Storm

254925	4.1	警告	Linux レッドハット	-	Linux kernel の smbfs に関する脆弱性	-	CVE-2006-5871	2010-03-15 16:40	2005-10-5	Show	GitHub Exploit DB Packet Storm

254926	7.8	危険	Linux レッドハット	-	Linux kernel の selinux_parse_skb_ipv6 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-189 数値処理の問題	CVE-2005-4886	2010-03-15 16:40	2005-10-5	Show	GitHub Exploit DB Packet Storm

254927	5	警告	サン・マイクロシステムズ	-	Sun ONE/iPlanet Web Server におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2003-1589	2010-03-15 16:39	2003-12-2	Show	GitHub Exploit DB Packet Storm

254928	5	警告	サン・マイクロシステムズ	-	Sun ONE/iPlanet Web Server におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2003-1590	2010-03-15 16:39	2003-08-13	Show	GitHub Exploit DB Packet Storm

254929	7.1	危険	サイバートラスト株式会社 Linux レッドハット	-	Linux kernel の handle_dr 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2009-3722	2010-03-15 15:23	2009-10-30	Show	GitHub Exploit DB Packet Storm

254930	4.3	警告	シュナイダーエレクトリック株式会社 (旧社名株式会社エーピーシー・ジャパン)	-	APC Switched Rack PDU におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-4406	2010-03-12 15:13	2009-12-23	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 12, 2026, 5:06 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
248901	3.3	LOW Local	lenovo	power_management	In the Lenovo Power Management driver before 1.67.12.24, a local user may alter the trackpoint's firmware and stop the trackpoint from functioning correctly. This issue only affects ThinkPad X1 Carbo…	NVD-CWE-noinfo	CVE-2017-3741	2024-11-21 12:26	2017-06-5	Show	GitHub Exploit DB Packet Storm

248902	5.5	MEDIUM Local	lenovo	active_protection_system	In Lenovo Active Protection System before 1.82.0.14, an attacker with local privileges could send commands to the system's embedded controller, which could cause a denial of service attack on the sys…	NVD-CWE-noinfo	CVE-2017-3740	2024-11-21 12:26	2017-06-5	Show	GitHub Exploit DB Packet Storm

248903	5.5	MEDIUM Local	vmware	horizon_daas	VMware Horizon DaaS before 7.0.0 contains a vulnerability that exists due to insufficient validation of data. An attacker may exploit this issue by tricking DaaS client users into connecting to a mal…	CWE-20 Improper Input Validation	CVE-2017-4897	2024-11-21 12:26	2017-05-31	Show	GitHub Exploit DB Packet Storm

248904	6.5	MEDIUM Network	vmware	workstation_player workstation_pro	VMware Workstation Pro/Player contains a NULL pointer dereference vulnerability that exists in the vstor2 driver. Successful exploitation of this issue may allow host users with normal user privilege…	CWE-476 NULL Pointer Dereference	CVE-2017-4916	2024-11-21 12:26	2017-05-22	Show	GitHub Exploit DB Packet Storm

248905	7.8	HIGH Local	vmware	workstation_player workstation_pro	VMware Workstation Pro/Player contains an insecure library loading vulnerability via ALSA sound driver configuration files. Successful exploitation of this issue may allow unprivileged host users to …	CWE-863 Incorrect Authorization	CVE-2017-4915	2024-11-21 12:26	2017-05-22	Show	GitHub Exploit DB Packet Storm

248906	7.1	HIGH Network	emc	isilon_onefs	EMC Isilon OneFS 8.0.1.0, OneFS 8.0.0.0 - 8.0.0.2, OneFS 7.2.1.0 - 7.2.1.3, and OneFS 7.2.0.x is affected by an NFS export vulnerability. Under certain conditions, after upgrading a cluster from OneF…	NVD-CWE-noinfo	CVE-2017-4979	2024-11-21 12:26	2017-05-20	Show	GitHub Exploit DB Packet Storm

248907	5.4	MEDIUM Network	rsa	adaptive_authentication_\(on_premise\)	EMC RSA Adaptive Authentication (On-Premise) versions prior to 7.3 P2 (exclusive) contains a fix for a cross-site scripting vulnerability that could potentially be exploited by malicious users to com…	CWE-79 Cross-site Scripting	CVE-2017-4978	2024-11-21 12:26	2017-05-20	Show	GitHub Exploit DB Packet Storm

248908	7.2	HIGH Network	mcafee	epolicy_orchestrator	A directory traversal vulnerability in the ePO Extension in McAfee ePolicy Orchestrator (ePO) 5.9.0, 5.3.2, and 5.1.3 and earlier allows remote authenticated users to execute a command of their choic…	CWE-22 Path Traversal	CVE-2017-3980	2024-11-21 12:26	2017-05-19	Show	GitHub Exploit DB Packet Storm

248909	5.3	MEDIUM Network	mcafee	network_data_loss_prevention	User Name Disclosure in the server in McAfee Network Data Loss Prevention (NDLP) 9.3.x allows remote attackers to view user information via the appliance web interface.	CWE-200 Information Exposure	CVE-2017-4017	2024-11-21 12:26	2017-05-18	Show	GitHub Exploit DB Packet Storm

248910	5.3	MEDIUM Network	mcafee	network_data_loss_prevention	Web Server method disclosure in the server in McAfee Network Data Loss Prevention (NDLP) 9.3.x allows remote attackers to exploit and find another hole via HTTP response header.	CWE-200 Information Exposure	CVE-2017-4016	2024-11-21 12:26	2017-05-18	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed