Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 13, 2026, 2:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
255071	6.8	警告	シュナイダーエレクトリック株式会社 (旧社名株式会社エーピーシー・ジャパン)	-	APC Network Management Card におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2009-1797	2010-03-12 15:12	2009-12-28	Show	GitHub Exploit DB Packet Storm

255072	6.6	警告	日立	-	JP1/Cm2/Network Node Manager のリモートコンソールにおけるファイルパーミッションの脆弱性	CWE-264 認可・権限・アクセス制御	-	2010-03-12 15:12	2010-02-26	Show	GitHub Exploit DB Packet Storm

255073	9.3	危険	Panda Security	-	Panda Security ActiveScan におけるコンポーネントのデジタル署名を検証しない問題	CWE-94 コード・インジェクション	CVE-2009-3735	2010-03-12 15:12	2010-02-12	Show	GitHub Exploit DB Packet Storm

255074	5	警告	サイバートラスト株式会社 OpenSSL Project IBM レッドハット	-	OpenSSL の dtls1_retrieve_buffered_fragment 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2009-1379	2010-03-12 14:44	2009-05-19	Show	GitHub Exploit DB Packet Storm

255075	5	警告	サイバートラスト株式会社 OpenSSL Project IBM レッドハット	-	OpenSSL の dtls1_process_out_of_seq_message 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2009-1378	2010-03-12 14:44	2009-05-19	Show	GitHub Exploit DB Packet Storm

255076	5	警告	サイバートラスト株式会社 OpenSSL Project IBM レッドハット	-	OpenSSL の dtls1_buffer_record 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-119 バッファエラー	CVE-2009-1377	2010-03-12 14:43	2009-05-19	Show	GitHub Exploit DB Packet Storm

255077	5	警告	アップルサイバートラスト株式会社 OpenSSL Project Apache Software Foundation レッドハット	-	OpenSSL の zlib_stateful_init 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2008-1678	2010-03-12 14:43	2008-07-10	Show	GitHub Exploit DB Packet Storm

255078	5.8	警告	OpenPNEプロジェクト	-	OpenPNE におけるアクセス制限回避の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-1040	2010-03-11 12:39	2010-03-5	Show	GitHub Exploit DB Packet Storm

255079	10	危険	アドビシステムズ	-	Adobe Download Manager における任意のプログラムをダウンロードおよびインストールされる脆弱性	CWE-noinfo 情報不足	CVE-2010-0189	2010-03-11 12:07	2010-02-23	Show	GitHub Exploit DB Packet Storm

255080	7.2	危険	サイバートラスト株式会社 Linux レッドハット	-	Linux kernel の collect_rx_frame 関数における脆弱性	CWE-119 バッファエラー	CVE-2009-4005	2010-03-11 12:05	2009-11-20	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 13, 2026, 5:05 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
256971	7.8	HIGH Local	microsoft	excel	Microsoft Excel 2016 Click-to-Run (C2R) allows an attacker to run arbitrary code in the context of the current user by failing to properly handle objects in memory, aka "Microsoft Office Memory Corru…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2017-11884	2024-11-21 12:08	2017-11-15	Show	GitHub Exploit DB Packet Storm

256972	7.5	HIGH Network	microsoft	aspnetcore	.NET Core 1.0, 1.1, and 2.0 allow an unauthenticated attacker to remotely cause a denial of service attack against a .NET Core web application by improperly handling web requests, aka ".NET CORE Deni…	NVD-CWE-noinfo	CVE-2017-11883	2024-11-21 12:08	2017-11-15	Show	GitHub Exploit DB Packet Storm

256973	8.8	HIGH Network	microsoft	asp.net_core	ASP.NET Core 2.0 allows an attacker to steal log-in session information such as cookies or authentication tokens via a specially crafted URL aka "ASP.NET Core Elevation Of Privilege Vulnerability".	CWE-601 Open Redirect	CVE-2017-11879	2024-11-21 12:08	2017-11-15	Show	GitHub Exploit DB Packet Storm

256974	3.1	LOW Network	microsoft	chakracore edge	Microsoft Edge in Microsoft Windows 10 1703, 1709, Windows Server, version 1709, and ChakraCore allows an attacker to bypass Control Flow Guard (CFG) to run arbitrary code on a target system, due to …	NVD-CWE-noinfo	CVE-2017-11874	2024-11-21 12:08	2017-11-15	Show	GitHub Exploit DB Packet Storm

256975	4.7	MEDIUM Local	microsoft	windows_server_2012 windows_7 windows_10 windows_server_2016 windows_8.1 windows_server_2008 windows_rt_8.1	Windows kernel in Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an attac…	CWE-200 Information Exposure	CVE-2017-11880	2024-11-21 12:08	2017-11-15	Show	GitHub Exploit DB Packet Storm

256976	7.8	HIGH Local	microsoft	excel office_compatibility_pack excel_viewer	Microsoft Excel 2007 Service Pack 3, Microsoft Excel 2010 Service Pack 2, Microsoft Excel 2013 Service Pack 1, Microsoft Excel 2013 RT Service Pack 1, Microsoft Excel 2016, Microsoft Office Compatibi…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2017-11878	2024-11-21 12:08	2017-11-15	Show	GitHub Exploit DB Packet Storm

256977	5.5	MEDIUM Local	microsoft	excel office_compatibility_pack excel_viewer	Microsoft Excel 2007 Service Pack 3, Microsoft Excel 2010 Service Pack 2, Microsoft Excel 2013 Service Pack 1, Microsoft Excel 2013 RT Service Pack 1, Microsoft Excel 2016, Microsoft Office Compatibi…	NVD-CWE-noinfo	CVE-2017-11877	2024-11-21 12:08	2017-11-15	Show	GitHub Exploit DB Packet Storm

256978	8.8	HIGH Network	microsoft	project_server sharepoint_enterprise_server	Microsoft Project Server and Microsoft SharePoint Enterprise Server 2016 allow an attacker to use cross-site forgery to read content that they are not authorized to read, use the victim's identity to…	CWE-352 Origin Validation Error	CVE-2017-11876	2024-11-21 12:08	2017-11-15	Show	GitHub Exploit DB Packet Storm

256979	7.5	HIGH Network	microsoft	chakracore edge	ChakraCore and Microsoft Edge in Windows 10 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to gain the same user rights as the current user, due to ho…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2017-11873	2024-11-21 12:08	2017-11-15	Show	GitHub Exploit DB Packet Storm

256980	6.5	MEDIUM Network	microsoft	edge	Microsoft Edge in Microsoft Windows 10 1607, 1703, and Windows Server 2016 allows an attacker to force the browser to send data that would otherwise be restricted to a destination website of the atta…	NVD-CWE-noinfo	CVE-2017-11872	2024-11-21 12:08	2017-11-15	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed