Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":May 12, 2026, 6 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 255201 | 2.6 | 注意 | オラクル | - | Oracle Application Server におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
- | 2010-01-14 15:01 | 2010-01-14 | Show | GitHub Exploit DB Packet Storm |
| 255202 | 9.3 | 危険 | マイクロソフト | - | Microsoft Internet Explorer に脆弱性 |
CWE-94
コード・インジェクション |
CVE-2009-3672 | 2010-01-14 12:08 | 2009-11-25 | Show | GitHub Exploit DB Packet Storm |
| 255203 | 9.3 | 危険 | サン・マイクロシステムズ VMware |
- | Sun Java SE の java.lang パッケージにおける脆弱性 |
CWE-362
競合状態 |
CVE-2009-2724 | 2010-01-14 12:08 | 2009-08-10 | Show | GitHub Exploit DB Packet Storm |
| 255204 | 10 | 危険 | サン・マイクロシステムズ VMware |
- | Sun Java SE の Provider クラスにおける脆弱性 |
CWE-noinfo
情報不足 |
CVE-2009-2721 | 2010-01-14 12:08 | 2009-08-10 | Show | GitHub Exploit DB Packet Storm |
| 255205 | 5 | 警告 | 有限会社シースリー | - | WebCalenderC3 におけるディレクトリトラバーサルの脆弱性 |
CWE-22
パス・トラバーサル |
CVE-2010-0348 | 2010-01-12 15:01 | 2010-01-12 | Show | GitHub Exploit DB Packet Storm |
| 255206 | 4.3 | 警告 | 有限会社シースリー | - | WebCalenderC3 におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2010-0349 | 2010-01-12 15:00 | 2010-01-12 | Show | GitHub Exploit DB Packet Storm |
| 255207 | 10 | 危険 | サイバートラスト株式会社 XEmacs |
- | XEmacs の glyphs-eimage.c における整数オーバーフローの脆弱性 |
CWE-189
数値処理の問題 |
CVE-2009-2688 | 2010-01-12 14:48 | 2009-08-5 | Show | GitHub Exploit DB Packet Storm |
| 255208 | 6.8 | 警告 | IBM | - | IBM WebSphere Application Server (WAS) におけるクロスサイトリクエストフォージェリの脆弱性 |
CWE-352
同一生成元ポリシー違反 |
CVE-2009-2746 | 2010-01-12 14:48 | 2009-11-13 | Show | GitHub Exploit DB Packet Storm |
| 255209 | 5 | 警告 | アップル | - | Apple Safari におけるローカル HTML ファイルを読まれる脆弱性 |
CWE-Other
その他 |
CVE-2009-2842 | 2010-01-7 12:09 | 2009-11-11 | Show | GitHub Exploit DB Packet Storm |
| 255210 | 5.5 | 警告 | シックス・アパート株式会社 | - | Movable Type におけるアクセス制限回避の脆弱性 |
CWE-264
認可・権限・アクセス制御 |
- | 2010-01-6 15:01 | 2010-01-6 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:May 13, 2026, 5:05 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 250091 | 7.5 |
HIGH
Network |
isc redhat canonical debian |
dhcp enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server enterprise_linux_server_aus enterprise_linux_server_eus enterprise_linux_server_tus ubuntu_linu… |
A vulnerability stemming from failure to properly clean up closed OMAPI connections can lead to exhaustion of the pool of socket descriptors available to the DHCP server. Affects ISC DHCP 4.1.0 to 4.… |
CWE-400
Uncontrolled Resource Consumption |
CVE-2017-3144 | 2024-11-21 12:24 | 2019-01-17 | Show | GitHub Exploit DB Packet Storm |
| 250092 | 5.9 |
MEDIUM
Network |
isc redhat debian |
bind enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server enterprise_linux_server_tus enterprise_linux_server_aus enterprise_linux_server_eus debian_linux |
An attacker who is able to send and receive messages to an authoritative DNS server and who has knowledge of a valid TSIG key name for the zone and service being targeted may be able to manipulate BI… |
NVD-CWE-noinfo
|
CVE-2017-3143 | 2024-11-21 12:24 | 2019-01-17 | Show | GitHub Exploit DB Packet Storm |
| 250093 | 3.7 |
LOW
Network |
isc redhat debian |
bind enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server enterprise_linux_server_tus enterprise_linux_server_aus enterprise_linux_server_eus debian_linux |
An attacker who is able to send and receive messages to an authoritative DNS server and who has knowledge of a valid TSIG key name may be able to circumvent TSIG authentication of AXFR requests via a… |
CWE-20
Improper Input Validation |
CVE-2017-3142 | 2024-11-21 12:24 | 2019-01-17 | Show | GitHub Exploit DB Packet Storm |
| 250094 | 5.3 |
MEDIUM
Network |
isc netapp debian |
bind data_ontap_edge oncommand_balance element_software debian_linux |
named contains a feature which allows operators to issue commands to a running server by communicating with the server process over a control channel, using a utility program such as rndc. A regressi… |
CWE-617
Reachable Assertion |
CVE-2017-3138 | 2024-11-21 12:24 | 2019-01-17 | Show | GitHub Exploit DB Packet Storm |
| 250095 | 7.5 |
HIGH
Network |
isc redhat netapp debian |
bind enterprise_linux_desktop enterprise_linux_server_aus enterprise_linux_workstation enterprise_linux_server_tus enterprise_linux_server enterprise_linux_server_eus data_ontap_… |
Mistaken assumptions about the ordering of records in the answer section of a response containing CNAME or DNAME resource records could lead to a situation in which named would exit with an assertion… |
CWE-617
Reachable Assertion |
CVE-2017-3137 | 2024-11-21 12:24 | 2019-01-17 | Show | GitHub Exploit DB Packet Storm |
| 250096 | 5.9 |
MEDIUM
Network |
isc redhat netapp debian |
bind enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server enterprise_linux_server_tus enterprise_linux_server_aus enterprise_linux_server_eus data_ontap_… |
A query with a specific set of characteristics could cause a server using DNS64 to encounter an assertion failure and terminate. An attacker could deliberately construct a query, enabling denial-of-s… |
CWE-617
Reachable Assertion |
CVE-2017-3136 | 2024-11-21 12:24 | 2019-01-17 | Show | GitHub Exploit DB Packet Storm |
| 250097 | 5.9 |
MEDIUM
Network |
isc redhat netapp debian |
bind enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server enterprise_linux_server_tus enterprise_linux_server_aus enterprise_linux_server_eus data_ontap_… |
Under some conditions when using both DNS64 and RPZ to rewrite query responses, query processing can resume in an inconsistent state leading to either an INSIST assertion failure or an attempt to rea… |
CWE-476
NULL Pointer Dereference |
CVE-2017-3135 | 2024-11-21 12:24 | 2019-01-17 | Show | GitHub Exploit DB Packet Storm |
| 250098 | 4.6 |
MEDIUM
Physics |
hp |
hp_240_g1_firmware hp_245_g1_firmware hp_1000-1300_firmware hp_250_g1_notebook_pc_firmware hp_255_g1_notebook_pc_firmware hp_envy_15-j000_firmware hp_envy_15-j100_firmware hp_pav… |
A BIOS password extraction vulnerability has been reported on certain consumer notebooks with firmware F.22 and others. The BIOS password was stored in CMOS in a way that allowed it to be extracted. … |
CWE-522
Insufficiently Protected Credentials |
CVE-2017-2751 | 2024-11-21 12:24 | 2018-10-4 | Show | GitHub Exploit DB Packet Storm |
| 250099 | 9.8 |
CRITICAL
Network |
foscam | c1_firmware | A missing error check exists in the Multi-Camera interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.43. A specially crafted request on port 10001 could allow an atta… |
CWE-755
Improper Handling of Exceptional Conditions |
CVE-2017-2877 | 2024-11-21 12:24 | 2018-09-20 | Show | GitHub Exploit DB Packet Storm |
| 250100 | 7.5 |
HIGH
Network |
foscam | c1_firmware | An exploitable buffer overflow vulnerability exists in the Multi-Camera interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.43. A specially crafted request on port 10… |
CWE-120
Classic Buffer Overflow |
CVE-2017-2876 | 2024-11-21 12:24 | 2018-09-20 | Show | GitHub Exploit DB Packet Storm |