Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 13, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
255281 10 危険 ヒューレット・パッカード - 複数の Symantec 製品の VRTSweb における任意のコードを実行される脆弱性 CWE-287
不適切な認証 		CVE-2009-3027 2010-02-1 11:51 2009-12-8 Show GitHub Exploit DB Packet Storm
255282 9.3 危険 KDE project
Glyph & Cog, LLC
GNOME Project
サイバートラスト株式会社
レッドハット		 - Xpdf、gpdf および kpdf の FoFiType1::parse 関数における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2009-4035 2010-01-29 09:54 2009-12-16 Show GitHub Exploit DB Packet Storm
255283 7.8 危険 Mozilla Foundation - Mozilla Firefox/SeaMonkey の GeckoActiveXObject 関数における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2009-3987 2010-01-29 09:54 2009-12-15 Show GitHub Exploit DB Packet Storm
255284 7.6 危険 サイバートラスト株式会社
Mozilla Foundation
レッドハット		 - Mozilla Firefox/SeaMonkey における任意の JavaScript を実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2009-3986 2010-01-29 09:54 2009-12-15 Show GitHub Exploit DB Packet Storm
255285 6.8 警告 サイバートラスト株式会社
Mozilla Foundation
レッドハット		 - Mozilla Firefox/SeaMonkey におけるコンテンツを偽装される脆弱性 CWE-Other
その他 		CVE-2009-3985 2010-01-29 09:53 2009-12-15 Show GitHub Exploit DB Packet Storm
255286 6.8 警告 サイバートラスト株式会社
Mozilla Foundation
レッドハット		 - Mozilla Firefox/SeaMonkey における http URL または file URL の SSL インジケータを偽装される脆弱性 CWE-Other
その他 		CVE-2009-3984 2010-01-29 09:53 2009-12-15 Show GitHub Exploit DB Packet Storm
255287 6.8 警告 サイバートラスト株式会社
Mozilla Foundation
レッドハット		 - Mozilla Firefox/SeaMonkey における認証されたリクエストを任意のアプリケーションに送信される脆弱性 CWE-Other
その他 		CVE-2009-3983 2010-01-29 09:53 2009-12-15 Show GitHub Exploit DB Packet Storm
255288 9.3 危険 Mozilla Foundation - 複数の Mozilla 製品の libtheora における任意のコードを実行される脆弱性 CWE-189
数値処理の問題 		CVE-2009-3389 2010-01-28 12:16 2009-12-15 Show GitHub Exploit DB Packet Storm
255289 9.3 危険 Mozilla Foundation - 複数の Mozilla 製品の liboggplay における任意のコードを実行される脆弱性 CWE-399
リソース管理の問題 		CVE-2009-3388 2010-01-28 12:16 2009-12-15 Show GitHub Exploit DB Packet Storm
255290 9.3 危険 Mozilla Foundation - 複数の Mozilla 製品の JavaScript エンジンにおける任意のコードを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2009-3982 2010-01-28 12:16 2009-12-15 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 13, 2026, 5:05 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
256561 9.8 CRITICAL
Network 		debian
x.org 		debian_linux
xorg-server 		xorg-x11-server before 1.19.5 was missing length validation in XFree86 DRI extension allowing malicious X client to cause X server to crash or possibly execute arbitrary code. CWE-20
 Improper Input Validation  		CVE-2017-12182 2024-11-21 12:09 2018-01-25 Show GitHub Exploit DB Packet Storm
256562 9.8 CRITICAL
Network 		debian
x.org 		debian_linux
xorg-server 		xorg-x11-server before 1.19.5 was missing length validation in XFree86 DGA extension allowing malicious X client to cause X server to crash or possibly execute arbitrary code. CWE-20
 Improper Input Validation  		CVE-2017-12181 2024-11-21 12:09 2018-01-25 Show GitHub Exploit DB Packet Storm
256563 7.5 HIGH
Network 		apache nifi A malicious host header in an incoming HTTP request could cause NiFi to load resources from an external server. The fix to sanitize host headers and compare to a controlled whitelist was applied on t… CWE-20
 Improper Input Validation  		CVE-2017-12632 2024-11-21 12:09 2018-01-24 Show GitHub Exploit DB Packet Storm
256564 6.5 MEDIUM
Network 		libpam4j_project
redhat
debian 		libpam4j
enterprise_linux
debian_linux 		It was found that libpam4j up to and including 1.8 did not properly validate user accounts when authenticating. A user with a valid password for a disabled account would be able to bypass security re… CWE-20
 Improper Input Validation  		CVE-2017-12197 2024-11-21 12:09 2018-01-19 Show GitHub Exploit DB Packet Storm
256565 6.1 MEDIUM
Network 		cisco sg350-10_firmware
sg350-10p_firmware
sg350-10mp_firmware
sg355-10p_firmware
sg350-28_firmware
sg350-28p_firmware
sg350-28mp_firmware
sf350-48_firmware
sf350-48p_firmware
sf… 		A vulnerability in the web framework of Cisco Small Business Managed Switches software could allow an unauthenticated, remote attacker to conduct an HTTP response splitting attack against a user of t… NVD-CWE-Other
CVE-2017-12308 2024-11-21 12:09 2018-01-18 Show GitHub Exploit DB Packet Storm
256566 6.1 MEDIUM
Network 		cisco sg350-10_firmware
sg350-10p_firmware
sg350-10mp_firmware
sg355-10p_firmware
sg350-28_firmware
sg350-28p_firmware
sg350-28mp_firmware
sf350-48_firmware
sf350-48p_firmware
sf… 		A vulnerability in the web framework of Cisco Small Business Managed Switches software could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting (XSS) attack against… CWE-79
Cross-site Scripting 		CVE-2017-12307 2024-11-21 12:09 2018-01-18 Show GitHub Exploit DB Packet Storm
256567 7.8 HIGH
Local 		redhat jboss_enterprise_application_platform
enterprise_linux 		It was discovered that the jboss init script as used in Red Hat JBoss Enterprise Application Platform 7.0.7.GA performed unsafe file handling which could result in local privilege escalation. This is… NVD-CWE-noinfo
CVE-2017-12189 2024-11-21 12:09 2018-01-11 Show GitHub Exploit DB Packet Storm
256568 7.1 HIGH
Network 		apache geode When an Apache Geode cluster before v1.3.0 is operating in secure mode and an authenticated user connects to a Geode cluster using the gfsh tool with HTTP, the user is able to obtain status informati… CWE-200
Information Exposure 		CVE-2017-12622 2024-11-21 12:09 2018-01-10 Show GitHub Exploit DB Packet Storm
256569 5.4 MEDIUM
Network 		apache drill In Apache Drill 1.11.0 and earlier when submitting form from Query page users are able to pass arbitrary script or HTML which will take effect on Profile page afterwards. Example: after submitting sp… CWE-79
Cross-site Scripting 		CVE-2017-12630 2024-11-21 12:09 2017-12-18 Show GitHub Exploit DB Packet Storm
256570 5.9 MEDIUM
Network 		cisco adaptive_security_appliance_5505_firmware
adaptive_security_appliance_5510_firmware
adaptive_security_appliance_5520_firmware
adaptive_security_appliance_5540_firmware
adaptive_security_a… 		A vulnerability in the TLS protocol implementation of legacy Cisco ASA 5500 Series (ASA 5505, 5510, 5520, 5540, and 5550) devices could allow an unauthenticated, remote attacker to access sensitive i… CWE-203
 Information Exposure Through Discrepancy 		CVE-2017-12373 2024-11-21 12:09 2017-12-16 Show GitHub Exploit DB Packet Storm