Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 23, 2026, 10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
255841	3.3	注意	サイバートラスト株式会社 Wireshark レッドハット	-	Wireshark の SMB 解析部におけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2010-2283	2010-09-6 17:46	2010-06-9	Show	GitHub Exploit DB Packet Storm

255842	4.3	警告	サイバートラスト株式会社 Wireshark レッドハット	-	Wireshark の DOCSIS 解析部におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2010-1455	2010-09-6 17:46	2010-05-5	Show	GitHub Exploit DB Packet Storm

255843	7.8	危険	シスコシステムズ	-	Cisco IOS の TCP 接続におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2010-2827	2010-09-6 17:45	2010-08-12	Show	GitHub Exploit DB Packet Storm

255844	6.9	警告	アップル	-	iPhone および iPod touch 上で稼動する Apple iOS の IOSurface における整数オーバーフローの脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-2973	2010-09-6 17:45	2010-08-5	Show	GitHub Exploit DB Packet Storm

255845	9.3	危険	アップル	-	Apple Quicktime に脆弱性	CWE-119 バッファエラー	CVE-2010-1799	2010-09-6 17:44	2010-08-13	Show	GitHub Exploit DB Packet Storm

255846	10	危険	オラクル	-	Oracle WebLogic Server の WebLogic Server コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0073	2010-09-6 17:41	2010-02-4	Show	GitHub Exploit DB Packet Storm

255847	2.1	注意	サイバートラスト株式会社 libvirt.org レッドハット	-	libvirt における任意のファイルを読まれる脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-2242	2010-09-3 16:32	2010-08-4	Show	GitHub Exploit DB Packet Storm

255848	4.4	警告	サイバートラスト株式会社 libvirt.org レッドハット	-	libvirt における任意のファイルを読まれる脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-2239	2010-09-3 16:32	2010-08-10	Show	GitHub Exploit DB Packet Storm

255849	3.6	注意	freedesktop.org サイバートラスト株式会社レッドハット	-	dbus-glib の GObject プロパティにおけるアクセス制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-1172	2010-09-3 16:32	2010-08-10	Show	GitHub Exploit DB Packet Storm

255850	6.6	警告	マイクロソフト	-	Microsoft Windows の win32k.sys 内にある Windows カーネルモードドライバにおける権限を取得される脆弱性	CWE-20 不適切な入力確認	CVE-2010-1897	2010-09-3 12:00	2010-08-10	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 23, 2026, 4:08 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
247511	8.8	HIGH Network	goldplugins	testimonials_plugin_easy_testimonials	SQL injection vulnerability in the WP-Testimonials plugin 3.4.1 for WordPress allows an authenticated user to execute arbitrary SQL commands via the testid parameter to wp-admin/admin.php.	CWE-89 SQL Injection	CVE-2017-9418	2024-11-21 12:36	2017-06-12	Show	GitHub Exploit DB Packet Storm

247512	5.4	MEDIUM Network	bigtreecms	bigtree_cms	admin.php in BigTree through 4.2.18 has a Cross-site Scripting (XSS) vulnerability, which allows remote authenticated users to inject arbitrary web script or HTML by launching a Home Template Edit Pa…	CWE-79 Cross-site Scripting	CVE-2017-9548	2024-11-21 12:36	2017-06-12	Show	GitHub Exploit DB Packet Storm

247513	5.4	MEDIUM Network	bigtreecms	bigtree_cms	admin.php in BigTree through 4.2.18 has a Cross-site Scripting (XSS) vulnerability, which allows remote authenticated users to inject arbitrary web script or HTML by launching an Edit Page action and…	CWE-79 Cross-site Scripting	CVE-2017-9547	2024-11-21 12:36	2017-06-12	Show	GitHub Exploit DB Packet Storm

247514	5.7	MEDIUM Network	bigtreecms	bigtree_cms	admin.php in BigTree through 4.2.18 allows remote authenticated users to cause a denial of service (inability to save revisions) via XSS sequences in a revision name.	CWE-79 Cross-site Scripting	CVE-2017-9546	2024-11-21 12:36	2017-06-12	Show	GitHub Exploit DB Packet Storm

247515	9.8	CRITICAL Network	echatserver	easy_chat_server	There is a remote stack-based buffer overflow (SEH) in register.ghp in EFS Software Easy Chat Server versions 2.0 to 3.1. By sending an overly long username string to registresult.htm for registering…	CWE-787 Out-of-bounds Write	CVE-2017-9544	2024-11-21 12:36	2017-06-12	Show	GitHub Exploit DB Packet Storm

247516	7.5	HIGH Network	echatserver	easy_chat_server	register.ghp in EFS Software Easy Chat Server versions 2.0 to 3.1 allows remote attackers to reset arbitrary passwords via a crafted POST request to registresult.htm.	CWE-640 Weak Password Recovery Mechanism for Forgotten Password	CVE-2017-9543	2024-11-21 12:36	2017-06-12	Show	GitHub Exploit DB Packet Storm

247517	9.8	CRITICAL Network	d-link	dir-615_firmware	D-Link DIR-615 Wireless N 300 Router allows authentication bypass via a modified POST request to login.cgi. This issue occurs because it fails to validate the password field. Successful exploitation …	CWE-287 Improper Authentication	CVE-2017-9542	2024-11-21 12:36	2017-06-12	Show	GitHub Exploit DB Packet Storm

247518	7.8	HIGH Local	mruby debian	mruby debian_linux	The mark_context_stack function in gc.c in mruby through 1.2.0 allows attackers to cause a denial of service (heap-based use-after-free and application crash) or possibly have unspecified other impac…	CWE-416 Use After Free	CVE-2017-9527	2024-11-21 12:36	2017-06-12	Show	GitHub Exploit DB Packet Storm

247519	5.9	MEDIUM Network	gnupg	libgcrypt	In Libgcrypt before 1.7.7, an attacker who learns the EdDSA session key (from side-channel observation during the signing process) can easily recover the long-term secret key. 1.7.7 makes a cipher/ec…	CWE-200 Information Exposure	CVE-2017-9526	2024-11-21 12:36	2017-06-11	Show	GitHub Exploit DB Packet Storm

247520	6.7	MEDIUM Local	cron_project debian	cron debian_linux	In the cron package through 3.0pl1-128 on Debian, and through 3.0pl1-128ubuntu2 on Ubuntu, the postinst maintainer script allows for group-crontab-to-root privilege escalation via symlink attacks aga…	CWE-59 Link Following	CVE-2017-9525	2024-11-21 12:36	2017-06-10	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed