Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 25, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
255861	4.3	警告	Opera Software ASA	-	Opera におけるアドレスバーの処理に関する脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-2455	2010-09-27 16:18	2010-06-28	Show	GitHub Exploit DB Packet Storm

255862	10	危険	Opera Software ASA	-	Opera における脆弱性	CWE-noinfo 情報不足	CVE-2010-2421	2010-09-27 16:18	2010-06-21	Show	GitHub Exploit DB Packet Storm

255863	4.3	警告	Opera Software ASA	-	Opera におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2010-2121	2010-09-27 16:18	2010-06-1	Show	GitHub Exploit DB Packet Storm

255864	5	警告	Opera Software ASA	-	Opera におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2010-1993	2010-09-27 16:17	2010-05-20	Show	GitHub Exploit DB Packet Storm

255865	5	警告	Opera Software ASA	-	Opera におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2010-1989	2010-09-27 16:17	2010-05-20	Show	GitHub Exploit DB Packet Storm

255866	9.3	危険	Opera Software ASA	-	Windows および Mac OS X 上で稼働する Opera における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2010-1728	2010-09-27 16:17	2010-04-30	Show	GitHub Exploit DB Packet Storm

255867	10	危険	Opera Software ASA	-	Opera における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2010-1349	2010-09-27 16:17	2010-04-12	Show	GitHub Exploit DB Packet Storm

255868	5	警告	Opera Software ASA	-	Opera における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2010-1310	2010-09-27 16:16	2010-03-22	Show	GitHub Exploit DB Packet Storm

255869	4.3	警告	Opera Software ASA	-	Opera における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2010-0653	2010-09-27 16:16	2010-02-18	Show	GitHub Exploit DB Packet Storm

255870	10	危険	Opera Software ASA	-	Opera における脆弱性	CWE-noinfo 情報不足	CVE-2009-4072	2010-09-27 16:16	2009-11-23	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 25, 2026, 4:01 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
257841	4.7	MEDIUM Local	x.org debian	xorg-server debian_linux	In X.Org Server (aka xserver and xorg-server) before 1.19.4, an attacker authenticated to an X server with the X shared memory extension enabled can cause aborts of the X server or replace shared mem…	CWE-269 Improper Privilege Management	CVE-2017-13721	2024-11-21 12:11	2017-10-10	Show	GitHub Exploit DB Packet Storm

257842	7.5	HIGH Network	loytec	lvis-3me_firmware	An Insufficiently Protected Credentials issue was discovered in LOYTEC LVIS-3ME versions prior to 6.2.0. The application does not sufficiently protect sensitive information from unauthorized access.	CWE-522 Insufficiently Protected Credentials	CVE-2017-13998	2024-11-21 12:11	2017-10-6	Show	GitHub Exploit DB Packet Storm

257843	8.8	HIGH Network	loytec	lvis-3me_firmware	A Relative Path Traversal issue was discovered in LOYTEC LVIS-3ME versions prior to 6.2.0. The web user interface fails to prevent access to critical files that non administrative users should not ha…	CWE-22 Path Traversal	CVE-2017-13996	2024-11-21 12:11	2017-10-6	Show	GitHub Exploit DB Packet Storm

257844	6.1	MEDIUM Network	loytec	lvis-3me_firmware	A Cross-site Scripting issue was discovered in LOYTEC LVIS-3ME versions prior to 6.2.0. The web interface lacks proper web request validation, which could allow XSS attacks to occur if an authenticat…	CWE-79 Cross-site Scripting	CVE-2017-13994	2024-11-21 12:11	2017-10-6	Show	GitHub Exploit DB Packet Storm

257845	8.1	HIGH Network	loytec	lvis-3me_firmware	An Insufficient Entropy issue was discovered in LOYTEC LVIS-3ME versions prior to 6.2.0. The application does not utilize sufficiently random number generation for the web interface authentication me…	CWE-331 Insufficient Entropy	CVE-2017-13992	2024-11-21 12:11	2017-10-6	Show	GitHub Exploit DB Packet Storm

257846	9.4	CRITICAL Network	ctekproducts	skyrouter_z4200_firmware skyrouter_z4400_firmware	An Improper Authentication issue was discovered in Ctek SkyRouter Series 4200 and 4400, all versions prior to V6.00.11. By accessing a specific uniform resource locator (URL) on the web server, a mal…	CWE-287 Improper Authentication	CVE-2017-14000	2024-11-21 12:11	2017-10-5	Show	GitHub Exploit DB Packet Storm

257847	10.0	CRITICAL Network	spidercontrol	ininet_webserver	An Improper Authentication issue was discovered in iniNet Solutions iniNet Webserver, all versions prior to V2.02.0100. The webserver does not properly authenticate users, which may allow a malicious…	CWE-287 Improper Authentication	CVE-2017-13995	2024-11-21 12:11	2017-10-5	Show	GitHub Exploit DB Packet Storm

257848	7.8	HIGH Local	i-sens	smartlog_diabetes_management_software	An Uncontrolled Search Path or Element issue was discovered in i-SENS SmartLog Diabetes Management Software, Version 2.4.0 and prior versions. An uncontrolled search path element vulnerability has be…	CWE-427 Uncontrolled Search Path Element	CVE-2017-13993	2024-11-21 12:11	2017-10-5	Show	GitHub Exploit DB Packet Storm

257849	7.5	HIGH Network	redhat debian novell canonical fedoraproject thekelleys	enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server debian_linux leap ubuntu_linux fedora dnsmasq	In dnsmasq before 2.78, if the DNS packet size does not match the expected size, the size parameter in a memset call gets a negative value. As it is an unsigned value, memset ends up writing up to 0x…	CWE-20 Improper Input Validation	CVE-2017-13704	2024-11-21 12:11	2017-10-3	Show	GitHub Exploit DB Packet Storm

257850	9.8	CRITICAL Network	schneider-electric	wonderware_intouch wonderware_indusoft_web_studio	A Missing Authentication for Critical Function issue was discovered in Schneider Electric InduSoft Web Studio v8.0 SP2 or prior, and InTouch Machine Edition v8.0 SP2 or prior. InduSoft Web Studio pro…	CWE-306 Missing Authentication for Critical Function	CVE-2017-13997	2024-11-21 12:11	2017-10-3	Show	GitHub Exploit DB Packet Storm