Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 19, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
255881	5	警告	アップル	-	Apple Mac OS X の Podcast プロデューサーにおけるワークフローにアクセスされる脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-0511	2010-04-15 18:38	2010-03-29	Show	GitHub Exploit DB Packet Storm

255882	9	危険	アップル	-	Apple Mac OS X のパスワードサーバにおけるログインアクセスを取得される脆弱性	CWE-255 証明書・パスワード管理	CVE-2010-0510	2010-04-15 18:37	2010-03-29	Show	GitHub Exploit DB Packet Storm

255883	7.2	危険	アップル	-	Apple Mac OS X の SFLServer における権限昇格の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-0509	2010-04-15 18:37	2010-03-29	Show	GitHub Exploit DB Packet Storm

255884	7.8	危険	アップル	-	Apple Mac OS X の Mail における重要な情報を取得される脆弱性	CWE-310 暗号の問題	CVE-2010-0525	2010-04-15 18:36	2010-03-29	Show	GitHub Exploit DB Packet Storm

255885	4	警告	アップルサイバートラスト株式会社 MySQL AB レッドハット	-	MySQL の mysqld におけるサービス運用妨害 (DoS) の脆弱性	CWE-DesignError	CVE-2009-4019	2010-04-15 18:16	2009-11-30	Show	GitHub Exploit DB Packet Storm

255886	6.8	警告	The PHP Group アップル	-	PHP の posix_mkfifo 関数における open_basedir の制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2009-3558	2010-04-15 18:16	2009-11-23	Show	GitHub Exploit DB Packet Storm

255887	4.4	警告	アップルサイバートラスト株式会社 MySQL AB レッドハット	-	MySQL における権限チェックを回避される脆弱性	CWE-59 リンク解釈の問題	CVE-2009-4030	2010-04-15 18:16	2009-11-5	Show	GitHub Exploit DB Packet Storm

255888	2.6	注意	アップルサイバートラスト株式会社 MySQL AB レッドハット	-	MySQL のコマンドラインクライアントにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-4456	2010-04-15 18:15	2008-10-6	Show	GitHub Exploit DB Packet Storm

255889	10	危険	アップル	-	Apple Mac OS X の Mail における脆弱性	CWE-noinfo 情報不足	CVE-2010-0508	2010-04-14 17:11	2010-03-29	Show	GitHub Exploit DB Packet Storm

255890	6.8	警告	アップル	-	Apple Mac OS X の画像 RAW におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-0507	2010-04-14 17:11	2010-03-29	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 19, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
255961	7.8	HIGH Local	irfanview	irfanview pdf	IrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .pdf file, related to "Data from Faul…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2017-15241	2024-11-21 12:14	2017-10-12	Show	GitHub Exploit DB Packet Storm

255962	7.8	HIGH Local	irfanview	irfanview pdf	IrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .pdf file, related to a "Read Access …	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2017-15240	2024-11-21 12:14	2017-10-12	Show	GitHub Exploit DB Packet Storm

255963	7.8	HIGH Local	irfanview	pdf irfanview	IrfanView 4.44 - 32bit with PDF plugin version 4.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .pdf file, related to "Data from Faulting Add…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2017-15239	2024-11-21 12:14	2017-10-12	Show	GitHub Exploit DB Packet Storm

255964	7.5	HIGH Network	gnu	libextractor	In GNU Libextractor 1.4, there is a NULL Pointer Dereference in flac_metadata in flac_extractor.c.	CWE-476 NULL Pointer Dereference	CVE-2017-15267	2024-11-21 12:14	2017-10-12	Show	GitHub Exploit DB Packet Storm

255965	5.5	MEDIUM Local	gnu	libextractor	In GNU Libextractor 1.4, there is a Divide-By-Zero in EXTRACTOR_wav_extract_method in wav_extractor.c via a zero sample rate.	CWE-369 Divide By Zero	CVE-2017-15266	2024-11-21 12:14	2017-10-12	Show	GitHub Exploit DB Packet Storm

255966	9.8	CRITICAL Network	flexense	vx_search	Flexense VX Search Enterprise 10.1.12 is vulnerable to a buffer overflow via an empty POST request to a long URI beginning with a /../ substring. This allows remote attackers to execute arbitrary cod…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2017-15220	2024-11-21 12:14	2017-10-11	Show	GitHub Exploit DB Packet Storm

255967	8.8	HIGH Network	graphicsmagick debian	graphicsmagick debian_linux	ReadOneJNGImage in coders/png.c in GraphicsMagick 1.3.26 has a use-after-free issue when the height or width is zero, related to ReadJNGImage.	CWE-416 Use After Free	CVE-2017-15238	2024-11-21 12:14	2017-10-11	Show	GitHub Exploit DB Packet Storm

255968	7.5	HIGH Network	tiandy	tiandy_ip_camera_firmware	Tiandy IP cameras 5.56.17.120 do not properly restrict a certain proprietary protocol, which allows remote attackers to read settings via a crafted request to TCP port 3001, as demonstrated by config…	CWE-200 Information Exposure	CVE-2017-15236	2024-11-21 12:14	2017-10-11	Show	GitHub Exploit DB Packet Storm

255969	7.5	HIGH Network	horde	groupware	The File Manager (gollem) module 3.0.11 in Horde Groupware 5.2.21 allows remote attackers to bypass Horde authentication for file downloads via a crafted fn parameter that corresponds to the exact fi…	CWE-425 Direct Request ('Forced Browsing')	CVE-2017-15235	2024-11-21 12:14	2017-10-11	Show	GitHub Exploit DB Packet Storm

255970	6.5	MEDIUM Network	libjpeg-turbo	libjpeg-turbo	libjpeg-turbo 1.5.2 has a NULL Pointer Dereference in jdpostct.c and jquant1.c via a crafted JPEG file.	CWE-476 NULL Pointer Dereference	CVE-2017-15232	2024-11-21 12:14	2017-10-11	Show	GitHub Exploit DB Packet Storm