Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 25, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
255891 9.3 危険 アドビシステムズ
Opera Software ASA
- Opera における Adobe Acrobat の JavaScript の制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2009-1599 2010-09-27 16:09 2009-05-11 Show GitHub Exploit DB Packet Storm
255892 5 警告 Opera Software ASA - Opera におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2008-7245 2010-09-27 16:09 2009-09-18 Show GitHub Exploit DB Packet Storm
255893 9.3 危険 Opera Software ASA - Windows 上で稼働する Opera におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2008-5178 2010-09-27 16:09 2008-11-20 Show GitHub Exploit DB Packet Storm
255894 10 危険 Opera Software ASA - Opera における脆弱性 CWE-noinfo
情報不足
CVE-2009-0916 2010-09-27 16:08 2009-03-3 Show GitHub Exploit DB Packet Storm
255895 4.3 警告 Opera Software ASA - Windows 上で稼働する Opera におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2008-5428 2010-09-27 16:07 2008-12-11 Show GitHub Exploit DB Packet Storm
255896 4.3 警告 Opera Software ASA - Opera の Opera.dll におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-4725 2010-09-27 16:07 2008-10-23 Show GitHub Exploit DB Packet Storm
255897 5.8 警告 Opera Software ASA - Opera における新規フィードの購読を作成される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2008-4698 2010-09-27 16:05 2008-10-23 Show GitHub Exploit DB Packet Storm
255898 10 危険 Opera Software ASA - Windows 上で稼働する Opera における任意のコードを実行される脆弱性 CWE-noinfo
情報不足
CVE-2008-4293 2010-09-27 16:05 2008-09-27 Show GitHub Exploit DB Packet Storm
255899 10 危険 Opera Software ASA - Opera における CRL の更新時の処理に関する脆弱性 CWE-255
CWE-noinfo
CVE-2008-4292 2010-09-27 16:04 2008-09-27 Show GitHub Exploit DB Packet Storm
255900 6.4 警告 Opera Software ASA - Opera における Web スクリプトを含むページの URL をアドレスフィールドに表示される脆弱性 CWE-20
不適切な入力確認
CVE-2008-4200 2010-09-27 16:04 2008-09-27 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 25, 2026, 4:01 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
253371 9.1 CRITICAL
Network
mattermost mattermost_server An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2, when serving as an OAuth 2.0 Service Provider. There is low entropy for authorization data. CWE-331
 Insufficient Entropy
CVE-2017-18883 2024-11-21 12:21 2020-06-20 Show GitHub Exploit DB Packet Storm
253372 6.1 MEDIUM
Network
mattermost mattermost_server An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2. XSS can occur via OpenGraph data. CWE-79
Cross-site Scripting
CVE-2017-18882 2024-11-21 12:21 2020-06-20 Show GitHub Exploit DB Packet Storm
253373 6.1 MEDIUM
Network
mattermost mattermost_server An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2. XSS could occur via a goto_location response to a slash command. CWE-79
Cross-site Scripting
CVE-2017-18881 2024-11-21 12:21 2020-06-20 Show GitHub Exploit DB Packet Storm
253374 6.1 MEDIUM
Network
mattermost mattermost_server An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2. XSS could occur via the title_link field of a Slack attachment. CWE-79
Cross-site Scripting
CVE-2017-18880 2024-11-21 12:21 2020-06-20 Show GitHub Exploit DB Packet Storm
253375 6.1 MEDIUM
Network
mattermost mattermost_server An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2. XSS could occur via the author_link field of a Slack attachment. CWE-79
Cross-site Scripting
CVE-2017-18879 2024-11-21 12:21 2020-06-20 Show GitHub Exploit DB Packet Storm
253376 4.3 MEDIUM
Network
mattermost mattermost_server An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2. Knowledge of a session ID allows revoking another user's session. CWE-732
 Incorrect Permission Assignment for Critical Resource
CVE-2017-18878 2024-11-21 12:21 2020-06-20 Show GitHub Exploit DB Packet Storm
253377 6.5 MEDIUM
Network
mattermost mattermost_server An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2 when local storage for files is used. A System Admin can achieve directory traversal. CWE-22
Path Traversal
CVE-2017-18874 2024-11-21 12:21 2020-06-20 Show GitHub Exploit DB Packet Storm
253378 5.3 MEDIUM
Network
mattermost mattermost_server An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2. It allows attackers to cause a denial of service (channel invisibility) via a misformatted post. CWE-20
 Improper Input Validation 
CVE-2017-18873 2024-11-21 12:21 2020-06-20 Show GitHub Exploit DB Packet Storm
253379 4.3 MEDIUM
Network
mattermost mattermost_server An issue was discovered in Mattermost Server before 4.4.3 and 4.3.3. Attackers could reconfigure an OAuth app in some cases where Mattermost is an OAuth 2.0 service provider. CWE-732
 Incorrect Permission Assignment for Critical Resource
CVE-2017-18872 2024-11-21 12:21 2020-06-20 Show GitHub Exploit DB Packet Storm
253380 6.1 MEDIUM
Network
mattermost mattermost_server An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2. XSS attacks could occur against an OAuth 2.0 allow/deny page. CWE-79
Cross-site Scripting
CVE-2017-18877 2024-11-21 12:21 2020-06-20 Show GitHub Exploit DB Packet Storm