Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 25, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
255901	5	警告	Opera Software ASA	-	Opera におけるローカルファイル名の有効性を判別される脆弱性	CWE-200 情報漏えい	CVE-2008-4199	2010-09-27 16:04	2008-09-27	Show	GitHub Exploit DB Packet Storm

255902	7.5	危険	Opera Software ASA	-	Opera における http ページ上で危険な操作を実行させられる脆弱性	CWE-Other その他	CVE-2008-4198	2010-09-27 16:03	2008-09-27	Show	GitHub Exploit DB Packet Storm

255903	9.3	危険	Opera Software ASA	-	Opera における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2008-4197	2010-09-27 16:03	2008-09-27	Show	GitHub Exploit DB Packet Storm

255904	4.3	警告	Opera Software ASA	-	Opera におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-4196	2010-09-27 16:02	2008-09-27	Show	GitHub Exploit DB Packet Storm

255905	5	警告	Opera Software ASA	-	Opera における任意のアドレスの表示を誘発させられる脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2008-4195	2010-09-27 16:02	2008-09-27	Show	GitHub Exploit DB Packet Storm

255906	6.8	警告	Opera Software ASA	-	Opera における HTTP セッションハイジャックの脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2008-3172	2010-09-27 16:01	2008-07-14	Show	GitHub Exploit DB Packet Storm

255907	10	危険	Opera Software ASA	-	Windows 上で稼働する Opera における任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2008-3079	2010-09-27 16:01	2008-07-9	Show	GitHub Exploit DB Packet Storm

255908	7.8	危険	Opera Software ASA	-	Opera における初期化されていないメモリコンテンツを読まれる脆弱性	CWE-200 情報漏えい	CVE-2008-3078	2010-09-27 16:01	2008-07-9	Show	GitHub Exploit DB Packet Storm

255909	5	警告	Opera Software ASA	-	Opera における信頼されたフレームのコンテンツを偽装される脆弱性	CWE-DesignError	CVE-2008-2716	2010-09-27 16:00	2008-06-16	Show	GitHub Exploit DB Packet Storm

255910	5	警告	Opera Software ASA	-	Opera におけるクロスドメインの脆弱性	CWE-200 情報漏えい	CVE-2008-2715	2010-09-27 16:00	2008-06-16	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 26, 2026, 4:05 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
248001	6.1	MEDIUM Network	mediawiki debian	mediawiki debian_linux	The implementation of raw message parameter expansion in MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2 allows HTML mangling attacks.	CWE-20 Improper Input Validation	CVE-2017-8811	2024-11-21 12:34	2017-11-15	Show	GitHub Exploit DB Packet Storm

248002	7.5	HIGH Network	mediawiki debian	mediawiki debian_linux	MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2, when a private wiki is configured, provides different error messages for failed login attempts depending on whether the userna…	CWE-200 Information Exposure	CVE-2017-8810	2024-11-21 12:34	2017-11-15	Show	GitHub Exploit DB Packet Storm

248003	9.8	CRITICAL Network	mediawiki debian	mediawiki debian_linux	api.php in MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2 has a Reflected File Download vulnerability.	CWE-74 Injection	CVE-2017-8809	2024-11-21 12:34	2017-11-15	Show	GitHub Exploit DB Packet Storm

248004	6.1	MEDIUM Network	mediawiki debian	mediawiki debian_linux	MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2 has XSS when the $wgShowExceptionDetails setting is false and the browser sends non-standard URL escaping.	CWE-79 Cross-site Scripting	CVE-2017-8808	2024-11-21 12:34	2017-11-15	Show	GitHub Exploit DB Packet Storm

248005	7.5	HIGH Network	microsoft	asp.net_core	ASP.NET Core 1.0, 1.1, and 2.0 allow an attacker to bypass Cross-origin Resource Sharing (CORS) configurations and retrieve normally restricted content from a web application, aka "ASP.NET Core Infor…	NVD-CWE-noinfo	CVE-2017-8700	2024-11-21 12:34	2017-11-15	Show	GitHub Exploit DB Packet Storm

248006	5.5	MEDIUM Local	postgresql	postgresql	The Debian pg_ctlcluster, pg_createcluster, and pg_upgradecluster scripts, as distributed in the Debian postgresql-common package before 181+deb9u1 for PostgreSQL (and other packages related to Debia…	CWE-59 Link Following	CVE-2017-8806	2024-11-21 12:34	2017-11-13	Show	GitHub Exploit DB Packet Storm

248007	9.1	CRITICAL Network	debian	ftpsync	Debian ftpsync before 20171017 does not use the rsync --safe-links option, which allows remote attackers to conduct directory traversal attacks via a crafted upstream mirror.	CWE-22 Path Traversal	CVE-2017-8805	2024-11-21 12:34	2017-10-18	Show	GitHub Exploit DB Packet Storm

248008	4.3	MEDIUM Network	microsoft	edge	Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how affected Microsoft s…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2017-8726	2024-11-21 12:34	2017-10-13	Show	GitHub Exploit DB Packet Storm

248009	5.3	MEDIUM Local	microsoft	windows_server_2016 windows_10	The Microsoft Device Guard on Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows a security feature bypass by the way it handles Windows PowerShell sessions, aka "Windows…	NVD-CWE-noinfo	CVE-2017-8715	2024-11-21 12:34	2017-10-13	Show	GitHub Exploit DB Packet Storm

248010	5.5	MEDIUM Local	microsoft	windows_10	The Microsoft Windows Subsystem for Linux on Microsoft Windows 10 1703 allows a denial of service vulnerability when it improperly handles objects in memory, aka "Windows Subsystem for Linux Denial o…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2017-8703	2024-11-21 12:34	2017-10-13	Show	GitHub Exploit DB Packet Storm