Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 21, 2026, 2 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
255911	9.3	危険	アップル	-	Apple Safari の WebKit における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-1399	2010-07-14 16:34	2010-06-10	Show	GitHub Exploit DB Packet Storm

255912	9.3	危険	アップル	-	Apple Safari の WebKit における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-1398	2010-07-14 16:33	2010-06-10	Show	GitHub Exploit DB Packet Storm

255913	9.3	危険	アップル	-	Apple Safari の WebKit における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2010-1397	2010-07-14 16:33	2010-06-10	Show	GitHub Exploit DB Packet Storm

255914	9.3	危険	アップル	-	Apple Safari の WebKit における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2010-1396	2010-07-14 16:32	2010-06-10	Show	GitHub Exploit DB Packet Storm

255915	4.3	警告	アップル	-	Apple Safari の WebKit におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-1395	2010-07-14 16:32	2010-06-10	Show	GitHub Exploit DB Packet Storm

255916	4.3	警告	アップル	-	Apple Safari の Cascading Style Sheet 実装における重要な URL の情報を見破られる脆弱性	CWE-200 情報漏えい	CVE-2010-1393	2010-07-14 16:31	2010-06-10	Show	GitHub Exploit DB Packet Storm

255917	5	警告	IBM	-	IBM WebSphere Application Server の HTTP Channel におけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2010-2328	2010-07-13 17:56	2010-03-2	Show	GitHub Exploit DB Packet Storm

255918	4.3	警告	IBM	-	IBM WebSphere Application Server における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2010-2326	2010-07-13 17:55	2010-03-23	Show	GitHub Exploit DB Packet Storm

255919	10	危険	アップル	-	Apple iTunes の WebKit における任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2010-1769	2010-07-13 17:55	2010-06-18	Show	GitHub Exploit DB Packet Storm

255920	10	危険	アップル	-	Apple iTunes の WebKit における脆弱性	CWE-noinfo 情報不足	CVE-2010-1763	2010-07-13 17:54	2010-06-18	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 21, 2026, 4:10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
254981	6.5	MEDIUM Local	xen	xen	An issue was discovered in Xen through 4.9.x allowing HVM guest OS users to cause a denial of service (infinite loop and host OS hang) by leveraging the mishandling of Populate on Demand (PoD) errors.	CWE-754 CWE-755 CWE-835 Improper Check for Unusual or Exceptional Conditions Improper Handling of Exceptional Conditions Loop with Unreachable Exit Condition ('Infinite Loop')	CVE-2017-17044	2024-11-21 12:17	2017-11-29	Show	GitHub Exploit DB Packet Storm

254982	6.1	MEDIUM Network	zitec	emag_marketplace_connector	The Emag Marketplace Connector plugin 1.0.0 for WordPress has reflected XSS because the parameter "post" to /wp-content/plugins/emag-marketplace-connector/templates/order/awb-meta-box.php is not filt…	CWE-79 Cross-site Scripting	CVE-2017-17043	2024-11-21 12:17	2017-11-29	Show	GitHub Exploit DB Packet Storm

254983	7.5	HIGH Network	yardoc	yard	lib/yard/core_ext/file.rb in the server in YARD before 0.9.11 does not block relative paths with an initial ../ sequence, which allows attackers to conduct directory traversal attacks and read arbitr…	CWE-22 Path Traversal	CVE-2017-17042	2024-11-21 12:17	2017-11-29	Show	GitHub Exploit DB Packet Storm

254984	5.5	MEDIUM Local	kmplayer	kmplayer	KMPlayer 4.2.2.4 allows remote attackers to cause a denial of service via a crafted NSV file.	CWE-20 Improper Input Validation	CVE-2017-16952	2024-11-21 12:17	2017-11-29	Show	GitHub Exploit DB Packet Storm

254985	5.5	MEDIUM Local	audiovalley	winamp_pro	Winamp Pro 5.66 Build 3512 allows remote attackers to cause a denial of service via a crafted WAV, WMV, AU, ASF, AIFF, or AIF file.	CWE-20 Improper Input Validation	CVE-2017-16951	2024-11-21 12:17	2017-11-29	Show	GitHub Exploit DB Packet Storm

254986	5.5	MEDIUM Local	linux	linux_kernel	The walk_hugetlb_range function in mm/pagewalk.c in the Linux kernel before 4.14.2 mishandles holes in hugetlb ranges, which allows local users to obtain sensitive information from uninitialized kern…	CWE-200 Information Exposure	CVE-2017-16994	2024-11-21 12:17	2017-11-28	Show	GitHub Exploit DB Packet Storm

254987	6.1	MEDIUM Network	communigate	communigate_pro	The WebMail components (Crystal, pronto, and pronto4) in CommuniGate Pro before 6.2.1 have stored XSS vulnerabilities via (1) the location or details field of a Google Calendar invitation, (2) a craf…	CWE-79 Cross-site Scripting	CVE-2017-16962	2024-11-21 12:17	2017-11-27	Show	GitHub Exploit DB Packet Storm

254988	6.5	MEDIUM Network	bigtreecms	bigtree_cms	A SQL injection vulnerability in core/inc/auto-modules.php in BigTree CMS through 4.2.19 allows remote authenticated attackers to obtain information in the context of the user used by the application…	CWE-89 SQL Injection	CVE-2017-16961	2024-11-21 12:17	2017-11-27	Show	GitHub Exploit DB Packet Storm

254989	8.8	HIGH Network	tp-link	tl-wvr300 tl-wvr302 tl-wvr450g tl-wvr900g tl-er5510g tl-er5520g tl-er6120g tl-er6520g tl-r473 tl-r478 tl-r478\+ tl-r478g\+ tl-r483 tl-r483g tl-r488 tl-r42…	TP-Link TL-WVR, TL-WAR, TL-ER, and TL-R devices allow remote authenticated users to execute arbitrary commands via shell metacharacters in the t_bindif field of an admin/interface command to cgi-bin/…	CWE-78 OS Command	CVE-2017-16960	2024-11-21 12:17	2017-11-27	Show	GitHub Exploit DB Packet Storm

254990	6.1	MEDIUM Network	symphony_project	symphony	b3log Symphony (aka Sym) 2.2.0 allows an XSS attack by sending a private letter with a certain /article URI, and a second private letter with a modified title.	CWE-79 Cross-site Scripting	CVE-2017-16956	2024-11-21 12:17	2017-11-27	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed