Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 27, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
255931 9.3 危険 Artifex Software - Ghostscript の TrueType bytecode interpreter に脆弱性 CWE-189
数値処理の問題 		CVE-2009-3743 2010-09-16 15:42 2010-08-25 Show GitHub Exploit DB Packet Storm
255932 5 警告 Devon IT - Devon IT 製品に複数の脆弱性 CWE-255
証明書・パスワード管理 		CVE-2010-3122 2010-09-16 15:42 2010-08-25 Show GitHub Exploit DB Packet Storm
255933 6.4 警告 日立 - JP1/NETM/Remote Control Agent における認証を回避される脆弱性 CWE-287
不適切な認証 		- 2010-09-16 15:42 2010-08-31 Show GitHub Exploit DB Packet Storm
255934 6.8 警告 ヒューレット・パッカード - HP HP-UX の Software Distributor における権限を取得される脆弱性 CWE-noinfo
情報不足 		CVE-2010-2712 2010-09-15 17:18 2010-08-25 Show GitHub Exploit DB Packet Storm
255935 6 警告 レッドハット - Red Hat Enterprise Linux の gdm におけるアクセス制限を回避される脆弱性 CWE-DesignError
CVE-2007-5079 2010-09-15 17:18 2007-09-25 Show GitHub Exploit DB Packet Storm
255936 9.3 危険 ImageMagick
GraphicsMagick
レッドハット		 - ImageMagick および GraphicsMagick の XMakeImage 関数における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2009-1882 2010-09-15 17:17 2009-06-2 Show GitHub Exploit DB Packet Storm
255937 3.3 注意 レッドハット - Firefox の SPICE プラグインにおける任意のファイルを上書きされる脆弱性 CWE-59
リンク解釈の問題 		CVE-2010-2794 2010-09-15 17:17 2010-08-25 Show GitHub Exploit DB Packet Storm
255938 3.3 注意 レッドハット - Firefox の SPICE プラグインにおける重要な情報を取得される脆弱性 CWE-362
競合状態 		CVE-2010-2792 2010-09-15 17:13 2010-08-25 Show GitHub Exploit DB Packet Storm
255939 1.9 注意 シトリックス・システムズ - Citrix XenServer におけるサービス運用妨害 (DoS) の脆弱性 CWE-DesignError
CVE-2010-2619 2010-09-14 15:55 2010-06-17 Show GitHub Exploit DB Packet Storm
255940 4.6 警告 シトリックス・システムズ - Citrix XenServer における認証を回避され Xen API (XAPI) を実行される脆弱性 CWE-noinfo
情報不足 		CVE-2010-0633 2010-09-14 15:54 2010-02-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 27, 2026, 4:52 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
251171 5.3 MEDIUM
Network 		apache cxf JAX-RS XML Security streaming clients in Apache CXF before 3.1.11 and 3.0.13 do not validate that the service response was signed or encrypted, which allows remote attackers to spoof servers. CWE-295
Improper Certificate Validation  		CVE-2017-5653 2024-11-21 12:28 2017-04-19 Show GitHub Exploit DB Packet Storm
251172 7.3 HIGH
Network 		apache batik In Apache Batik before 1.9, files lying on the filesystem of the server which uses batik can be revealed to arbitrary users who send maliciously formed SVG files. The file types that can be shown dep… CWE-611
XXE 		CVE-2017-5662 2024-11-21 12:28 2017-04-18 Show GitHub Exploit DB Packet Storm
251173 7.3 HIGH
Network 		apache formatting_objects_processor In Apache FOP before 2.2, files lying on the filesystem of the server which uses FOP can be revealed to arbitrary users who send maliciously formed SVG files. The file types that can be shown depend … CWE-611
XXE 		CVE-2017-5661 2024-11-21 12:28 2017-04-18 Show GitHub Exploit DB Packet Storm
251174 9.8 CRITICAL
Network 		apache
netapp
redhat
oracle 		log4j
snapcenter
storage_automation_store
oncommand_workflow_automation
oncommand_insight
service_level_manager
oncommand_api_services
enterprise_linux_desktop
enterprise_linu… 		In Apache Log4j 2.x before 2.8.2, when using the TCP socket server or UDP socket server to receive serialized log events from another application, a specially crafted binary payload can be sent that,… CWE-502
 Deserialization of Untrusted Data 		CVE-2017-5645 2024-11-21 12:28 2017-04-18 Show GitHub Exploit DB Packet Storm
251175 7.5 HIGH
Network 		apache traffic_server Apache Traffic Server before 6.2.1 generates a coredump when there is a mismatch between content length and chunked encoding. CWE-20
 Improper Input Validation  		CVE-2017-5659 2024-11-21 12:28 2017-04-18 Show GitHub Exploit DB Packet Storm
251176 9.8 CRITICAL
Network 		apache tomcat In Apache Tomcat 9.0.0.M1 to 9.0.0.M18 and 8.5.0 to 8.5.12, the refactoring of the HTTP connectors introduced a regression in the send file processing. If the send file processing completed quickly, … NVD-CWE-noinfo
CVE-2017-5651 2024-11-21 12:28 2017-04-18 Show GitHub Exploit DB Packet Storm
251177 7.5 HIGH
Network 		apache tomcat In Apache Tomcat 9.0.0.M1 to 9.0.0.M18 and 8.5.0 to 8.5.12, the handling of an HTTP/2 GOAWAY frame for a connection did not close streams associated with that connection that were currently waiting f… CWE-404
 Improper Resource Shutdown or Release 		CVE-2017-5650 2024-11-21 12:28 2017-04-18 Show GitHub Exploit DB Packet Storm
251178 9.1 CRITICAL
Network 		apache tomcat While investigating bug 60718, it was noticed that some calls to application listeners in Apache Tomcat 9.0.0.M1 to 9.0.0.M17, 8.5.0 to 8.5.11, 8.0.0.RC1 to 8.0.41, and 7.0.0 to 7.0.75 did not use th… CWE-668
 Exposure of Resource to Wrong Sphere 		CVE-2017-5648 2024-11-21 12:28 2017-04-18 Show GitHub Exploit DB Packet Storm
251179 7.5 HIGH
Network 		apache tomcat A bug in the handling of the pipelined requests in Apache Tomcat 9.0.0.M1 to 9.0.0.M18, 8.5.0 to 8.5.12, 8.0.0.RC1 to 8.0.42, 7.0.0 to 7.0.76, and 6.0.0 to 6.0.52, when send file was used, results in… CWE-200
Information Exposure 		CVE-2017-5647 2024-11-21 12:28 2017-04-18 Show GitHub Exploit DB Packet Storm
251180 7.5 HIGH
Network 		canonical
openstack 		ubuntu_linux
nova-lxd 		OpenStack Nova-LXD before 13.1.1 uses the wrong name for the veth pairs when applying Neutron security group rules for instances, which allows remote attackers to bypass intended security restriction… NVD-CWE-noinfo
CVE-2017-5936 2024-11-21 12:28 2017-04-13 Show GitHub Exploit DB Packet Storm