Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 20, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
256061	4.3	警告	サイバートラスト株式会社レッドハット	-	Red Hat および MIRACLE LINUX の sendmail におけるメール送信元を偽装される脆弱性	-	CVE-2006-7176	2010-04-27 15:18	2007-03-27	Show	GitHub Exploit DB Packet Storm

256062	6.9	警告	アップル	-	Windows 上で稼働する Apple iTunes のインストールパッケージにおける権限昇格の脆弱性	CWE-362 競合状態	CVE-2010-0532	2010-04-26 16:59	2010-03-31	Show	GitHub Exploit DB Packet Storm

256063	4.3	警告	アップル	-	Apple iTunes におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2010-0531	2010-04-26 16:59	2010-03-31	Show	GitHub Exploit DB Packet Storm

256064	9.3	危険	アップル	-	Windows 上で稼働する Apple QuickTime における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-0536	2010-04-26 16:59	2010-03-31	Show	GitHub Exploit DB Packet Storm

256065	9.3	危険	アップル	-	Windows 上で稼働する Apple QuickTime の QuickTime.qts における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-0529	2010-04-26 16:59	2010-03-31	Show	GitHub Exploit DB Packet Storm

256066	9.3	危険	アップル	-	Windows 上で稼働する Apple QuickTime における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-0528	2010-04-26 16:58	2010-03-31	Show	GitHub Exploit DB Packet Storm

256067	9.3	危険	アップル	-	Apple QuickTime における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2010-0527	2010-04-26 16:58	2010-03-31	Show	GitHub Exploit DB Packet Storm

256068	5	警告	アップルサイバートラスト株式会社 Ruby-lang.org レッドハット	-	Ruby の BigDecimal ライブラリにおけるサービス運用妨害 (DoS) の脆弱性	CWE-189 数値処理の問題	CVE-2009-1904	2010-04-26 16:46	2009-06-9	Show	GitHub Exploit DB Packet Storm

256069	6.9	警告	アップル Vim	-	Vim の Python インターフェースの src/if_python.c における信頼性のない検索パスの脆弱性	CWE-Other その他	CVE-2009-0316	2010-04-26 16:45	2009-01-28	Show	GitHub Exploit DB Packet Storm

256070	9.3	危険	アップルサイバートラスト株式会社 Vim レッドハット	-	Vim におけるエスケープ文字を適切に処理しないことに関する任意のコマンドを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2008-4101	2010-04-26 16:45	2008-10-9	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 20, 2026, 4:14 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
257821	6.1	MEDIUM Network	nexusphp_project	nexusphp	Cross-Site Scripting (XSS) exists in NexusPHP version v1.5 via the q parameter to searchsuggest.php.	CWE-79 Cross-site Scripting	CVE-2017-12798	2024-11-21 12:10	2017-08-11	Show	GitHub Exploit DB Packet Storm

257822	6.1	MEDIUM Network	nexusphp_project	nexusphp	Cross-Site Scripting (XSS) exists in NexusPHP version v1.5 via some parameter to usersearch.php.	CWE-79 Cross-site Scripting	CVE-2017-12777	2024-11-21 12:10	2017-08-10	Show	GitHub Exploit DB Packet Storm

257823	9.8	CRITICAL Network	finecms_project	finecms	finecms in 1.9.5\controllers\member\ContentController.php allows remote attackers to operate website database	CWE-89 SQL Injection	CVE-2017-12774	2024-11-21 12:10	2017-08-10	Show	GitHub Exploit DB Packet Storm

257824	9.8	CRITICAL Network	linux canonical	linux_kernel ubuntu_linux	In /drivers/isdn/i4l/isdn_net.c: A user-controlled buffer is copied into a local buffer of constant size using strcpy without a length check which can cause a buffer overflow. This affects the Linux …	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2017-12762	2024-11-21 12:10	2017-08-10	Show	GitHub Exploit DB Packet Storm

257825	7.2	HIGH Network	extplorer	extplorer	Command inject in transfer from another server in extplorer 2.1.9 and prior allows attacker to inject command via the userfile[0] parameter.	CWE-77 Command Injection	CVE-2017-12756	2024-11-21 12:10	2017-08-10	Show	GitHub Exploit DB Packet Storm

257826	8.8	HIGH Network	asuswrt-merlin	asuswrt-merlin	Stack buffer overflow in httpd in Asuswrt-Merlin firmware 380.67_0RT-AC5300 and earlier for ASUS devices and ASUS firmware for ASUS RT-AC5300, RT_AC1900P, RT-AC68U, RT-AC68P, RT-AC88U, RT-AC66U, RT-A…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2017-12754	2024-11-21 12:10	2017-08-10	Show	GitHub Exploit DB Packet Storm

257827	8.8	HIGH Network	taglib debian	taglib debian_linux	In TagLib 1.11.1, the rebuildAggregateFrames function in id3v2framefactory.cpp has a pointer to cast vulnerability, which allows remote attackers to cause a denial of service or possibly have unspeci…	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2017-12678	2024-11-21 12:10	2017-08-8	Show	GitHub Exploit DB Packet Storm

257828	6.1	MEDIUM Network	identityserver	identityserver3	IdentityServer3 2.4.x, 2.5.x, and 2.6.x before 2.6.1 has XSS in an Angular expression on the authorize response page, which might allow remote attackers to obtain sensitive information about the Iden…	CWE-79 Cross-site Scripting	CVE-2017-12677	2024-11-21 12:10	2017-08-8	Show	GitHub Exploit DB Packet Storm

257829	6.5	MEDIUM Network	imagemagick	imagemagick	In ImageMagick 7.0.6-3, a memory leak vulnerability was found in the function ReadOneJNGImage in coders/png.c, which allows attackers to cause a denial of service.	CWE-20 CWE-772 Improper Input Validation Missing Release of Resource after Effective Lifetime	CVE-2017-12676	2024-11-21 12:10	2017-08-8	Show	GitHub Exploit DB Packet Storm

257830	6.5	MEDIUM Network	imagemagick	imagemagick	In ImageMagick 7.0.6-3, a missing check for multidimensional data was found in coders/mat.c, leading to a memory leak in the function ReadImage in MagickCore/constitute.c, which allows attackers to c…	CWE-772 Missing Release of Resource after Effective Lifetime	CVE-2017-12675	2024-11-21 12:10	2017-08-8	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed