Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 20, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
256141	4.4	警告	アップルサイバートラスト株式会社 Carnegie Mellon University (Project Cyrus) レッドハット	-	Cyrus IMAPd にバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2009-2632	2010-04-13 14:46	2009-09-10	Show	GitHub Exploit DB Packet Storm

256142	7.5	危険	Haxx アップルサイバートラスト株式会社レッドハット	-	cURL および libcurl における、任意の SSL サーバになりすまされる脆弱性	CWE-310 暗号の問題	CVE-2009-2417	2010-04-13 14:46	2009-08-12	Show	GitHub Exploit DB Packet Storm

256143	6.8	警告	Haxx アップルサイバートラスト株式会社レッドハット	-	curl および libcurl の redirect 実装における任意のコマンドを実行される脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2009-0037	2010-04-13 14:45	2009-03-3	Show	GitHub Exploit DB Packet Storm

256144	9.3	危険	ジャストシステム	-	一太郎シリーズにおける任意のコードが実行される脆弱性	CWE-noinfo 情報不足	CVE-2010-1424	2010-04-12 15:32	2010-04-12	Show	GitHub Exploit DB Packet Storm

256145	4.4	警告	ヒューレット・パッカード	-	HP HP-UX におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2010-1030	2010-04-12 12:19	2010-03-26	Show	GitHub Exploit DB Packet Storm

256146	10	危険	IntelliCom Innovation AB	-	IntelliCom NetBiter Config HICP におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2009-4462	2010-04-12 12:19	2010-03-29	Show	GitHub Exploit DB Packet Storm

256147	7.5	危険	The PHP Group	-	PHP のセッション拡張子における open_basedir または safe_mode 制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-1130	2010-04-12 12:19	2010-03-26	Show	GitHub Exploit DB Packet Storm

256148	4.3	警告	Zope Foundation	-	Zope におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-1104	2010-04-9 16:21	2010-03-25	Show	GitHub Exploit DB Packet Storm

256149	4	警告	ヒューレット・パッカード	-	HP HP-UX の NFS/ONCplus にあるインストールプロセスにおけるファイルシステムのアクセス権を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-0451	2010-04-9 16:21	2010-03-25	Show	GitHub Exploit DB Packet Storm

256150	7.5	危険	GNU Project サイバートラスト株式会社レッドハット	-	GnuTLS の gnutls_x509_crt_get_serial 関数におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-0731	2010-04-9 16:21	2010-03-25	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 20, 2026, 4:14 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
247041	5.4	MEDIUM Network	bigtreecms	bigtree_cms	admin.php in BigTree through 4.2.18 has a Cross-site Scripting (XSS) vulnerability, which allows remote authenticated users to inject arbitrary web script or HTML by launching an Edit Page action and…	CWE-79 Cross-site Scripting	CVE-2017-9547	2024-11-21 12:36	2017-06-12	Show	GitHub Exploit DB Packet Storm

247042	5.7	MEDIUM Network	bigtreecms	bigtree_cms	admin.php in BigTree through 4.2.18 allows remote authenticated users to cause a denial of service (inability to save revisions) via XSS sequences in a revision name.	CWE-79 Cross-site Scripting	CVE-2017-9546	2024-11-21 12:36	2017-06-12	Show	GitHub Exploit DB Packet Storm

247043	9.8	CRITICAL Network	echatserver	easy_chat_server	There is a remote stack-based buffer overflow (SEH) in register.ghp in EFS Software Easy Chat Server versions 2.0 to 3.1. By sending an overly long username string to registresult.htm for registering…	CWE-787 Out-of-bounds Write	CVE-2017-9544	2024-11-21 12:36	2017-06-12	Show	GitHub Exploit DB Packet Storm

247044	7.5	HIGH Network	echatserver	easy_chat_server	register.ghp in EFS Software Easy Chat Server versions 2.0 to 3.1 allows remote attackers to reset arbitrary passwords via a crafted POST request to registresult.htm.	CWE-640 Weak Password Recovery Mechanism for Forgotten Password	CVE-2017-9543	2024-11-21 12:36	2017-06-12	Show	GitHub Exploit DB Packet Storm

247045	9.8	CRITICAL Network	d-link	dir-615_firmware	D-Link DIR-615 Wireless N 300 Router allows authentication bypass via a modified POST request to login.cgi. This issue occurs because it fails to validate the password field. Successful exploitation …	CWE-287 Improper Authentication	CVE-2017-9542	2024-11-21 12:36	2017-06-12	Show	GitHub Exploit DB Packet Storm

247046	7.8	HIGH Local	mruby debian	mruby debian_linux	The mark_context_stack function in gc.c in mruby through 1.2.0 allows attackers to cause a denial of service (heap-based use-after-free and application crash) or possibly have unspecified other impac…	CWE-416 Use After Free	CVE-2017-9527	2024-11-21 12:36	2017-06-12	Show	GitHub Exploit DB Packet Storm

247047	5.9	MEDIUM Network	gnupg	libgcrypt	In Libgcrypt before 1.7.7, an attacker who learns the EdDSA session key (from side-channel observation during the signing process) can easily recover the long-term secret key. 1.7.7 makes a cipher/ec…	CWE-200 Information Exposure	CVE-2017-9526	2024-11-21 12:36	2017-06-11	Show	GitHub Exploit DB Packet Storm

247048	6.7	MEDIUM Local	cron_project debian	cron debian_linux	In the cron package through 3.0pl1-128 on Debian, and through 3.0pl1-128ubuntu2 on Ubuntu, the postinst maintainer script allows for group-crontab-to-root privilege escalation via symlink attacks aga…	CWE-59 Link Following	CVE-2017-9525	2024-11-21 12:36	2017-06-10	Show	GitHub Exploit DB Packet Storm

247049	6.1	MEDIUM Network	sophos	web_appliance	The Sophos Web Appliance before 4.3.2 has XSS in the FTP redirect page, aka NSWA-1342.	CWE-79 Cross-site Scripting	CVE-2017-9523	2024-11-21 12:36	2017-06-9	Show	GitHub Exploit DB Packet Storm

247050	5.5	MEDIUM Local	radare	radare2	The r_config_set function in libr/config/config.c in radare2 1.5.0 allows remote attackers to cause a denial of service (use-after-free and application crash) via a crafted DEX file.	CWE-416 Use After Free	CVE-2017-9520	2024-11-21 12:36	2017-06-8	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed