Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 22, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
256231	9.3	危険	アドビシステムズ	-	Adobe Shockwave Player における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-1287	2010-06-1 15:45	2010-05-11	Show	GitHub Exploit DB Packet Storm

256232	9.3	危険	アドビシステムズ	-	Adobe Shockwave Player における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-1286	2010-06-1 15:44	2010-05-11	Show	GitHub Exploit DB Packet Storm

256233	9.3	危険	アドビシステムズ	-	Adobe Shockwave Player における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-1284	2010-06-1 15:44	2010-05-11	Show	GitHub Exploit DB Packet Storm

256234	9.3	危険	アドビシステムズ	-	Adobe Shockwave Player における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-1283	2010-06-1 15:44	2010-05-11	Show	GitHub Exploit DB Packet Storm

256235	4.3	警告	レッドハット Glyph & Cog, LLC ターボリナックスサイバートラスト株式会社 CUPS	-	Xpdf および CUPS の JBIG2 デコーダーにおけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2009-0166	2010-06-1 12:01	2009-04-16	Show	GitHub Exploit DB Packet Storm

256236	4.3	警告	Glyph & Cog, LLC アップルサイバートラスト株式会社 CUPS ターボリナックスレッドハット	-	Xpdf および CUPS の JBIG2 デコーダーにおける整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2009-0147	2010-06-1 12:01	2009-04-16	Show	GitHub Exploit DB Packet Storm

256237	4.3	警告	Glyph & Cog, LLC アップルサイバートラスト株式会社 CUPS ターボリナックスレッドハット	-	Xpdf および CUPS の JBIG2 デコーダーにおけるサービス運用妨害 (DoS) の脆弱性	CWE-119 バッファエラー	CVE-2009-0146	2010-06-1 12:01	2009-04-16	Show	GitHub Exploit DB Packet Storm

256238	4.3	警告	アドビシステムズ	-	Adobe Shockwave Player におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2010-1282	2010-05-31 18:27	2010-05-11	Show	GitHub Exploit DB Packet Storm

256239	9.3	危険	アドビシステムズ	-	Adobe Shockwave Player の iml32.dll における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-1281	2010-05-31 18:26	2010-05-11	Show	GitHub Exploit DB Packet Storm

256240	9.3	危険	アドビシステムズ	-	Adobe Shockwave Player における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-1280	2010-05-31 18:26	2010-05-11	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 22, 2026, 4:08 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
249161	7.0	HIGH Local	apple	iphone_os mac_os_x watchos tvos itunes	A race condition was addressed with additional validation. This issue affected versions prior to iOS 11.2, macOS High Sierra 10.13.2, tvOS 11.2, watchOS 4.2, iTunes 12.7.2 for Windows, macOS High Sie…	CWE-362 Race Condition	CVE-2017-7151	2024-11-21 12:31	2019-04-4	Show	GitHub Exploit DB Packet Storm

249162	9.8	CRITICAL Network	fortinet	fortiportal	A weak password recovery process vulnerability in Fortinet FortiPortal versions 4.0.0 and below allows an attacker to execute unauthorized code or commands via a hidden Close button	CWE-20 Improper Input Validation	CVE-2017-7342	2024-11-21 12:31	2019-03-26	Show	GitHub Exploit DB Packet Storm

249163	6.1	MEDIUM Network	fortinet	fortiportal	A Cross-Site Scripting vulnerability in Fortinet FortiPortal versions 4.0.0 and below allows an attacker to execute unauthorized code or commands via the applicationSearch parameter in the FortiView …	CWE-79 Cross-site Scripting	CVE-2017-7340	2024-11-21 12:31	2019-03-26	Show	GitHub Exploit DB Packet Storm

249164	7.8	HIGH Local	linux debian redhat	linux_kernel debian_linux enterprise_mrg	In the Linux kernel before version 4.12, Kerberos 5 tickets decoded when using the RXRPC keys incorrectly assumes the size of a field. This could lead to the size-remaining variable wrapping and the …	CWE-190 Integer Overflow or Wraparound	CVE-2017-7482	2024-11-21 12:31	2018-07-30	Show	GitHub Exploit DB Packet Storm

249165	6.1	MEDIUM Network	redhat	jboss_bpm_suite	JBoss BRMS 6 and BPM Suite 6 before 6.4.3 are vulnerable to a reflected XSS via artifact upload. A malformed XML file, if uploaded, causes an error message to appear that includes part of the bad XML…	CWE-79 Cross-site Scripting	CVE-2017-7463	2024-11-21 12:31	2018-07-28	Show	GitHub Exploit DB Packet Storm

249166	9.8	CRITICAL Network	redhat	spacewalk satellite	It was found that spacewalk-channel can be used by a non-admin user or disabled users to perform administrative tasks due to an incorrect authorization check in backend/server/rhnChannel.py.	-	CVE-2017-7470	2024-11-21 12:31	2018-07-27	Show	GitHub Exploit DB Packet Storm

249167	9.8	CRITICAL Network	redhat	jboss_enterprise_application_platform	It was found that the JAXP implementation used in JBoss EAP 7.0 for SAX and DOM parsing is vulnerable to certain XXE flaws. An attacker could use this flaw to cause DoS, SSRF, or information disclosu…	-	CVE-2017-7464	2024-11-21 12:31	2018-07-27	Show	GitHub Exploit DB Packet Storm

249168	9.8	CRITICAL Network	redhat canonical debian	storage_console virtualization_manager virtualization openshift_container_platform openstack gluster_storage ansible_engine ubuntu_linux debian_linux	Ansible before versions 2.3.1.0 and 2.4.0.0 fails to properly mark lookup-plugin results as unsafe. If an attacker could control the results of lookup() calls, they could inject Unicode strings to be…	-	CVE-2017-7481	2024-11-21 12:31	2018-07-19	Show	GitHub Exploit DB Packet Storm

249169	7.5	HIGH Network	haxx	libcurl	In curl and libcurl 7.52.0 to and including 7.53.1, libcurl would attempt to resume a TLS session even if the client certificate had changed. That is unacceptable since a server by specification is a…	CWE-295 Improper Certificate Validation	CVE-2017-7468	2024-11-21 12:31	2018-07-16	Show	GitHub Exploit DB Packet Storm

249170	9.8	CRITICAL Network	minicom_project	minicom	A buffer overflow flaw was found in the way minicom before version 2.7.1 handled VT100 escape sequences. A malicious terminal device could potentially use this flaw to crash minicom, or execute arbit…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2017-7467	2024-11-21 12:31	2018-07-11	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed