Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 20, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
256231	9.3	危険	マイクロソフト	-	Microsoft Windows Movie Maker および Microsoft Producer におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-0265	2010-03-19 10:27	2010-03-9	Show	GitHub Exploit DB Packet Storm

256232	8.5	危険	Samba Project	-	Samba の smbd におけるファイルパーミッションを回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-0728	2010-03-18 12:09	2010-03-10	Show	GitHub Exploit DB Packet Storm

256233	7.2	危険	IBM	-	IBM AIX および VIOS の qosmod におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-0960	2010-03-18 12:09	2010-03-5	Show	GitHub Exploit DB Packet Storm

256234	7.2	危険	IBM	-	IBM AIX および VIOS の qoslist におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-0961	2010-03-18 12:09	2010-03-5	Show	GitHub Exploit DB Packet Storm

256235	9	危険	マイクロソフト	-	Microsoft Virtual PC の VMM におけるゲスト OS 内で任意のカーネルモードコードを実行される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2009-1542	2010-03-17 12:18	2009-07-14	Show	GitHub Exploit DB Packet Storm

256236	6.8	警告	IBM	-	IBM Lotus Domino Web Access におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2010-0921	2010-03-16 11:15	2010-03-3	Show	GitHub Exploit DB Packet Storm

256237	4.3	警告	IBM	-	IBM Lotus Domino Web Access におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-0920	2010-03-16 11:14	2010-03-3	Show	GitHub Exploit DB Packet Storm

256238	10	危険	IBM	-	IBM Lotus Domino Web Access の UltraLite 機能における脆弱性	CWE-noinfo 情報不足	CVE-2010-0918	2010-03-16 11:14	2010-03-3	Show	GitHub Exploit DB Packet Storm

256239	4.9	警告	サイバートラスト株式会社レッドハット SystemTap	-	SystemTap の _get_argv および _get_compat_argv 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-189 数値処理の問題	CVE-2010-0411	2010-03-16 11:14	2010-02-8	Show	GitHub Exploit DB Packet Storm

256240	10	危険	サイバートラスト株式会社レッドハット SystemTap	-	SystemTap の stap-server における任意のコマンドを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2009-4273	2010-03-16 11:14	2010-01-26	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 21, 2026, 4:10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
257051	8.8	HIGH Local	xen	xen	A parameter verification issue was discovered in Xen through 4.9.x. The function `alloc_heap_pages` allows callers to specify the first NUMA node that should be used for allocations through the `memf…	CWE-125 Out-of-bounds Read	CVE-2017-14316	2024-11-21 12:12	2017-09-13	Show	GitHub Exploit DB Packet Storm

257052	7.5	HIGH Adjacent	apple	iphone_os	In Apple iOS 7 through 9, due to a BlueBorne flaw in the implementation of LEAP (Low Energy Audio Protocol), a large audio command can be sent to a targeted device and lead to a heap overflow with at…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2017-14315	2024-11-21 12:12	2017-09-13	Show	GitHub Exploit DB Packet Storm

257053	7.5	HIGH Network	hbgk	hb7024xt_firmware hb7032xt_firmware hb7008t2_firmware hb7016t2_firmware hb7204xt_firmware hb7208xt_firmware hb7216xt_firmware hb7208x3_firmware hb7216x3_firmware hb7204x_fi…	On Beijing Hanbang Hanbanggaoke devices, because user-controlled input is not sufficiently sanitized, sending a PUT request to /ISAPI/Security/users/1 allows an admin password change.	CWE-20 Improper Input Validation	CVE-2017-14335	2024-11-21 12:12	2017-09-12	Show	GitHub Exploit DB Packet Storm

257054	7.8	HIGH Local	gnu	binutils	The process_version_sections function in readelf.c in GNU Binutils 2.29 allows attackers to cause a denial of service (Integer Overflow, and hang because of a time-consuming loop) or possibly have un…	CWE-190 Integer Overflow or Wraparound	CVE-2017-14333	2024-11-21 12:12	2017-09-12	Show	GitHub Exploit DB Packet Storm

257055	6.5	MEDIUM Network	imagemagick canonical	imagemagick ubuntu_linux	In ImageMagick 7.0.7-1 Q16, a memory leak vulnerability was found in the function ReadMATImage in coders/mat.c, which allows attackers to cause a denial of service via a crafted file.	CWE-772 Missing Release of Resource after Effective Lifetime	CVE-2017-14326	2024-11-21 12:12	2017-09-12	Show	GitHub Exploit DB Packet Storm

257056	6.5	MEDIUM Network	imagemagick canonical	imagemagick ubuntu_linux	In ImageMagick 7.0.7-1 Q16, a memory leak vulnerability was found in the function PersistPixelCache in magick/cache.c, which allows attackers to cause a denial of service (memory consumption in ReadM…	CWE-772 Missing Release of Resource after Effective Lifetime	CVE-2017-14325	2024-11-21 12:12	2017-09-12	Show	GitHub Exploit DB Packet Storm

257057	6.5	MEDIUM Network	imagemagick	imagemagick	In ImageMagick 7.0.7-1 Q16, a memory leak vulnerability was found in the function ReadMPCImage in coders/mpc.c, which allows attackers to cause a denial of service via a crafted file.	CWE-772 Missing Release of Resource after Effective Lifetime	CVE-2017-14324	2024-11-21 12:12	2017-09-12	Show	GitHub Exploit DB Packet Storm

257058	7.8	HIGH Local	broadcom	tcpreplay	tcprewrite in Tcpreplay 3.4.4 has a Heap-Based Buffer Overflow vulnerability triggered by a crafted PCAP file, a related issue to CVE-2016-6160.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2017-14266	2024-11-21 12:12	2017-09-12	Show	GitHub Exploit DB Packet Storm

257059	6.5	MEDIUM Network	graphicsmagick debian	graphicsmagick debian_linux	Off-by-one error in the DrawImage function in magick/render.c in GraphicsMagick 1.3.26 allows remote attackers to cause a denial of service (DrawDashPolygon heap-based buffer over-read and applicatio…	CWE-125 Out-of-bounds Read	CVE-2017-14314	2024-11-21 12:12	2017-09-12	Show	GitHub Exploit DB Packet Storm

257060	6.1	MEDIUM Network	shibboleth_project	shibboleth	The shibboleth_login_form function in shibboleth.php in the Shibboleth plugin before 1.8 for WordPress is prone to an XSS vulnerability due to improper use of add_query_arg().	CWE-79 Cross-site Scripting	CVE-2017-14313	2024-11-21 12:12	2017-09-12	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed