Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":May 24, 2026, 6 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 256381 | 7.2 | 危険 | VMware | - | 複数の VMware 製品の vmrun における権限昇格の脆弱性 |
CWE-134
書式文字列の問題 |
CVE-2010-1139 | 2010-05-7 17:25 | 2010-04-9 | Show | GitHub Exploit DB Packet Storm |
| 256382 | 5 | 警告 | VMware | - | 複数の VMware 製品の仮想ネットワークスタックにおける重要な情報を取得される脆弱性 |
CWE-200
情報漏えい |
CVE-2010-1138 | 2010-05-7 17:25 | 2010-04-9 | Show | GitHub Exploit DB Packet Storm |
| 256383 | 8.5 | 危険 | VMware | - | 複数の VMware 製品の VMware Tools における権限昇格の脆弱性 |
CWE-264
認可・権限・アクセス制御 |
CVE-2010-1142 | 2010-05-7 17:24 | 2010-04-9 | Show | GitHub Exploit DB Packet Storm |
| 256384 | 8.5 | 危険 | VMware | - | 複数の VMware 製品の VMware Tools における任意のコードを実行される脆弱性 |
CWE-264
認可・権限・アクセス制御 |
CVE-2010-1141 | 2010-05-7 17:24 | 2010-04-9 | Show | GitHub Exploit DB Packet Storm |
| 256385 | 5 | 警告 | アップル サイバートラスト株式会社 レッドハット ターボリナックス CUPS |
- | CUPS の ippReadIO 関数におけるサービス運用妨害 (DoS) の脆弱性 |
CWE-399
リソース管理の問題 |
CVE-2009-0949 | 2010-05-7 16:55 | 2009-06-3 | Show | GitHub Exploit DB Packet Storm |
| 256386 | 6.8 | 警告 | レッドハット サイバートラスト株式会社 ターボリナックス CUPS |
- | CUPS の TIFF イメージデコーディングルーチンにおける整数オーバーフローの脆弱性 |
CWE-189
数値処理の問題 |
CVE-2009-0163 | 2010-05-7 16:51 | 2009-04-16 | Show | GitHub Exploit DB Packet Storm |
| 256387 | 4.6 | 警告 | GNU Project サイバートラスト株式会社 レッドハット |
- | GNU cpio における大きなサイズのファイル処理によるバッファーオーバーフローの脆弱性 |
CWE-119
バッファエラー |
CVE-2005-4268 | 2010-05-7 16:51 | 2005-12-15 | Show | GitHub Exploit DB Packet Storm |
| 256388 | 4.3 | 警告 | 日本電気 Apache Software Foundation |
- | Apache Xerces C++ におけるサービス運用妨害 (DoS) の脆弱性 |
CWE-119
バッファエラー |
CVE-2009-1885 | 2010-05-6 13:47 | 2009-08-6 | Show | GitHub Exploit DB Packet Storm |
| 256389 | 6.4 | 警告 | アップル ターボリナックス CUPS |
- | CUPS における DNS リバインド攻撃を誘導される脆弱性 |
CWE-20
不適切な入力確認 |
CVE-2009-0164 | 2010-05-6 13:46 | 2009-04-24 | Show | GitHub Exploit DB Packet Storm |
| 256390 | 5 | 警告 | freedesktop.org 日本電気 サイバートラスト株式会社 レッドハット |
- | JBIG2 デコーダにおける SplashBitmap に関連する整数オーバーフローの脆弱性 |
CWE-189
数値処理の問題 |
CVE-2009-1188 | 2010-05-6 13:46 | 2009-04-23 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:May 25, 2026, 4:01 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 251971 | 7.8 |
HIGH
Local |
isc | bind | The BIND installer on Windows uses an unquoted service path which can enable a local user to achieve privilege escalation if the host file system permissions allow this. Affects BIND 9.2.6-P2->9.2.9,… |
CWE-428
Unquoted Search Path or Element |
CVE-2017-3141 | 2024-11-21 12:24 | 2019-01-17 | Show | GitHub Exploit DB Packet Storm |
| 251972 | 5.9 |
MEDIUM
Network |
isc netapp |
bind data_ontap_edge oncommand_balance element_software |
If named is configured to use Response Policy Zones (RPZ) an error processing some rule types can lead to a condition where BIND will endlessly loop while handling a query. Affects BIND 9.9.10, 9.10.… |
CWE-400
Uncontrolled Resource Consumption |
CVE-2017-3140 | 2024-11-21 12:24 | 2019-01-17 | Show | GitHub Exploit DB Packet Storm |
| 251973 | 7.5 |
HIGH
Network |
isc redhat debian netapp juniper |
bind enterprise_linux_desktop enterprise_linux_server_aus enterprise_linux_workstation enterprise_linux_server_tus enterprise_linux_server enterprise_linux_server_eus debian_linu… |
BIND was improperly sequencing cleanup operations on upstream recursion fetch contexts, leading in some cases to a use-after-free error that can trigger an assertion failure and crash in named. Affec… |
CWE-416
Use After Free |
CVE-2017-3145 | 2024-11-21 12:24 | 2019-01-17 | Show | GitHub Exploit DB Packet Storm |
| 251974 | 7.5 |
HIGH
Network |
isc redhat canonical debian |
dhcp enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server enterprise_linux_server_aus enterprise_linux_server_eus enterprise_linux_server_tus ubuntu_linu… |
A vulnerability stemming from failure to properly clean up closed OMAPI connections can lead to exhaustion of the pool of socket descriptors available to the DHCP server. Affects ISC DHCP 4.1.0 to 4.… |
CWE-400
Uncontrolled Resource Consumption |
CVE-2017-3144 | 2024-11-21 12:24 | 2019-01-17 | Show | GitHub Exploit DB Packet Storm |
| 251975 | 5.9 |
MEDIUM
Network |
isc redhat debian |
bind enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server enterprise_linux_server_tus enterprise_linux_server_aus enterprise_linux_server_eus debian_linux |
An attacker who is able to send and receive messages to an authoritative DNS server and who has knowledge of a valid TSIG key name for the zone and service being targeted may be able to manipulate BI… |
NVD-CWE-noinfo
|
CVE-2017-3143 | 2024-11-21 12:24 | 2019-01-17 | Show | GitHub Exploit DB Packet Storm |
| 251976 | 3.7 |
LOW
Network |
isc redhat debian |
bind enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server enterprise_linux_server_tus enterprise_linux_server_aus enterprise_linux_server_eus debian_linux |
An attacker who is able to send and receive messages to an authoritative DNS server and who has knowledge of a valid TSIG key name may be able to circumvent TSIG authentication of AXFR requests via a… |
CWE-20
Improper Input Validation |
CVE-2017-3142 | 2024-11-21 12:24 | 2019-01-17 | Show | GitHub Exploit DB Packet Storm |
| 251977 | 5.3 |
MEDIUM
Network |
isc netapp debian |
bind data_ontap_edge oncommand_balance element_software debian_linux |
named contains a feature which allows operators to issue commands to a running server by communicating with the server process over a control channel, using a utility program such as rndc. A regressi… |
CWE-617
Reachable Assertion |
CVE-2017-3138 | 2024-11-21 12:24 | 2019-01-17 | Show | GitHub Exploit DB Packet Storm |
| 251978 | 7.5 |
HIGH
Network |
isc redhat netapp debian |
bind enterprise_linux_desktop enterprise_linux_server_aus enterprise_linux_workstation enterprise_linux_server_tus enterprise_linux_server enterprise_linux_server_eus data_ontap_… |
Mistaken assumptions about the ordering of records in the answer section of a response containing CNAME or DNAME resource records could lead to a situation in which named would exit with an assertion… |
CWE-617
Reachable Assertion |
CVE-2017-3137 | 2024-11-21 12:24 | 2019-01-17 | Show | GitHub Exploit DB Packet Storm |
| 251979 | 5.9 |
MEDIUM
Network |
isc redhat netapp debian |
bind enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server enterprise_linux_server_tus enterprise_linux_server_aus enterprise_linux_server_eus data_ontap_… |
A query with a specific set of characteristics could cause a server using DNS64 to encounter an assertion failure and terminate. An attacker could deliberately construct a query, enabling denial-of-s… |
CWE-617
Reachable Assertion |
CVE-2017-3136 | 2024-11-21 12:24 | 2019-01-17 | Show | GitHub Exploit DB Packet Storm |
| 251980 | 5.9 |
MEDIUM
Network |
isc redhat netapp debian |
bind enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server enterprise_linux_server_tus enterprise_linux_server_aus enterprise_linux_server_eus data_ontap_… |
Under some conditions when using both DNS64 and RPZ to rewrite query responses, query processing can resume in an inconsistent state leading to either an INSIST assertion failure or an attempt to rea… |
CWE-476
NULL Pointer Dereference |
CVE-2017-3135 | 2024-11-21 12:24 | 2019-01-17 | Show | GitHub Exploit DB Packet Storm |