Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 24, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
256421	9.3	危険	アップル	-	Windows 上で稼働する Apple QuickTime における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-0536	2010-04-26 16:59	2010-03-31	Show	GitHub Exploit DB Packet Storm

256422	9.3	危険	アップル	-	Windows 上で稼働する Apple QuickTime の QuickTime.qts における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-0529	2010-04-26 16:59	2010-03-31	Show	GitHub Exploit DB Packet Storm

256423	9.3	危険	アップル	-	Windows 上で稼働する Apple QuickTime における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-0528	2010-04-26 16:58	2010-03-31	Show	GitHub Exploit DB Packet Storm

256424	9.3	危険	アップル	-	Apple QuickTime における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2010-0527	2010-04-26 16:58	2010-03-31	Show	GitHub Exploit DB Packet Storm

256425	5	警告	アップルサイバートラスト株式会社 Ruby-lang.org レッドハット	-	Ruby の BigDecimal ライブラリにおけるサービス運用妨害 (DoS) の脆弱性	CWE-189 数値処理の問題	CVE-2009-1904	2010-04-26 16:46	2009-06-9	Show	GitHub Exploit DB Packet Storm

256426	6.9	警告	アップル Vim	-	Vim の Python インターフェースの src/if_python.c における信頼性のない検索パスの脆弱性	CWE-Other その他	CVE-2009-0316	2010-04-26 16:45	2009-01-28	Show	GitHub Exploit DB Packet Storm

256427	9.3	危険	アップルサイバートラスト株式会社 Vim レッドハット	-	Vim におけるエスケープ文字を適切に処理しないことに関する任意のコマンドを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2008-4101	2010-04-26 16:45	2008-10-9	Show	GitHub Exploit DB Packet Storm

256428	9.3	危険	アップルサイバートラスト株式会社 Vim レッドハット	-	Vim における適切に入力をサニタイズしないことに関する任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2008-2712	2010-04-26 16:45	2008-10-9	Show	GitHub Exploit DB Packet Storm

256429	4.3	警告	VMware	-	VMware Server の WebAccess におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-1193	2010-04-21 17:54	2010-03-29	Show	GitHub Exploit DB Packet Storm

256430	7.5	危険	VMware	-	複数の VMware 製品の WebAccess におけるリクエストの発信元を偽装される脆弱性	CWE-20 不適切な入力確認	CVE-2010-0686	2010-04-21 17:53	2010-03-29	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 24, 2026, 4:05 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
250751	7.8	HIGH Local	artifex	mujs	An issue was discovered in Artifex Software, Inc. MuJS before 8f62ea10a0af68e56d5c00720523ebcba13c2e6a. The MakeDay function in jsdate.c does not validate the month, leading to an integer overflow wh…	CWE-190 Integer Overflow or Wraparound	CVE-2017-5628	2024-11-21 12:28	2017-01-30	Show	GitHub Exploit DB Packet Storm

250752	7.8	HIGH Local	artifex	mujs	An issue was discovered in Artifex Software, Inc. MuJS before 4006739a28367c708dea19aeb19b8a1a9326ce08. The jsR_setproperty function in jsrun.c lacks a check for a negative array length. This leads t…	CWE-190 Integer Overflow or Wraparound	CVE-2017-5627	2024-11-21 12:28	2017-01-30	Show	GitHub Exploit DB Packet Storm

250753	6.1	MEDIUM Network	wordpress debian	wordpress debian_linux	Cross-site scripting (XSS) vulnerability in wp-admin/includes/class-wp-posts-list-table.php in the posts list table in WordPress before 4.7.2 allows remote attackers to inject arbitrary web script or…	CWE-79 Cross-site Scripting	CVE-2017-5612	2024-11-21 12:28	2017-01-30	Show	GitHub Exploit DB Packet Storm

250754	9.8	CRITICAL Network	wordpress debian oracle	wordpress debian_linux data_integrator	SQL injection vulnerability in wp-includes/class-wp-query.php in WP_Query in WordPress before 4.7.2 allows remote attackers to execute arbitrary SQL commands by leveraging the presence of an affected…	CWE-89 SQL Injection	CVE-2017-5611	2024-11-21 12:28	2017-01-30	Show	GitHub Exploit DB Packet Storm

250755	5.3	MEDIUM Network	wordpress debian	wordpress debian_linux	wp-admin/includes/class-wp-press-this.php in Press This in WordPress before 4.7.2 does not properly restrict visibility of a taxonomy-assignment user interface, which allows remote attackers to bypas…	CWE-200 Information Exposure	CVE-2017-5610	2024-11-21 12:28	2017-01-30	Show	GitHub Exploit DB Packet Storm

250756	8.8	HIGH Network	s9y	serendipity	SQL injection vulnerability in include/functions_entries.inc.php in Serendipity 2.0.5 allows remote authenticated users to execute arbitrary SQL commands via the cat parameter.	CWE-89 SQL Injection	CVE-2017-5609	2024-11-21 12:28	2017-01-29	Show	GitHub Exploit DB Packet Storm

250757	7.7	HIGH Network	rapid7	insightvm	Nexpose and InsightVM virtual appliances downloaded between April 5th, 2017 and May 3rd, 2017 contain identical SSH host keys. Normally, a unique SSH host key should be generated the first time a vir…	CWE-330 Use of Insufficiently Random Values	CVE-2017-5242	2024-11-21 12:27	2023-01-13	Show	GitHub Exploit DB Packet Storm

250758	8.8	HIGH Local	linux netapp	linux_kernel cloud_backup h300s_firmware h500s_firmware h700s_firmware h300e_firmware h500e_firmware h700e_firmware h410s_firmware	Insufficient data validation in waitid allowed an user to escape sandboxes on Linux.	CWE-20 Improper Input Validation	CVE-2017-5123	2024-11-21 12:27	2021-11-3	Show	GitHub Exploit DB Packet Storm

250759	7.8	HIGH Local	icoutils_project canonical debian opensuse	icoutils ubuntu_linux debian_linux leap opensuse	Integer overflow in the check_offset function in b/wrestool/fileread.c in icoutils before 0.31.1 allows local users to cause a denial of service (process crash) and execute arbitrary code via a craft…	CWE-190 Integer Overflow or Wraparound	CVE-2017-5331	2024-11-21 12:27	2019-11-5	Show	GitHub Exploit DB Packet Storm

250760	7.8	HIGH Local	icoutils_project redhat canonical debian opensuse	icoutils enterprise_linux_desktop enterprise_linux_workstation enterprise_linux enterprise_linux_server_tus enterprise_linux_server_aus enterprise_linux_server_eus ubuntu_linux	Integer overflow in the extract_group_icon_cursor_resource function in b/wrestool/extract.c in icoutils before 0.31.1 allows local users to cause a denial of service (process crash) or execute arbitr…	CWE-190 Integer Overflow or Wraparound	CVE-2017-5333	2024-11-21 12:27	2019-11-5	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed