Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 23, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
256431	4.3	警告	VMware	-	複数の VMware 製品の WebAccess におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-1137	2010-04-21 17:51	2010-03-29	Show	GitHub Exploit DB Packet Storm

256432	4.6	警告	GNU Project サイバートラスト株式会社レッドハット	-	GNU Automake の dist または distcheck ルールにおけるコンテンツを変更される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2009-4029	2010-04-21 17:51	2009-12-20	Show	GitHub Exploit DB Packet Storm

256433	5	警告	Linux レッドハット	-	Linux kernel の virtio-net ドライバにおけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2010-0741	2010-04-21 17:48	2010-03-30	Show	GitHub Exploit DB Packet Storm

256434	6.9	警告	mielke レッドハット	-	brltty の libbrlttybba.so における権限昇格の脆弱性	CWE-264 CWE-Other	CVE-2008-3279	2010-04-21 17:47	2010-03-30	Show	GitHub Exploit DB Packet Storm

256435	4.3	警告	Mozilla Foundation	-	Mozilla Firefox/SeaMonkey におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2010-0181	2010-04-20 16:42	2010-03-30	Show	GitHub Exploit DB Packet Storm

256436	5.8	警告	サイボウズ	-	複数のサイボウズ製品におけるアクセス制限に関する脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-2029	2010-04-20 12:01	2010-04-20	Show	GitHub Exploit DB Packet Storm

256437	9.3	危険	マイクロソフト	-	Microsoft Internet Explorer の Tabular Data Control ActiveX コントロールにおける任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-0805	2010-04-19 19:20	2010-03-30	Show	GitHub Exploit DB Packet Storm

256438	9.3	危険	マイクロソフト	-	Microsoft Internet Explorer における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2010-0491	2010-04-19 19:19	2010-03-30	Show	GitHub Exploit DB Packet Storm

256439	4.3	警告	マイクロソフト	-	Microsoft Internet Explorer における同一生成元ポリシーを回避される脆弱性	CWE-200 情報漏えい	CVE-2010-0494	2010-04-19 19:19	2010-03-30	Show	GitHub Exploit DB Packet Storm

256440	9.3	危険	マイクロソフト	-	Microsoft Internet Explorer の mstime.dll における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-0492	2010-04-19 19:19	2010-03-30	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 23, 2026, 4:08 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
249431	7.8	HIGH Local	apple	safari iphone_os tvos icloud itunes	An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. macOS before 10.12.6 is affected. tvOS before 10.2.2 is affected. watchOS before 3.2.3 is affected. The issue involve…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2017-7025	2024-11-21 12:31	2017-07-21	Show	GitHub Exploit DB Packet Storm

249432	9.9	CRITICAL Network	nfsen	nfsen	NfSen before 1.3.8 allows remote attackers to execute arbitrary OS commands via shell metacharacters in the customfmt parameter (aka the "Custom output format" field).	CWE-78 OS Command	CVE-2017-7175	2024-11-21 12:31	2017-07-11	Show	GitHub Exploit DB Packet Storm

249433	9.8	CRITICAL Network	dlink	dir-615	The D-Link DIR-615 device before v20.12PTb04 doesn't use SSL for any of the authenticated pages. Also, it doesn't allow the user to generate his own SSL Certificate. An attacker can simply monitor ne…	CWE-295 CWE-311 Improper Certificate Validation Missing Encryption of Sensitive Data	CVE-2017-7406	2024-11-21 12:31	2017-07-7	Show	GitHub Exploit DB Packet Storm

249434	9.8	CRITICAL Network	dlink	dir-615	On the D-Link DIR-615 before v20.12PTb04, once authenticated, this device identifies the user based on the IP address of his machine. By spoofing the IP address belonging to the victim's host, an att…	CWE-287 Improper Authentication	CVE-2017-7405	2024-11-21 12:31	2017-07-7	Show	GitHub Exploit DB Packet Storm

249435	8.8	HIGH Network	dlink	dir-615	On the D-Link DIR-615 before v20.12PTb04, if a victim logged in to the Router's Web Interface visits a malicious site from another Browser tab, the malicious site then can send requests to the victim…	CWE-352 Origin Validation Error	CVE-2017-7404	2024-11-21 12:31	2017-07-7	Show	GitHub Exploit DB Packet Storm

249436	6.1	MEDIUM Network	topdesk	topdesk	There is reflected XSS in TOPdesk before 5.7.6 and 6.x and 7.x before 7.03.019.	CWE-79 Cross-site Scripting	CVE-2017-7276	2024-11-21 12:31	2017-07-5	Show	GitHub Exploit DB Packet Storm

249437	9.8	CRITICAL Network	humaxdigital	hg100r_firmware	An issue was discovered on Humax Digital HG100 2.0.6 devices. The attacker can find the root credentials in the backup file, aka GatewaySettings.bin.	CWE-200 Information Exposure	CVE-2017-7317	2024-11-21 12:31	2017-07-4	Show	GitHub Exploit DB Packet Storm

249438	6.1	MEDIUM Network	humaxdigital	hg100r_firmware	An issue was discovered on Humax Digital HG100R 2.0.6 devices. There is XSS on the 404 page.	CWE-79 Cross-site Scripting	CVE-2017-7316	2024-11-21 12:31	2017-07-4	Show	GitHub Exploit DB Packet Storm

249439	9.8	CRITICAL Network	humaxdigital	hg100r_firmware	An issue was discovered on Humax Digital HG100R 2.0.6 devices. To download the backup file it's not necessary to use credentials, and the router credentials are stored in plaintext inside the backup,…	CWE-306 CWE-522 Missing Authentication for Critical Function Insufficiently Protected Credentials	CVE-2017-7315	2024-11-21 12:31	2017-07-4	Show	GitHub Exploit DB Packet Storm

249440	7.5	HIGH Network	ntop	ntopng	The NetworkInterface::getHost function in NetworkInterface.cpp in ntopng before 3.0 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an empty …	CWE-476 NULL Pointer Dereference	CVE-2017-7458	2024-11-21 12:31	2017-06-27	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed