Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 25, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
256501	4	警告	オラクル	-	複数の Oracle 製品の PeopleTools コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0878	2010-05-13 15:11	2010-04-13	Show	GitHub Exploit DB Packet Storm

256502	5	警告	オラクル	-	複数の Oracle 製品の PeopleTools コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0877	2010-05-13 15:11	2010-04-13	Show	GitHub Exploit DB Packet Storm

256503	4	警告	オラクル	-	複数の Oracle 製品の PeopleTools コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0880	2010-05-13 15:11	2010-04-13	Show	GitHub Exploit DB Packet Storm

256504	3.5	注意	オラクル	-	Oracle E-Business Suite の Oracle Workflow Cartridge コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0857	2010-05-13 15:10	2010-04-13	Show	GitHub Exploit DB Packet Storm

256505	3.5	注意	オラクル	-	Oracle E-Business Suite の E-Business Intelligence コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0858	2010-05-13 15:10	2010-04-13	Show	GitHub Exploit DB Packet Storm

256506	4.3	警告	オラクル	-	Oracle E-Business Suite の Oracle Transportation Management コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0869	2010-05-13 15:10	2010-04-13	Show	GitHub Exploit DB Packet Storm

256507	4.3	警告	オラクル	-	Oracle E-Business Suite の Oracle Agile Engineering Data Management コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0871	2010-05-13 15:10	2010-04-13	Show	GitHub Exploit DB Packet Storm

256508	4.3	警告	オラクル	-	Oracle E-Business Suite の Oracle Agile Engineering Data Management コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0865	2010-05-13 15:09	2010-04-13	Show	GitHub Exploit DB Packet Storm

256509	5	警告	オラクル	-	Oracle E-Business Suite の Oracle HRMS (Self Service) コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0861	2010-05-13 15:09	2010-04-13	Show	GitHub Exploit DB Packet Storm

256510	7.6	危険	マイクロソフト	-	Internet Explorer において VBScript および Windows Help を使用する際に任意のコードが実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-0483	2010-05-12 15:20	2010-03-2	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 25, 2026, 4:01 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
250691	7.8	HIGH Local	fedoraproject gnome	fedora gtk-vnc	gtk-vnc before 0.7.0 does not properly check boundaries of subrectangle-containing tiles, which allows remote servers to execute arbitrary code via the src x, y coordinates in a crafted (1) rre, (2) …	CWE-118 Incorrect Access of Indexable Resource ('Range Error')	CVE-2017-5884	2024-11-21 12:28	2017-03-1	Show	GitHub Exploit DB Packet Storm

250692	9.8	CRITICAL Network	rubyzip_project debian	rubyzip debian_linux	The Zip::File component in the rubyzip gem before 1.2.1 for Ruby has a directory traversal vulnerability. If a site allows uploading of .zip files, an attacker can upload a malicious file that uses "…	CWE-22 Path Traversal	CVE-2017-5946	2024-11-21 12:28	2017-02-27	Show	GitHub Exploit DB Packet Storm

250693	3.7	LOW Network	w3	high_resolution_time_api	The W3C High Resolution Time API, as implemented in various web browsers, does not consider that memory-reference times can be measured by a performance.now "Time to Tick" approach even with the http…	NVD-CWE-noinfo	CVE-2017-5928	2024-11-21 12:28	2017-02-27	Show	GitHub Exploit DB Packet Storm

250694	7.5	HIGH Network	intel amd samsung nvidia allwinner	core_i7-2620qm core_i7-6700k core_i5_m480 fx-8120_8-core e-350 atom_c2750 athlon_ii_640_x4 exynos_5800 celeron_n2840 fx-8320_8-core xeon_e5-2658_v2 tegra_k1_cd580m-a1…	Page table walks conducted by the MMU during virtual to physical address translation leave a trace in the last level cache of modern ARM processors. By performing a side-channel attack on the MMU ope…	CWE-200 Information Exposure	CVE-2017-5927	2024-11-21 12:28	2017-02-27	Show	GitHub Exploit DB Packet Storm

250695	7.5	HIGH Network	intel amd samsung nvidia allwinner	core_i7-2620qm core_i7-6700k core_i5_m480 fx-8120_8-core e-350 atom_c2750 athlon_ii_640_x4 exynos_5800 celeron_n2840 fx-8320_8-core xeon_e5-2658_v2 tegra_k1_cd580m-a1…	Page table walks conducted by the MMU during virtual to physical address translation leave a trace in the last level cache of modern AMD processors. By performing a side-channel attack on the MMU ope…	CWE-200 Information Exposure	CVE-2017-5926	2024-11-21 12:28	2017-02-27	Show	GitHub Exploit DB Packet Storm

250696	7.5	HIGH Network	intel amd samsung nvidia allwinner	core_i7-2620qm core_i7-6700k core_i5_m480 fx-8120_8-core e-350 atom_c2750 athlon_ii_640_x4 exynos_5800 celeron_n2840 fx-8320_8-core xeon_e5-2658_v2 tegra_k1_cd580m-a1…	Page table walks conducted by the MMU during virtual to physical address translation leave a trace in the last level cache of modern Intel processors. By performing a side-channel attack on the MMU o…	CWE-200 Information Exposure	CVE-2017-5925	2024-11-21 12:28	2017-02-27	Show	GitHub Exploit DB Packet Storm

250697	7.8	HIGH Local	linux debian canonical	linux_kernel debian_linux ubuntu_linux	The do_shmat function in ipc/shm.c in the Linux kernel through 4.9.12 does not restrict the address calculated by a certain rounding operation, which allows local users to map page zero, and conseque…	NVD-CWE-noinfo	CVE-2017-5669	2024-11-21 12:28	2017-02-25	Show	GitHub Exploit DB Packet Storm

250698	9.8	CRITICAL Network	metalgenix	genixcms	CSRF token bypass in GeniXCMS before 1.0.2 could result in escalation of privileges. The forgotpassword.php page can be used to acquire a token.	CWE-352 Origin Validation Error	CVE-2017-5959	2024-11-21 12:28	2017-02-21	Show	GitHub Exploit DB Packet Storm

250699	7.8	HIGH Local	gomlab	gom_player	GOM Player 2.3.10.5266 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted fpx file.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2017-5881	2024-11-21 12:28	2017-02-21	Show	GitHub Exploit DB Packet Storm

250700	7.0	HIGH Local	linux	linux_kernel	Race condition in kernel/events/core.c in the Linux kernel before 4.9.7 allows local users to gain privileges via a crafted application that makes concurrent perf_event_open system calls for moving a…	CWE-362 Race Condition	CVE-2017-6001	2024-11-21 12:28	2017-02-19	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed