Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 29, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
256731	6.8	警告	アップル	-	Java の window drawing 実装における任意のコードを実行される脆弱性	CWE-189 数値処理の問題	CVE-2010-0539	2010-06-7 17:58	2010-05-18	Show	GitHub Exploit DB Packet Storm

256732	6.8	警告	アップル	-	Apple Mac OS X 上で稼働する Java における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2010-0538	2010-06-7 17:58	2010-05-18	Show	GitHub Exploit DB Packet Storm

256733	6.5	警告	PostgreSQL.org サイバートラスト株式会社ターボリナックスサン・マイクロシステムズレッドハット	-	PostgreSQL におけるインデックスの処理に関する権限を取得される脆弱性	CWE-Other その他	CVE-2009-4136	2010-06-7 16:48	2009-12-15	Show	GitHub Exploit DB Packet Storm

256734	-	-	コンソナ	-	Consona (旧 SupportSoft) Intelligent Assistance Suite (IAS) に複数の脆弱性	-	-	2010-06-4 17:58	2010-05-13	Show	GitHub Exploit DB Packet Storm

256735	7.5	危険	アップル VMware サン・マイクロシステムズヒューレット・パッカードレッドハット	-	JDK および JRE の Java プラグインにおける古い JRE バージョンで動作可能な脆弱性	CWE-DesignError	CVE-2009-1105	2010-06-4 15:54	2009-03-24	Show	GitHub Exploit DB Packet Storm

256736	10	危険	日立	-	Collaboration - Common Utility におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	-	2010-06-3 15:19	2010-05-12	Show	GitHub Exploit DB Packet Storm

256737	10	危険	日立 CA Technologies	-	CA ARCserve Backup および BrightStor ARCserve Backup における任意のコードを実行される脆弱性	CWE-noinfo 情報不足	-	2010-06-3 15:19	2010-03-18	Show	GitHub Exploit DB Packet Storm

256738	6.4	警告	サイバートラスト株式会社 MySQL AB ターボリナックスレッドハット	-	MySQL における SSL サーバになりすまされる脆弱性	CWE-20 不適切な入力確認	CVE-2009-4028	2010-06-3 14:57	2009-11-4	Show	GitHub Exploit DB Packet Storm

256739	4	警告	富士通九州システムズ	-	e-Pares におけるセッション固定の脆弱性	CWE-Other その他	CVE-2010-2149	2010-06-2 15:05	2010-06-2	Show	GitHub Exploit DB Packet Storm

256740	2.6	注意	富士通九州システムズ	-	e-Pares におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2010-2151	2010-06-2 15:04	2010-06-2	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 29, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
248981	5.3	MEDIUM Local	fujielectric	monitouch_v-sft	An Improper Privilege Management issue was discovered in Fuji Electric Monitouch V-SFT versions prior to Version 5.4.43.0. Monitouch V-SFT is installed in a directory with weak access controls by def…	CWE-269 Improper Privilege Management	CVE-2017-9662	2024-11-21 12:36	2017-08-15	Show	GitHub Exploit DB Packet Storm

248982	7.0	HIGH Local	simplight	scada	An Uncontrolled Search Path Element issue was discovered in SIMPlight SCADA Software version 4.3.0.27 and prior. The uncontrolled search path element vulnerability has been identified, which may allo…	CWE-427 Uncontrolled Search Path Element	CVE-2017-9661	2024-11-21 12:36	2017-08-15	Show	GitHub Exploit DB Packet Storm

248983	8.8	HIGH Network	fujielectric	monitouch_v-sft	A Heap-Based Buffer Overflow was discovered in Fuji Electric Monitouch V-SFT versions prior to Version 5.4.43.0. A heap-based buffer overflow vulnerability has been identified, which may cause a cras…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2017-9660	2024-11-21 12:36	2017-08-15	Show	GitHub Exploit DB Packet Storm

248984	8.8	HIGH Network	fujielectric	monitouch_v-sft	A Stack-Based Buffer Overflow issue was discovered in Fuji Electric Monitouch V-SFT versions prior to Version 5.4.43.0. The stack-based buffer overflow vulnerability has been identified, which may ca…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2017-9659	2024-11-21 12:36	2017-08-15	Show	GitHub Exploit DB Packet Storm

248985	5.4	MEDIUM Network	osisoft	pi_integrator_for_microsoft_azure pi_integrator_for_sap_hana pi_integrator_for_business_analystics	A Cross-Site Scripting issue was discovered in OSIsoft PI Integrator for Business Analytics before 2016 R2, PI Integrator for Microsoft Azure before 2016 R2 SP1, and PI Integrator for SAP HANA before…	CWE-79 Cross-site Scripting	CVE-2017-9655	2024-11-21 12:36	2017-08-15	Show	GitHub Exploit DB Packet Storm

248986	9.8	CRITICAL Network	osisoft	pi_integrator_for_business_analystics pi_integrator_for_microsoft_azure pi_integrator_for_sap_hana	An Improper Authorization issue was discovered in OSIsoft PI Integrator for Business Analytics before 2016 R2, PI Integrator for Microsoft Azure before 2016 R2 SP1, and PI Integrator for SAP HANA bef…	CWE-863 Incorrect Authorization	CVE-2017-9653	2024-11-21 12:36	2017-08-15	Show	GitHub Exploit DB Packet Storm

248987	7.8	HIGH Local	solarcontrols	wattconfig_m	An Uncontrolled Search Path Element issue was discovered in Solar Controls WATTConfig M Software Version 2.5.10.1 and prior. An uncontrolled search path element has been identified, which could allow…	CWE-427 Uncontrolled Search Path Element	CVE-2017-9648	2024-11-21 12:36	2017-08-15	Show	GitHub Exploit DB Packet Storm

248988	7.8	HIGH Local	solarcontrols	heating_control_downloader	An Uncontrolled Search Path Element issue was discovered in Solar Controls Heating Control Downloader (HCDownloader) Version 1.0.1.15 and prior. An uncontrolled search path element has been identifie…	CWE-427 Uncontrolled Search Path Element	CVE-2017-9646	2024-11-21 12:36	2017-08-15	Show	GitHub Exploit DB Packet Storm

248989	6.1	MEDIUM Network	apache	sling_servlets_post	The Javascript method Sling.evalString() in Apache Sling Servlets Post before 2.3.22 uses the javascript 'eval' function to parse input strings, which allows for XSS attacks by passing specially craf…	CWE-79 Cross-site Scripting	CVE-2017-9802	2024-11-21 12:36	2017-08-14	Show	GitHub Exploit DB Packet Storm

248990	9.8	CRITICAL Network	apache	subversion	A maliciously constructed svn+ssh:// URL would cause Subversion clients before 1.8.19, 1.9.x before 1.9.7, and 1.10.0.x through 1.10.0-alpha3 to run an arbitrary shell command. Such a URL could be ge…	CWE-20 Improper Input Validation	CVE-2017-9800	2024-11-21 12:36	2017-08-12	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed