Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":May 24, 2026, 6 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 256811 | 6.8 | 警告 | GNU Project XEmacs サイバートラスト株式会社 |
- | Emacs および XEmacs における .flc ファイルの処理に関する任意のコードを実行される脆弱性 |
CWE-DesignError
|
CVE-2008-2142 | 2010-02-2 11:43 | 2008-05-12 | Show | GitHub Exploit DB Packet Storm |
| 256812 | 3.5 | 注意 | Drupal サイバートラスト株式会社 |
- | Drupal の Menu モジュールにおけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2009-4370 | 2010-02-2 11:43 | 2009-12-16 | Show | GitHub Exploit DB Packet Storm |
| 256813 | 3.5 | 注意 | Drupal サイバートラスト株式会社 |
- | Drupal の Contact モジュールにおけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2009-4369 | 2010-02-2 11:42 | 2009-12-16 | Show | GitHub Exploit DB Packet Storm |
| 256814 | 7.5 | 危険 | 日立 | - | Cosminexus、Processing Kit for XML および Hitachi Developer's Kit for Java におけるバッファオーバーフローの脆弱性 |
CWE-119
バッファエラー |
- | 2010-02-2 11:42 | 2009-12-22 | Show | GitHub Exploit DB Packet Storm |
| 256815 | 4.3 | 警告 | VMware | - | 複数の VMware 製品におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2009-3731 | 2010-02-1 11:52 | 2009-12-15 | Show | GitHub Exploit DB Packet Storm |
| 256816 | 10 | 危険 | サイバートラスト株式会社 Linux |
- | Linux kernel および gxsnmp パッケージの asn1 の実装における任意のコードを実行される脆弱性 |
CWE-119
バッファエラー |
CVE-2008-1673 | 2010-02-1 11:51 | 2008-06-10 | Show | GitHub Exploit DB Packet Storm |
| 256817 | 10 | 危険 | ヒューレット・パッカード | - | 複数の Symantec 製品の VRTSweb における任意のコードを実行される脆弱性 |
CWE-287
不適切な認証 |
CVE-2009-3027 | 2010-02-1 11:51 | 2009-12-8 | Show | GitHub Exploit DB Packet Storm |
| 256818 | 9.3 | 危険 | KDE project Glyph & Cog, LLC GNOME Project サイバートラスト株式会社 レッドハット |
- | Xpdf、gpdf および kpdf の FoFiType1::parse 関数における任意のコードを実行される脆弱性 |
CWE-94
コード・インジェクション |
CVE-2009-4035 | 2010-01-29 09:54 | 2009-12-16 | Show | GitHub Exploit DB Packet Storm |
| 256819 | 7.8 | 危険 | Mozilla Foundation | - | Mozilla Firefox/SeaMonkey の GeckoActiveXObject 関数における重要な情報を取得される脆弱性 |
CWE-200
情報漏えい |
CVE-2009-3987 | 2010-01-29 09:54 | 2009-12-15 | Show | GitHub Exploit DB Packet Storm |
| 256820 | 7.6 | 危険 | サイバートラスト株式会社 Mozilla Foundation レッドハット |
- | Mozilla Firefox/SeaMonkey における任意の JavaScript を実行される脆弱性 |
CWE-94
コード・インジェクション |
CVE-2009-3986 | 2010-01-29 09:54 | 2009-12-15 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:May 24, 2026, 4:05 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 249061 | 7.5 |
HIGH
Network |
apache | traffic_control | The Traffic Router component of the incubating Apache Traffic Control project is vulnerable to a Slowloris style Denial of Service attack. TCP connections made on the configured DNS port will remain … |
CWE-400
Uncontrolled Resource Consumption |
CVE-2017-7670 | 2024-11-21 12:32 | 2017-07-11 | Show | GitHub Exploit DB Packet Storm |
| 249062 | 9.8 |
CRITICAL
Network |
redhat | 3scale_api_management_platform | Red Hat 3scale (aka RH-3scale) API Management Platform (AMP) before 2.0.0 would permit creation of an access token without a client secret. An attacker could use this flaw to circumvent authenticatio… |
CWE-863
Incorrect Authorization |
CVE-2017-7512 | 2024-11-21 12:32 | 2017-07-8 | Show | GitHub Exploit DB Packet Storm |
| 249063 | 7.5 |
HIGH
Network |
apache | solr | Apache Solr uses a PKI based mechanism to secure inter-node communication when security is enabled. It is possible to create a specially crafted node name that does not exist as part of the cluster a… |
CWE-287
Improper Authentication |
CVE-2017-7660 | 2024-11-21 12:32 | 2017-07-8 | Show | GitHub Exploit DB Packet Storm |
| 249064 | 7.8 |
HIGH
Local |
windjview_project | windjview | WinDjView 2.1 might allow user-assisted attackers to execute code via a crafted .djvu file, because of a "User Mode Write AV near NULL" in WinDjView.exe. One threat model is a victim who obtains an u… |
NVD-CWE-noinfo
|
CVE-2017-7894 | 2024-11-21 12:32 | 2017-07-6 | Show | GitHub Exploit DB Packet Storm |
| 249065 | 9.8 |
CRITICAL
Network |
newport |
xps-cx_firmware xps-qx_firmware |
An Improper Authentication issue was discovered in Newport XPS-Cx and XPS-Qx. An attacker may bypass authentication by accessing a specific uniform resource locator (URL). |
CWE-287
Improper Authentication |
CVE-2017-7919 | 2024-11-21 12:32 | 2017-07-4 | Show | GitHub Exploit DB Packet Storm |
| 249066 | 9.8 |
CRITICAL
Network |
ge |
multilin_sr_750_feeder_protection_relay_firmware multilin_sr_760_feeder_protection_relay_firmware multilin_sr_469_motor_protection_relay_firmware multilin_sr_489_generator_protection_relay_f… |
A Weak Cryptography for Passwords issue was discovered in General Electric (GE) Multilin SR 750 Feeder Protection Relay, firmware versions prior to Version 7.47; SR 760 Feeder Protection Relay, firmw… |
CWE-326 CWE-330 CWE-522 Inadequate Encryption Strength Use of Insufficiently Random Values Insufficiently Protected Credentials |
CVE-2017-7905 | 2024-11-21 12:32 | 2017-06-30 | Show | GitHub Exploit DB Packet Storm |
| 249067 | 9.8 |
CRITICAL
Network |
rockwellautomation |
1763-l16awa_series_a 1763-l16awa_series_b 1763-l16bbb_series_a 1763-l16bbb_series_b 1763-l16bwa_series_a 1763-l16bwa_series_b 1763-l16dwd_series_a 1763-l16dwd_series_b 1766-l3… |
A Weak Password Requirements issue was discovered in Rockwell Automation Allen-Bradley MicroLogix 1100 programmable-logic controllers 1763-L16AWA, Series A and B, Version 16.00 and prior versions; 17… |
CWE-326
Inadequate Encryption Strength |
CVE-2017-7903 | 2024-11-21 12:32 | 2017-06-30 | Show | GitHub Exploit DB Packet Storm |
| 249068 | 9.8 |
CRITICAL
Network |
rockwellautomation |
1763-l16awa_series_a 1763-l16awa_series_b 1763-l16bbb_series_a 1763-l16bbb_series_b 1763-l16bwa_series_a 1763-l16bwa_series_b 1763-l16dwd_series_a 1763-l16dwd_series_b 1766-l3… |
A "Reusing a Nonce, Key Pair in Encryption" issue was discovered in Rockwell Automation Allen-Bradley MicroLogix 1100 programmable-logic controllers 1763-L16AWA, Series A and B, Version 16.00 and pri… |
CWE-330
Use of Insufficiently Random Values |
CVE-2017-7902 | 2024-11-21 12:32 | 2017-06-30 | Show | GitHub Exploit DB Packet Storm |
| 249069 | 8.6 |
HIGH
Network |
rockwellautomation |
1763-l16awa_series_a 1763-l16awa_series_b 1763-l16bbb_series_a 1763-l16bbb_series_b 1763-l16bwa_series_a 1763-l16bwa_series_b 1763-l16dwd_series_a 1763-l16dwd_series_b 1766-l3… |
A Predictable Value Range from Previous Values issue was discovered in Rockwell Automation Allen-Bradley MicroLogix 1100 programmable-logic controllers 1763-L16AWA, Series A and B, Version 16.00 and … |
CWE-330
Use of Insufficiently Random Values |
CVE-2017-7901 | 2024-11-21 12:32 | 2017-06-30 | Show | GitHub Exploit DB Packet Storm |
| 249070 | 9.8 |
CRITICAL
Network |
rockwellautomation |
1763-l16awa_series_a 1763-l16awa_series_b 1763-l16bbb_series_a 1763-l16bbb_series_b 1763-l16bwa_series_a 1763-l16bwa_series_b 1763-l16dwd_series_a 1763-l16dwd_series_b 1766-l3… |
An Information Exposure issue was discovered in Rockwell Automation Allen-Bradley MicroLogix 1100 programmable-logic controllers 1763-L16AWA, Series A and B, Version 16.00 and prior versions; 1763-L1… |
CWE-200
Information Exposure |
CVE-2017-7899 | 2024-11-21 12:32 | 2017-06-30 | Show | GitHub Exploit DB Packet Storm |