Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 22, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
256901 10 危険 マイクロソフト - Microsoft Windows の License Logging Server (llssrv.exe) における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2009-2523 2010-01-4 15:24 2009-11-10 Show GitHub Exploit DB Packet Storm
256902 9.3 危険 マイクロソフト - Microsoft Windows の Web Services on Devices API (WSDAPI) における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2009-2512 2010-01-4 15:23 2009-11-10 Show GitHub Exploit DB Packet Storm
256903 10 危険 アップル
VMware
サン・マイクロシステムズ		 - Sun Java SE の Provider クラスにおける詳細不明な脆弱性 CWE-noinfo
情報不足 		CVE-2009-2722 2010-01-4 14:56 2009-08-10 Show GitHub Exploit DB Packet Storm
256904 10 危険 アップル
VMware
サン・マイクロシステムズ		 - Sun Java SE の Provider クラスにおける詳細不明な脆弱性 CWE-noinfo
情報不足 		CVE-2009-2723 2010-01-4 14:55 2009-08-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 23, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
247361 8.8 HIGH
Network 		kaspersky anti-virus_for_linux_server There are no Anti-CSRF tokens in any forms on the web interface in Kaspersky Anti-Virus for Linux File Server before Maintenance Pack 2 Critical Fix 4 (version 8.0.4.312). This would allow an attacke… CWE-352
 Origin Validation Error 		CVE-2017-9810 2024-11-21 12:36 2017-07-18 Show GitHub Exploit DB Packet Storm
247362 7.8 HIGH
Local 		alpinelinux alpine_linux A heap overflow in apk (Alpine Linux's package manager) allows a remote attacker to cause a denial of service, or achieve code execution, by crafting a malicious APKINDEX.tar.gz file with a bad pax h… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2017-9671 2024-11-21 12:36 2017-07-18 Show GitHub Exploit DB Packet Storm
247363 7.8 HIGH
Local 		alpinelinux alpine_linux A heap overflow in apk (Alpine Linux's package manager) allows a remote attacker to cause a denial of service, or achieve code execution by crafting a malicious APKINDEX.tar.gz file. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2017-9669 2024-11-21 12:36 2017-07-18 Show GitHub Exploit DB Packet Storm
247364 5.4 MEDIUM
Network 		blackcat-cms blackcat_cms Cross-site scripting (XSS) vulnerability in Blackcat CMS 1.2 allows remote authenticated users to inject arbitrary web script or HTML via the map_language parameter to backend/pages/lang_settings.php. CWE-79
Cross-site Scripting 		CVE-2017-9609 2024-11-21 12:36 2017-07-18 Show GitHub Exploit DB Packet Storm
247365 7.3 HIGH
Network 		fujielectric v-server An issue was discovered in Fuji Electric V-Server Version 3.3.22.0 and prior. A memory corruption vulnerability has been identified (aka improper restriction of operations within the bounds of a memo… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2017-9639 2024-11-21 12:36 2017-07-18 Show GitHub Exploit DB Packet Storm
247366 7.5 HIGH
Network 		cairographics
opensuse 		cairo
leap 		cairo-truetype-subset.c in cairo 1.15.6 and earlier allows remote attackers to cause a denial of service (out-of-bounds read) because of mishandling of an unexpected malloc(0) call. CWE-125
Out-of-bounds Read 		CVE-2017-9814 2024-11-21 12:36 2017-07-17 Show GitHub Exploit DB Packet Storm
247367 7.5 HIGH
Network 		apache http_server When under stress, closing many connections, the HTTP/2 handling code in Apache httpd 2.4.26 would sometimes access memory after it has been freed, resulting in potentially erratic behaviour. CWE-416
 Use After Free 		CVE-2017-9789 2024-11-21 12:36 2017-07-14 Show GitHub Exploit DB Packet Storm
247368 7.5 HIGH
Network 		apache struts When using a Spring AOP functionality to secure Struts actions it is possible to perform a DoS attack. Solution is to upgrade to Apache Struts version 2.5.12 or 2.3.33. NVD-CWE-noinfo
CVE-2017-9787 2024-11-21 12:36 2017-07-14 Show GitHub Exploit DB Packet Storm
247369 9.1 CRITICAL
Network 		apache
debian
apple
netapp
redhat
oracle 		http_server
debian_linux
mac_os_x
storage_automation_store
oncommand_unified_manager
enterprise_linux_desktop
enterprise_linux_server_aus
enterprise_linux_workstation
enterpri… 		In Apache httpd before 2.2.34 and 2.4.x before 2.4.27, the value placeholder in [Proxy-]Authorization headers of type 'Digest' was not initialized or reset before or between successive key=value assi… CWE-200
CWE-20
Information Exposure
 Improper Input Validation  		CVE-2017-9788 2024-11-21 12:36 2017-07-14 Show GitHub Exploit DB Packet Storm
247370 7.5 HIGH
Network 		sap netweaver disp+work 7400.12.21.30308 in SAP NetWeaver 7.40 allows remote attackers to cause a denial of service (resource consumption) via a crafted DIAG request, aka SAP Security Note 2405918. CWE-400
 Uncontrolled Resource Consumption 		CVE-2017-9845 2024-11-21 12:36 2017-07-13 Show GitHub Exploit DB Packet Storm