Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 27, 2026, 2:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
256961	6.8	警告	サン・マイクロシステムズ	-	Sun Solaris の Trusted Extensions における権限昇格の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-0310	2010-02-10 13:38	2010-01-11	Show	GitHub Exploit DB Packet Storm

256962	7.1	危険	アップルアドビシステムズ	-	Windows 上で稼動する Adobe Flash Player および Adobe AIR の Flash Player の ActiveX コントロールにおけるローカルファイルのファイル名を取得される脆弱性	CWE-200 情報漏えい	CVE-2009-3951	2010-02-10 13:36	2009-12-8	Show	GitHub Exploit DB Packet Storm

256963	9.3	危険	アップルアドビシステムズサン・マイクロシステムズレッドハット	-	Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2009-3800	2010-02-10 13:36	2009-12-8	Show	GitHub Exploit DB Packet Storm

256964	9.3	危険	アップルアドビシステムズサン・マイクロシステムズレッドハット	-	Adobe Flash Player および Adobe AIR の Verifier::parseExceptionHandlers 関数における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2009-3799	2010-02-10 13:36	2009-12-8	Show	GitHub Exploit DB Packet Storm

256965	9.3	危険	アップルアドビシステムズサン・マイクロシステムズレッドハット	-	Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2009-3798	2010-02-10 13:35	2009-12-8	Show	GitHub Exploit DB Packet Storm

256966	9.3	危険	マイクロソフト	-	Microsoft Windows XP で提供される Adobe Flash Player 6 における任意のコードを実行される脆弱性	CWE-Other その他	CVE-2010-0378	2010-02-9 13:56	2010-01-12	Show	GitHub Exploit DB Packet Storm

256967	9.3	危険	マイクロソフト	-	Microsoft Windows の Embedded OpenType フォントエンジンにおける任意のコードを実行される脆弱性	CWE-189 数値処理の問題	CVE-2010-0018	2010-02-9 13:55	2010-01-12	Show	GitHub Exploit DB Packet Storm

256968	9.3	危険	サン・マイクロシステムズアドビシステムズ	-	Adobe Acrobat におけるファイル拡張子の制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2009-3461	2010-02-9 13:55	2009-10-13	Show	GitHub Exploit DB Packet Storm

256969	9.3	危険	サン・マイクロシステムズアドビシステムズ	-	Adobe Acrobat における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2009-3460	2010-02-9 13:55	2009-10-13	Show	GitHub Exploit DB Packet Storm

256970	4.3	警告	サン・マイクロシステムズアドビシステムズ	-	Adobe Acrobat におけるサービス運用妨害 (DoS) の脆弱性	CWE-189 数値処理の問題	CVE-2009-2995	2010-02-9 13:55	2009-10-13	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 27, 2026, 4:52 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
255201	7.5	HIGH Network	ncr	s1_dispenser_controller_firmware	Memory write mechanism in NCR S1 Dispenser controller before firmware version 0x0156 allows an unauthenticated user to upgrade or downgrade the firmware of the device, including to older versions wit…	CWE-863 Incorrect Authorization	CVE-2017-17668	2024-11-21 12:18	2018-03-20	Show	GitHub Exploit DB Packet Storm

255202	9.8	CRITICAL Network	qualcomm	mdm9206_firmware mdm9607_firmware mdm9650_firmware sd_210_firmware sd_212_firmware sd_412_firmware sd_410_firmware sd_425_firmware sd_430_firmware sd_616_firmware sd_615…	In Snapdragon Automobile, Snapdragon Wearable and Snapdragon Mobile MDM9206,MDM9607,MDM9650,SD 210/SD 212/SD 205,SD 400,SD 410/12,SD 425,SD 430,SD 450,SD 600,SD 602A,SD 615/16/SD 415,SD 617,SD 625,SD…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2017-17773	2024-11-21 12:18	2018-03-16	Show	GitHub Exploit DB Packet Storm

255203	4.8	MEDIUM Network	pega	pega_platform	An XSS issue was discovered in Designer Studio in Pegasystems Pega Platform 7.1.7, 7.1.8, 7.1.9, 7.1.10, 7.2, 7.2.1, and 7.2.2. A user with developer credentials can insert malicious code (up to 64 c…	CWE-79 Cross-site Scripting	CVE-2017-17478	2024-11-21 12:18	2018-02-28	Show	GitHub Exploit DB Packet Storm

255204	7.8	HIGH Local	google	android	In all Qualcomm products with Android releases from CAF using the Linux kernel, the IL client may free a buffer OMX Video Encoder Component and then subsequently access the already freed buffer.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2017-17767	2024-11-21 12:18	2018-02-24	Show	GitHub Exploit DB Packet Storm

255205	7.8	HIGH Local	google	android	In all Qualcomm products with Android releases from CAF using the Linux kernel, multiple values received from firmware are not properly validated in wma_get_ll_stats_ext_buf() and are used to allocat…	CWE-190 Integer Overflow or Wraparound	CVE-2017-17765	2024-11-21 12:18	2018-02-24	Show	GitHub Exploit DB Packet Storm

255206	7.8	HIGH Local	google	android	In all Qualcomm products with Android releases from CAF using the Linux kernel, the num_failure_info value from firmware is not properly validated in wma_rx_aggr_failure_event_handler() so that an in…	CWE-190 Integer Overflow or Wraparound	CVE-2017-17764	2024-11-21 12:18	2018-02-24	Show	GitHub Exploit DB Packet Storm

255207	6.5	MEDIUM Network	exiv2	exiv2	In Exiv2 0.26, there is an integer overflow leading to a heap-based buffer over-read in the Exiv2::getULong function in types.cpp. Remote attackers can exploit the vulnerability to cause a denial of …	CWE-190 Integer Overflow or Wraparound	CVE-2017-17725	2024-11-21 12:18	2018-02-13	Show	GitHub Exploit DB Packet Storm

255208	6.5	MEDIUM Network	exiv2	exiv2	In Exiv2 0.26, there is a heap-based buffer over-read in the Exiv2::IptcData::printStructure function in iptc.cpp, related to the "!= 0x1c" case. Remote attackers can exploit this vulnerability to ca…	CWE-125 Out-of-bounds Read	CVE-2017-17724	2024-11-21 12:18	2018-02-13	Show	GitHub Exploit DB Packet Storm

255209	8.1	HIGH Network	exiv2	exiv2	In Exiv2 0.26, there is a heap-based buffer over-read in the Exiv2::Image::byteSwap4 function in image.cpp. Remote attackers can exploit this vulnerability to disclose memory data or cause a denial o…	CWE-125 Out-of-bounds Read	CVE-2017-17723	2024-11-21 12:18	2018-02-13	Show	GitHub Exploit DB Packet Storm

255210	6.5	MEDIUM Network	exiv2	exiv2	In Exiv2 0.26, there is a reachable assertion in the readHeader function in bigtiffimage.cpp, which will lead to a remote denial of service attack via a crafted TIFF file.	CWE-617 Reachable Assertion	CVE-2017-17722	2024-11-21 12:18	2018-02-13	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed