Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 4, 2026, 4 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
257201	8.5	危険	VMware	-	複数の VMware 製品の VMware Tools における権限昇格の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-1142	2010-05-7 17:24	2010-04-9	Show	GitHub Exploit DB Packet Storm

257202	8.5	危険	VMware	-	複数の VMware 製品の VMware Tools における任意のコードを実行される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-1141	2010-05-7 17:24	2010-04-9	Show	GitHub Exploit DB Packet Storm

257203	5	警告	アップルサイバートラスト株式会社レッドハットターボリナックス CUPS	-	CUPS の ippReadIO 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2009-0949	2010-05-7 16:55	2009-06-3	Show	GitHub Exploit DB Packet Storm

257204	6.8	警告	レッドハットサイバートラスト株式会社ターボリナックス CUPS	-	CUPS の TIFF イメージデコーディングルーチンにおける整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2009-0163	2010-05-7 16:51	2009-04-16	Show	GitHub Exploit DB Packet Storm

257205	4.6	警告	GNU Project サイバートラスト株式会社レッドハット	-	GNU cpio における大きなサイズのファイル処理によるバッファーオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2005-4268	2010-05-7 16:51	2005-12-15	Show	GitHub Exploit DB Packet Storm

257206	4.3	警告	日本電気 Apache Software Foundation	-	Apache Xerces C++ におけるサービス運用妨害 (DoS) の脆弱性	CWE-119 バッファエラー	CVE-2009-1885	2010-05-6 13:47	2009-08-6	Show	GitHub Exploit DB Packet Storm

257207	6.4	警告	アップルターボリナックス CUPS	-	CUPS における DNS リバインド攻撃を誘導される脆弱性	CWE-20 不適切な入力確認	CVE-2009-0164	2010-05-6 13:46	2009-04-24	Show	GitHub Exploit DB Packet Storm

257208	5	警告	freedesktop.org 日本電気サイバートラスト株式会社レッドハット	-	JBIG2 デコーダにおける SplashBitmap に関連する整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2009-1188	2010-05-6 13:46	2009-04-23	Show	GitHub Exploit DB Packet Storm

257209	5	警告	freedesktop.org 日本電気サイバートラスト株式会社レッドハット	-	JBIG2 デコーダにおける CairoOutputDev に関連する整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2009-1187	2010-05-6 13:46	2009-04-23	Show	GitHub Exploit DB Packet Storm

257210	9.3	危険	アドビシステムズレッドハット	-	Adobe Reader および Acrobat の custom heap management system におけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-1241	2010-04-30 10:26	2010-04-5	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 5, 2026, 4:11 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
256371	6.7	MEDIUM Local	ibm	rational_publishing_engine	IBM Publishing Engine 2.1.2 and 6.0.5 contains an undisclosed vulnerability that could allow a local user with administrative privileges to obtain hard coded user credentials. IBM X-Force ID: 137022.	CWE-798 Use of Hard-coded Credentials	CVE-2017-1787	2024-11-21 12:22	2018-03-3	Show	GitHub Exploit DB Packet Storm

256372	3.3	LOW Local	ibm	spectrum_scale general_parallel_file_system	IBM Spectrum Scale 4.1.1 and 4.2.0 - 4.2.3 could allow a local unprivileged user access to information located in dump files. User data could be sent to IBM during service engagements. IBM X-Force ID…	CWE-200 Information Exposure	CVE-2017-1654	2024-11-21 12:22	2018-03-3	Show	GitHub Exploit DB Packet Storm

256373	5.3	MEDIUM Network	ibm	security_guardium_big_data_intelligence	IBM Security Guardium Big Data Intelligence (SonarG) 3.1 discloses sensitive information to unauthorized users. The information can be used to mount further attacks on the system. IBM X-Force ID: 136…	CWE-200 Information Exposure	CVE-2017-1774	2024-11-21 12:22	2018-02-26	Show	GitHub Exploit DB Packet Storm

256374	5.4	MEDIUM Network	ibm	maximo_anywhere	IBM Maximo Anywhere 7.5 and 7.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potent…	CWE-79 Cross-site Scripting	CVE-2017-1604	2024-11-21 12:22	2018-02-22	Show	GitHub Exploit DB Packet Storm

256375	7.1	HIGH Network	ibm	financial_transaction_manager transformation_extender_advanced control_center	IBM Financial Transaction Manager for ACH Services for Multi-Platform (IBM Control Center 6.0 and 6.1, IBM Financial Transaction Manager 3.0.2, 3.0.3, 3.0.4, and 3.1.0, IBM Transformation Extender Ad…	CWE-611 XXE	CVE-2017-1758	2024-11-21 12:22	2018-02-22	Show	GitHub Exploit DB Packet Storm

256376	5.4	MEDIUM Network	ibm	connections	IBM Connections 4.0, 4.5, 5.0, 5.5, and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended function…	CWE-79 Cross-site Scripting	CVE-2017-1682	2024-11-21 12:22	2018-02-15	Show	GitHub Exploit DB Packet Storm

256377	5.3	MEDIUM Local	ibm	notes client_application_access	IBM Notes 8.5 and 9.0 could allow a local attacker to execute arbitrary commands by carefully crafting a command line sent via the shared memory IPC. IBM X-Force ID: 134807.	CWE-77 Command Injection	CVE-2017-1720	2024-11-21 12:22	2018-02-14	Show	GitHub Exploit DB Packet Storm

256378	7.8	HIGH Local	ibm	notes client_application_access	IBM Notes and Domino NSD 8.5 and 9.0 could allow an authenticated local user without administrative privileges to gain System privilege. IBM X-Force ID: 134633.	NVD-CWE-noinfo	CVE-2017-1714	2024-11-21 12:22	2018-02-14	Show	GitHub Exploit DB Packet Storm

256379	7.8	HIGH Local	ibm	notes client_application_access	IBM iNotes 8.5 and 9.0 SUService can be misguided into running malicious code from a DLL masquerading as a windows DLL in the temp directory. IBM X-Force ID: 134532.	CWE-426 Untrusted Search Path	CVE-2017-1711	2024-11-21 12:22	2018-02-14	Show	GitHub Exploit DB Packet Storm

256380	6.1	MEDIUM Network	ibm	websphere_portal	IBM WebSphere Portal 7.0, 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended function…	CWE-79 Cross-site Scripting	CVE-2017-1761	2024-11-21 12:22	2018-02-10	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed