Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 29, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
257421	10	危険	マイクロソフト	-	Microsoft Windows の License Logging Server (llssrv.exe) における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2009-2523	2010-01-4 15:24	2009-11-10	Show	GitHub Exploit DB Packet Storm

257422	9.3	危険	マイクロソフト	-	Microsoft Windows の Web Services on Devices API (WSDAPI) における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2009-2512	2010-01-4 15:23	2009-11-10	Show	GitHub Exploit DB Packet Storm

257423	10	危険	アップル VMware サン・マイクロシステムズ	-	Sun Java SE の Provider クラスにおける詳細不明な脆弱性	CWE-noinfo 情報不足	CVE-2009-2722	2010-01-4 14:56	2009-08-10	Show	GitHub Exploit DB Packet Storm

257424	10	危険	アップル VMware サン・マイクロシステムズ	-	Sun Java SE の Provider クラスにおける詳細不明な脆弱性	CWE-noinfo 情報不足	CVE-2009-2723	2010-01-4 14:55	2009-08-10	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 29, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
257431	8.0	HIGH Adjacent	datto	windows_agent	Datto Windows Agent allows unauthenticated remote command execution via a modified command in conjunction with CVE-2017-16673 exploitation, aka an attack with a malformed primary whitelisted command …	NVD-CWE-noinfo	CVE-2017-16674	2024-11-21 12:16	2017-11-9	Show	GitHub Exploit DB Packet Storm

257432	5.3	MEDIUM Adjacent	datto	backup_agent	Datto Backup Agent 1.0.6.0 and earlier does not authenticate incoming connections. This allows an attacker to impersonate a Datto Backup Appliance to "pair" with the agent and issue requests to this …	CWE-200 Information Exposure	CVE-2017-16673	2024-11-21 12:16	2017-11-9	Show	GitHub Exploit DB Packet Storm

257433	5.9	MEDIUM Network	digium	asterisk certified_asterisk	An issue was discovered in Asterisk Open Source 13 before 13.18.1, 14 before 14.7.1, and 15 before 15.1.1 and Certified Asterisk 13.13 before 13.13-cert7. A memory leak occurs when an Asterisk pjsip …	CWE-772 Missing Release of Resource after Effective Lifetime	CVE-2017-16672	2024-11-21 12:16	2017-11-9	Show	GitHub Exploit DB Packet Storm

257434	8.8	HIGH Network	digium	asterisk certified_asterisk	A Buffer Overflow issue was discovered in Asterisk Open Source 13 before 13.18.1, 14 before 14.7.1, and 15 before 15.1.1 and Certified Asterisk 13.13 before 13.13-cert7. No size checking is done when…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2017-16671	2024-11-21 12:16	2017-11-9	Show	GitHub Exploit DB Packet Storm

257435	8.8	HIGH Network	graphicsmagick debian	graphicsmagick debian_linux	coders/wpg.c in GraphicsMagick 1.3.26 allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted f…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2017-16669	2024-11-21 12:16	2017-11-9	Show	GitHub Exploit DB Packet Storm

257436	7.8	HIGH Local	backintime_project	backintime	backintime (aka Back in Time) before 1.1.24 did improper escaping/quoting of file paths used as arguments to the 'notify-send' command, leading to some parts of file paths being executed as shell com…	CWE-78 OS Command	CVE-2017-16667	2024-11-21 12:16	2017-11-9	Show	GitHub Exploit DB Packet Storm

257437	6.1	MEDIUM Network	remobjects	remoting_sdk_9	RemObjects Remoting SDK 9 1.0.0.0 for Delphi is vulnerable to a reflected Cross Site Scripting (XSS) attack via the service parameter to the /soap URI, triggering an invalid attempt to generate WSDL.	CWE-79 Cross-site Scripting	CVE-2017-16665	2024-11-21 12:16	2017-11-9	Show	GitHub Exploit DB Packet Storm

257438	5.5	MEDIUM Local	sam2p_project	sam2p	In sam2p 0.49.4, there are integer overflows (with resultant heap-based buffer overflows) in input-bmp.ci in the function ReadImage, because "width * height" multiplications occur unsafely.	CWE-190 Integer Overflow or Wraparound	CVE-2017-16663	2024-11-21 12:16	2017-11-8	Show	GitHub Exploit DB Packet Storm

257439	4.9	MEDIUM Network	cacti	cacti	Cacti 1.1.27 allows remote authenticated administrators to read arbitrary files by placing the Log Path into a private directory, and then making a clog.php?filename= request, as demonstrated by file…	CWE-200 Information Exposure	CVE-2017-16661	2024-11-21 12:16	2017-11-8	Show	GitHub Exploit DB Packet Storm

257440	7.2	HIGH Network	cacti	cacti	Cacti 1.1.27 allows remote authenticated administrators to conduct Remote Code Execution attacks by placing the Log Path under the web root, and then making a remote_agent.php request containing PHP …	CWE-668 Exposure of Resource to Wrong Sphere	CVE-2017-16660	2024-11-21 12:16	2017-11-8	Show	GitHub Exploit DB Packet Storm