Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 7, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
257711	9.3	危険	リアルネットワークス	-	Realnetworks RealPlayer における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2009-4246	2010-02-17 11:48	2010-01-19	Show	GitHub Exploit DB Packet Storm

257712	9.3	危険	レッドハットリアルネットワークス	-	Realnetworks RealPlayer の smlrender.dll における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2009-4257	2010-02-17 11:48	2010-01-19	Show	GitHub Exploit DB Packet Storm

257713	9.3	危険	レッドハットリアルネットワークス	-	Realnetworks RealPlayer におけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2009-4245	2010-02-17 11:48	2010-01-19	Show	GitHub Exploit DB Packet Storm

257714	9.3	危険	リアルネットワークス	-	Realnetworks RealPlayer における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2009-4244	2010-02-17 11:48	2010-01-19	Show	GitHub Exploit DB Packet Storm

257715	9.3	危険	リアルネットワークス	-	RealNetworks RealPlayer の DLL ファイルにおける任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2009-0376	2010-02-17 11:47	2010-01-19	Show	GitHub Exploit DB Packet Storm

257716	9.3	危険	リアルネットワークス	-	RealNetworks RealPlayer の DLL ファイルにおける任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2009-0375	2010-02-17 11:47	2010-01-19	Show	GitHub Exploit DB Packet Storm

257717	9.3	危険	リアルネットワークス	-	Realnetworks RealPlayer における HTTP のチャンク転送コーディングの処理に関する脆弱性	CWE-119 バッファエラー	CVE-2009-4243	2010-02-17 11:47	2010-01-19	Show	GitHub Exploit DB Packet Storm

257718	9.3	危険	レッドハットリアルネットワークス	-	Realnetworks RealPlayer における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2009-4242	2010-02-17 11:47	2010-01-19	Show	GitHub Exploit DB Packet Storm

257719	9.3	危険	リアルネットワークス	-	Realnetworks RealPlayer における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2009-4241	2010-02-17 11:46	2010-01-19	Show	GitHub Exploit DB Packet Storm

257720	4.4	警告	サイバートラスト株式会社 Linux レッドハット	-	Linux kernel の z90crypt ドライバにおける権限昇格の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2009-1883	2010-02-17 11:46	2009-09-15	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 7, 2026, 4:13 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
259201	5.4	MEDIUM Network	mapos_project	mapos	MapOS 3.1.11 and earlier has a Stored Cross-site Scripting (XSS) vulnerability in /clientes/visualizar, which allows remote attackers to inject arbitrary web script or HTML via a crafted description …	CWE-79 Cross-site Scripting	CVE-2017-16919	2024-11-21 12:17	2017-11-21	Show	GitHub Exploit DB Packet Storm

259202	9.8	CRITICAL Network	ffmpeg debian	ffmpeg debian_linux	The VC-2 Video Compression encoder in FFmpeg 3.0 and 3.4 allows remote attackers to cause a denial of service (out-of-bounds read) because of incorrect buffer padding for non-Haar wavelets, related t…	CWE-125 Out-of-bounds Read	CVE-2017-16840	2024-11-21 12:17	2017-11-21	Show	GitHub Exploit DB Packet Storm

259203	5.4	MEDIUM Network	horde	groupware	In Horde Groupware 5.2.19, there is XSS via the Name field during creation of a new Resource. This can be leveraged for remote code execution after compromising an administrator account, because the …	CWE-79 Cross-site Scripting	CVE-2017-16908	2024-11-21 12:17	2017-11-21	Show	GitHub Exploit DB Packet Storm

259204	5.4	MEDIUM Network	horde	groupware	In Horde Groupware 5.2.19 and 5.2.21, there is XSS via the Color field in a Create Task List action.	CWE-79 Cross-site Scripting	CVE-2017-16907	2024-11-21 12:17	2017-11-21	Show	GitHub Exploit DB Packet Storm

259205	5.4	MEDIUM Network	horde	groupware	In Horde Groupware 5.2.19-5.2.22, there is XSS via the URL field in a "Calendar -> New Event" action.	CWE-79 Cross-site Scripting	CVE-2017-16906	2024-11-21 12:17	2017-11-21	Show	GitHub Exploit DB Packet Storm

259206	6.1	MEDIUM Network	lvyecms_project	lvyecms	The Public tologin feature in admin.php in LvyeCMS through 3.1 allows XSS via a crafted username that is mishandled during later log viewing by an administrator.	CWE-79 Cross-site Scripting	CVE-2017-16904	2024-11-21 12:17	2017-11-21	Show	GitHub Exploit DB Packet Storm

259207	9.8	CRITICAL Network	lvyecms_project	lvyecms	LvyeCMS through 3.1 allows remote attackers to upload and execute arbitrary PHP code via directory traversal sequences in the dir parameter, in conjunction with PHP code in the content parameter, wit…	CWE-22 Path Traversal	CVE-2017-16903	2024-11-21 12:17	2017-11-21	Show	GitHub Exploit DB Packet Storm

259208	7.5	HIGH Network	vonage	vdv-23_firmware	On the Vonage VDV-23 115 3.2.11-0.9.40 home router, sending a long string of characters in the loginPassword and/or loginUsername field to goform/login causes the router to reboot.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2017-16902	2024-11-21 12:17	2017-11-21	Show	GitHub Exploit DB Packet Storm

259209	7.1	HIGH Local	xfig_project debian	xfig debian_linux	An array index error in the fig2dev program in Xfig 3.2.6a allows remote attackers to cause a denial-of-service attack or information disclosure with a maliciously crafted Fig format file, related to…	CWE-129 Improper Validation of Array Index	CVE-2017-16899	2024-11-21 12:17	2017-11-21	Show	GitHub Exploit DB Packet Storm

259210	5.5	MEDIUM Local	libming	libming	The printMP3Headers function in util/listmp3.c in libming v0.4.8 or earlier is vulnerable to a global buffer overflow, which may allow attackers to cause a denial of service via a crafted file, a dif…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2017-16898	2024-11-21 12:17	2017-11-21	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed