Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 21, 2026, 2 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
257741	6.8	警告	ICQ	-	ICQ 7のアップデートに検証不備の問題	CWE-94 コード・インジェクション	CVE-2011-0487	2011-02-4 14:14	2011-01-14	Show	GitHub Exploit DB Packet Storm

257742	-	-	Google	-	Google Chrome における複数の脆弱性	-	-	2011-02-4 14:11	2011-01-14	Show	GitHub Exploit DB Packet Storm

257743	5	警告	Wireshark	-	Wireshark の ASN.1 BER 解析部におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2011-0445	2011-02-4 14:09	2011-01-11	Show	GitHub Exploit DB Packet Storm

257744	6.9	警告	サイバートラスト株式会社 Python Software Foundation レッドハット	-	Python の PySys_SetArgv API 関数における任意のコードを実行される脆弱性	CWE-Other その他	CVE-2008-5983	2011-02-4 13:58	2009-04-14	Show	GitHub Exploit DB Packet Storm

257745	2.6	注意	サイバートラスト株式会社 FastJar レッドハット	-	FastJar の jartool.c 内にある extract_jar 関数におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2010-2322	2011-02-3 14:55	2010-06-18	Show	GitHub Exploit DB Packet Storm

257746	5.8	警告	サイバートラスト株式会社 FastJar レッドハット	-	FastJar の jartool.c 内にある extract_jar 関数におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2010-0831	2011-02-3 14:52	2010-06-18	Show	GitHub Exploit DB Packet Storm

257747	9.3	危険	アップルアドビシステムズレッドハットオラクル	-	Adobe Flash Player における任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2010-3652	2011-02-2 15:07	2010-11-4	Show	GitHub Exploit DB Packet Storm

257748	9.3	危険	アップルアドビシステムズレッドハットオラクル	-	Adobe Flash Player における任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2010-3650	2011-02-2 15:06	2010-11-4	Show	GitHub Exploit DB Packet Storm

257749	9.3	危険	アップルアドビシステムズレッドハットオラクル	-	Adobe Flash Player における任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2010-3649	2011-02-2 15:06	2010-11-4	Show	GitHub Exploit DB Packet Storm

257750	9.3	危険	アップルアドビシステムズレッドハットオラクル	-	Adobe Flash Player における任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2010-3648	2011-02-2 15:06	2010-11-4	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 21, 2026, 4:01 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
256421	7.5	HIGH Network	php	php	The _zval_get_long_func_ex in Zend/zend_operators.c in PHP 7.1.2 allows attackers to cause a denial of service (NULL pointer dereference and application crash) via crafted use of "declare(ticks=" in …	CWE-476 NULL Pointer Dereference	CVE-2017-6441	2024-11-21 12:29	2017-04-3	Show	GitHub Exploit DB Packet Storm

256422	7.8	HIGH Local	radare	radare2	The relocs function in libr/bin/p/bin_bflt.c in radare2 1.2.1 allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified othe…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2017-6194	2024-11-21 12:29	2017-04-3	Show	GitHub Exploit DB Packet Storm

256423	7.5	HIGH Network	ruby-lang	ruby	The parse_char_class function in regparse.c in the Onigmo (aka Oniguruma-mod) regular expression library, as used in Ruby 2.4.0, allows remote attackers to cause a denial of service (deep recursion a…	CWE-20 Improper Input Validation	CVE-2017-6181	2024-11-21 12:29	2017-04-3	Show	GitHub Exploit DB Packet Storm

256424	8.1	HIGH Network	sophos	web_appliance	In Sophos Web Appliance (SWA) before 4.3.1.2, Session Fixation could occur, aka NSWA-1310.	CWE-384 Session Fixation	CVE-2017-6412	2024-11-21 12:29	2017-03-31	Show	GitHub Exploit DB Packet Storm

256425	4.7	MEDIUM Network	sophos	web_appliance	In Sophos Web Appliance (SWA) before 4.3.1.2, a section of the machine's interface responsible for generating reports was vulnerable to remote command injection via the token parameter, aka NSWA-1303.	CWE-77 Command Injection	CVE-2017-6184	2024-11-21 12:29	2017-03-31	Show	GitHub Exploit DB Packet Storm

256426	7.2	HIGH Network	sophos	web_appliance	In Sophos Web Appliance (SWA) before 4.3.1.2, a section of the machine's configuration utilities for adding (and detecting) Active Directory servers was vulnerable to remote command injection, aka NS…	CWE-77 Command Injection	CVE-2017-6183	2024-11-21 12:29	2017-03-31	Show	GitHub Exploit DB Packet Storm

256427	9.8	CRITICAL Network	sophos	web_appliance	In Sophos Web Appliance (SWA) before 4.3.1.2, a section of the machine's interface responsible for generating reports was vulnerable to remote command injection via functions, aka NSWA-1304.	CWE-78 OS Command	CVE-2017-6182	2024-11-21 12:29	2017-03-31	Show	GitHub Exploit DB Packet Storm

256428	9.8	CRITICAL Network	putty opensuse_project opensuse	putty leap	The ssh_agent_channel_data function in PuTTY before 0.68 allows remote attackers to have unspecified impact via a large length value in an agent protocol message and leveraging the ability to connect…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2017-6542	2024-11-21 12:29	2017-03-28	Show	GitHub Exploit DB Packet Storm

256429	6.5	MEDIUM Network	ntp	ntp	NTP before 4.2.8p10 and 4.3.x before 4.3.94 allows remote attackers to cause a denial of service (ntpd crash) via a malformed mode configuration directive.	CWE-20 Improper Input Validation	CVE-2017-6464	2024-11-21 12:29	2017-03-28	Show	GitHub Exploit DB Packet Storm

256430	6.5	MEDIUM Network	ntp	ntp	NTP before 4.2.8p10 and 4.3.x before 4.3.94 allows remote authenticated users to cause a denial of service (daemon crash) via an invalid setting in a :config directive, related to the unpeer option.	CWE-20 Improper Input Validation	CVE-2017-6463	2024-11-21 12:29	2017-03-28	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed