Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 10, 2026, 2 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
258081 2.1 注意 アドビシステムズ - Adobe ColdFusion における重要な情報を取得される脆弱性 CWE-200
CWE-noinfo
CVE-2010-1294 2010-06-2 12:14 2010-05-11 Show GitHub Exploit DB Packet Storm
258082 4.3 警告 アドビシステムズ - Adobe ColdFusion の Administrator ページにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-1293 2010-06-2 12:14 2010-05-11 Show GitHub Exploit DB Packet Storm
258083 4.3 警告 アドビシステムズ - Adobe ColdFusion におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-3467 2010-06-2 12:13 2010-05-11 Show GitHub Exploit DB Packet Storm
258084 9.3 危険 アドビシステムズ - Adobe Shockwave Player の pami RIFF chunk 構文解析における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2010-1292 2010-06-2 12:13 2010-05-11 Show GitHub Exploit DB Packet Storm
258085 9.3 危険 アドビシステムズ - Adobe Shockwave Player における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2010-1291 2010-06-2 12:13 2010-05-11 Show GitHub Exploit DB Packet Storm
258086 9.3 危険 アドビシステムズ - Adobe Shockwave Player における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2010-1290 2010-06-2 12:13 2010-05-11 Show GitHub Exploit DB Packet Storm
258087 9.3 危険 ジャストシステム - 一太郎シリーズにおける任意のコードが実行される脆弱性 CWE-noinfo
情報不足 		CVE-2010-2152 2010-06-1 16:01 2010-06-1 Show GitHub Exploit DB Packet Storm
258088 9.3 危険 アドビシステムズ - Adobe Shockwave Player における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2010-1289 2010-06-1 15:45 2010-05-11 Show GitHub Exploit DB Packet Storm
258089 9.3 危険 アドビシステムズ - Adobe Shockwave Player におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-1288 2010-06-1 15:45 2010-05-11 Show GitHub Exploit DB Packet Storm
258090 9.3 危険 アドビシステムズ - Adobe Shockwave Player における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2010-1287 2010-06-1 15:45 2010-05-11 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 10, 2026, 5 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
266051 5.4 MEDIUM
Network 		microsoft sharepoint_foundation Microsoft SharePoint Foundation 2013 SP1 allows an elevation of privilege vulnerability when it does not properly sanitize a specially crafted web request, aka "Microsoft SharePoint XSS Vulnerability… CWE-79
Cross-site Scripting 		CVE-2017-0255 2024-11-21 12:02 2017-05-12 Show GitHub Exploit DB Packet Storm
266052 7.5 HIGH
Network 		microsoft .net_framework Microsoft .NET Framework 2.0, 3.5, 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2 and 4.7 allow an attacker to bypass Enhanced Security Usage taggings when they present a certificate that is invalid for a specific … CWE-295
Improper Certificate Validation  		CVE-2017-0248 2024-11-21 12:02 2017-05-12 Show GitHub Exploit DB Packet Storm
266053 4.7 MEDIUM
Local 		microsoft windows_7
windows_server_2008
windows_server_2012 		The kernel-mode drivers in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1 and Windows Server 2012 Gold allow a local authenticated attacker to execute a specially crafted application to obtain ker… CWE-200
Information Exposure 		CVE-2017-0245 2024-11-21 12:02 2017-05-12 Show GitHub Exploit DB Packet Storm
266054 6.7 MEDIUM
Local 		microsoft windows_server_2008
windows_7 		The kernel in Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows locally authenticated attackers to gain privileges via a crafted application, or in Windows 7 for x64-based systems, cause d… NVD-CWE-noinfo
CVE-2017-0244 2024-11-21 12:02 2017-05-12 Show GitHub Exploit DB Packet Storm
266055 5.3 MEDIUM
Network 		microsoft microsoft.aspnetcore.mvc.formatters.json
microsoft.aspnetcore.mvc.cors
microsoft.aspnetcore.mvc.apiexplorer
microsoft.aspnetcore.mvc.localization
microsoft.aspnetcore.mvc.taghelpers
mi… 		A spoofing vulnerability exists when the ASP.NET Core fails to properly sanitize web requests. CWE-20
 Improper Input Validation  		CVE-2017-0256 2024-11-21 12:02 2017-05-12 Show GitHub Exploit DB Packet Storm
266056 7.8 HIGH
Local 		microsoft word
office_web_apps
office
sharepoint_server
word_rt
office_compatibility_pack
word_viewer 		Microsoft Word 2007, Office 2010 SP2, Word 2010 SP2, Office Compatibility Pack SP3, Office for Mac 2011, Office for Mac 2016, Microsoft Office Web Apps 2010 SP2, Office Web Apps Server 2013 SP1, Word… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2017-0254 2024-11-21 12:02 2017-05-12 Show GitHub Exploit DB Packet Storm
266057 7.3 HIGH
Network 		microsoft microsoft.aspnetcore.mvc.formatters.json
microsoft.aspnetcore.mvc.cors
microsoft.aspnetcore.mvc.apiexplorer
microsoft.aspnetcore.mvc.localization
microsoft.aspnetcore.mvc.taghelpers
mi… 		An elevation of privilege vulnerability exists when the ASP.NET Core fails to properly sanitize web requests. CWE-20
 Improper Input Validation  		CVE-2017-0249 2024-11-21 12:02 2017-05-12 Show GitHub Exploit DB Packet Storm
266058 7.5 HIGH
Network 		microsoft microsoft.aspnetcore.mvc.formatters.json
microsoft.aspnetcore.mvc.cors
microsoft.aspnetcore.mvc.apiexplorer
microsoft.aspnetcore.mvc.localization
microsoft.aspnetcore.mvc.taghelpers
mi… 		A denial of service vulnerability exists when the ASP.NET Core fails to properly validate web requests. NOTE: Microsoft has not commented on third-party claims that the issue is that the TextEncoder.… CWE-20
 Improper Input Validation  		CVE-2017-0247 2024-11-21 12:02 2017-05-12 Show GitHub Exploit DB Packet Storm
266059 7.0 HIGH
Local 		microsoft windows_rt_8.1
windows_server_2012
windows_server_2016
windows_7
windows_10
windows_8.1
windows_server_2008 		The Graphics Component in the kernel-mode drivers in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, … NVD-CWE-noinfo
CVE-2017-0246 2024-11-21 12:02 2017-05-12 Show GitHub Exploit DB Packet Storm
266060 5.5 MEDIUM
Local 		microsoft windows_server_2008
windows_7 		An information disclosure vulnerability exists in the way some ActiveX objects are instantiated, aka "Microsoft ActiveX Information Disclosure Vulnerability." CWE-200
Information Exposure 		CVE-2017-0242 2024-11-21 12:02 2017-05-12 Show GitHub Exploit DB Packet Storm