Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 14, 2026, noon

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
258341	4.7	警告	オラクル	-	Oracle Solaris における TCP/IP の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2010-2394	2010-08-3 19:20	2010-07-13	Show	GitHub Exploit DB Packet Storm

258342	4.9	警告	オラクル	-	Oracle Solaris における GigaSwift Ethernet ドライバの処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2010-2386	2010-08-3 19:20	2010-07-13	Show	GitHub Exploit DB Packet Storm

258343	5.6	警告	オラクル	-	Oracle Solaris における ZFS の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2010-2392	2010-08-3 19:20	2010-07-13	Show	GitHub Exploit DB Packet Storm

258344	6.2	警告	オラクル	-	Oracle Solaris における rdist の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2010-0916	2010-08-3 19:20	2010-07-13	Show	GitHub Exploit DB Packet Storm

258345	7.5	危険	OpenBSD FreeBSD オラクル NetBSD	-	複数の製品の ftpd におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2008-4247	2010-08-3 19:19	2008-09-25	Show	GitHub Exploit DB Packet Storm

258346	7.5	危険	ターボリナックス MySQL AB	-	MySQL で使用される yaSSL における複数のスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2009-4484	2010-08-3 18:59	2009-12-30	Show	GitHub Exploit DB Packet Storm

258347	2.1	注意	オラクル	-	Oracle Database Server の Export コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0901	2010-08-2 19:32	2010-07-13	Show	GitHub Exploit DB Packet Storm

258348	2.6	注意	オラクル	-	Windows 上で稼働する Oracle Database Server の Network Layer コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0900	2010-08-2 19:32	2010-07-13	Show	GitHub Exploit DB Packet Storm

258349	4.3	警告	オラクル	-	Oracle Database Server の Application Express コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0892	2010-08-2 19:32	2010-07-13	Show	GitHub Exploit DB Packet Storm

258350	6	警告	オラクル	-	Oracle Database Server の Oracle OLAP コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0902	2010-08-2 19:31	2010-07-13	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 14, 2026, 4:12 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
264001	8.8	HIGH Network	imagemagick	imagemagick	ImageMagick 7.0.6-1 has a memory leak vulnerability in ReadMATImage in coders\mat.c.	CWE-772 Missing Release of Resource after Effective Lifetime	CVE-2017-12667	2024-11-21 12:10	2017-08-8	Show	GitHub Exploit DB Packet Storm

264002	7.8	HIGH Local	ultraedit	ultraedit	An issue was discovered in IDM UltraEdit through 24.10.0.32. To exploit the vulnerability, on unpatched Windows systems, an attacker could include in the same directory as the affected executable a D…	CWE-426 Untrusted Search Path	CVE-2017-12580	2024-11-21 12:09	2020-03-3	Show	GitHub Exploit DB Packet Storm

264003	9.8	CRITICAL Network	libpng netapp	libpng active_iq_unified_manager	libpng before 1.6.32 does not properly check the length of chunks against the user limit.	CWE-20 Improper Input Validation	CVE-2017-12652	2024-11-21 12:09	2019-07-11	Show	GitHub Exploit DB Packet Storm

264004	8.1	HIGH Network	apache	zeppelin	Apache Zeppelin prior to 0.7.3 was vulnerable to session fixation which allowed an attacker to hijack a valid user session. Issue was reported by "stone lone".	CWE-384 Session Fixation	CVE-2017-12619	2024-11-21 12:09	2019-04-24	Show	GitHub Exploit DB Packet Storm

264005	7.8	HIGH Local	gnome	gdk-pixbuf nautilus	GdkPixBuf (aka gdk-pixbuf), possibly 2.32.2, as used by GNOME Nautilus 3.14.3 on Ubuntu 16.04, allows attackers to cause a denial of service (stack corruption) or possibly have unspecified other impa…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2017-12447	2024-11-21 12:09	2019-03-8	Show	GitHub Exploit DB Packet Storm

264006	9.8	CRITICAL Network	planex	cs-qr20_firmware smacam_night_vision	An issue was discovered on the PLANEX CS-QR20 1.30. A hardcoded account / password ("admin:password") is used in the Android application that allows attackers to use a hidden API URL "/goform/SystemC…	CWE-798 Use of Hard-coded Credentials	CVE-2017-12577	2024-11-21 12:09	2018-08-25	Show	GitHub Exploit DB Packet Storm

264007	7.2	HIGH Network	planex	cs-qr20_firmware	An issue was discovered on the PLANEX CS-QR20 1.30. A hidden and undocumented management page allows an attacker to execute arbitrary code on the device when the user is authenticated. The management…	CWE-668 Exposure of Resource to Wrong Sphere	CVE-2017-12576	2024-11-21 12:09	2018-08-25	Show	GitHub Exploit DB Packet Storm

264008	7.5	HIGH Network	aterm	wg2600hp2_firmware	An issue was discovered on the NEC Aterm WG2600HP2 1.0.2. The router has a set of web service APIs for access to and setup of the configuration. Some APIs don't require authentication. An attacker co…	CWE-306 Missing Authentication for Critical Function	CVE-2017-12575	2024-11-21 12:09	2018-08-25	Show	GitHub Exploit DB Packet Storm

264009	9.8	CRITICAL Network	planex	cs-w50hd_firmware	An issue was discovered on PLANEX CS-W50HD devices with firmware before 030720. A hardcoded credential "supervisor:dangerous" was injected into web authentication database "/.htpasswd" during booting…	CWE-798 Use of Hard-coded Credentials	CVE-2017-12574	2024-11-21 12:09	2018-08-25	Show	GitHub Exploit DB Packet Storm

264010	8.8	HIGH Network	planex	cs-w50hd_firmware	An issue was discovered on PLANEX CS-W50HD devices with firmware before 030720. The device has a command-injection vulnerability in the web management UI on NAS settings page "/cgi-bin/nasset.cgi". A…	NVD-CWE-noinfo	CVE-2017-12573	2024-11-21 12:09	2018-08-25	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed