Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 18, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
258451	6.8	警告	pon software	-	Archive Decoder における実行ファイル読み込みに関する脆弱性	CWE-Other その他	CVE-2010-3160	2010-10-20 14:03	2010-10-20	Show	GitHub Exploit DB Packet Storm

258452	5.1	警告	pon software	-	Explzh における実行ファイル読み込みに関する脆弱性	CWE-Other その他	CVE-2010-3159	2010-10-20 14:02	2010-10-20	Show	GitHub Exploit DB Packet Storm

258453	6.8	警告	サイバートラスト株式会社 FreeType Project ターボリナックスレッドハット	-	FreeType のデモプログラムにおけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-2527	2010-10-19 15:22	2010-07-12	Show	GitHub Exploit DB Packet Storm

258454	6.8	警告	サイバートラスト株式会社 FreeType Project ターボリナックスレッドハット	-	FreeType の ftmulti.c におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-2541	2010-10-19 15:20	2010-08-6	Show	GitHub Exploit DB Packet Storm

258455	7.5	危険	The PHP Group アップルターボリナックス	-	PHP の SplObjectStorage における重要な情報を取得される脆弱性	CWE-399 リソース管理の問題	CVE-2010-2225	2010-10-19 15:20	2010-06-24	Show	GitHub Exploit DB Packet Storm

258456	2.1	注意	The PHP Group サイバートラスト株式会社ターボリナックスレッドハット	-	PHP における同じ Web サーバ上でホストされた別サイトの振る舞いを変更される脆弱性	CWE-134 書式文字列の問題	CVE-2009-0754	2010-10-19 15:17	2009-03-3	Show	GitHub Exploit DB Packet Storm

258457	5	警告	The PHP Group アップルターボリナックスレッドハット	-	PHP の JSON_parser 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2009-1271	2010-10-19 15:16	2009-04-8	Show	GitHub Exploit DB Packet Storm

258458	7.5	危険	アップルサイバートラスト株式会社ターボリナックスサン・マイクロシステムズレッドハット	-	FreeType2 における一つずれエラーの脆弱性	CWE-189 数値処理の問題	CVE-2008-1808	2010-10-19 15:15	2008-06-17	Show	GitHub Exploit DB Packet Storm

258459	7.5	危険	アップルサイバートラスト株式会社ターボリナックスサン・マイクロシステムズレッドハット	-	FreeType2 におけるメモリ破壊の脆弱性	CWE-189 数値処理の問題	CVE-2008-1807	2010-10-19 15:15	2008-06-17	Show	GitHub Exploit DB Packet Storm

258460	7.5	危険	アップルサイバートラスト株式会社ターボリナックスサン・マイクロシステムズレッドハット	-	FreeType2 におけるヒープベースのバッファオーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2008-1806	2010-10-19 15:15	2008-06-17	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 18, 2026, 4 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
257101	8.8	HIGH Network	google debian	chrome debian_linux	A use after free in PDFium in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.	CWE-416 Use After Free	CVE-2017-5126	2024-11-21 12:27	2018-02-8	Show	GitHub Exploit DB Packet Storm

257102	8.8	HIGH Network	google debian	chrome debian_linux	Heap buffer overflow in Skia in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2017-5125	2024-11-21 12:27	2018-02-8	Show	GitHub Exploit DB Packet Storm

257103	6.1	MEDIUM Network	google debian	chrome debian_linux	Incorrect application of sandboxing in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted MHTML page.	CWE-79 Cross-site Scripting	CVE-2017-5124	2024-11-21 12:27	2018-02-8	Show	GitHub Exploit DB Packet Storm

257104	7.2	HIGH Network	moxa	softnvr-ia_live_view	An Uncontrolled Search Path Element issue was discovered in Moxa SoftNVR-IA Live Viewer, Version 3.30.3122 and prior versions. An uncontrolled search path element (DLL Hijacking) vulnerability has be…	CWE-427 Uncontrolled Search Path Element	CVE-2017-5170	2024-11-21 12:27	2018-01-19	Show	GitHub Exploit DB Packet Storm

257105	8.0	HIGH Adjacent	cambiumnetworks	cnpilot_r190v_firmware cnpilot_e410_firmware cnpilot_r190n_firmware cnpilot_e400_firmware cnpilot_e600_firmware	Versions 4.3.2-R4 and prior of Cambium Networks cnPilot firmware lack CSRF controls that can mitigate the effects of CSRF attacks, which are most typically implemented as randomized per-session token…	CWE-352 Origin Validation Error	CVE-2017-5263	2024-11-21 12:27	2017-12-21	Show	GitHub Exploit DB Packet Storm

257106	8.0	HIGH Adjacent	cambiumnetworks	cnpilot_r190v_firmware cnpilot_e410_firmware cnpilot_r190n_firmware cnpilot_e400_firmware cnpilot_e600_firmware	In versions 4.3.2-R4 and prior of Cambium Networks cnPilot firmware, the SNMP read-only (RO) community string has access to sensitive information by OID reference.	CWE-200 Information Exposure	CVE-2017-5262	2024-11-21 12:27	2017-12-21	Show	GitHub Exploit DB Packet Storm

257107	8.8	HIGH Network	cambiumnetworks	cnpilot_r190v_firmware cnpilot_e410_firmware cnpilot_r190n_firmware cnpilot_e400_firmware cnpilot_e600_firmware	In versions 4.3.2-R4 and prior of Cambium Networks cnPilot firmware, the 'ping' and 'traceroute' functions of the web administrative console expose a file path traversal vulnerability, accessible to …	CWE-22 Path Traversal	CVE-2017-5261	2024-11-21 12:27	2017-12-21	Show	GitHub Exploit DB Packet Storm

257108	8.8	HIGH Network	cambiumnetworks	cnpilot_r190v_firmware cnpilot_e410_firmware cnpilot_r190n_firmware cnpilot_e400_firmware cnpilot_e600_firmware	In versions 4.3.2-R4 and prior of Cambium Networks cnPilot firmware, an undocumented, root-privilege administration web shell is available using the HTTP path https://<device-ip-or-hostname>/adm/sysc…	CWE-319 Cleartext Transmission of Sensitive Information	CVE-2017-5259	2024-11-21 12:27	2017-12-21	Show	GitHub Exploit DB Packet Storm

257109	5.4	MEDIUM Network	cambiumnetworks	epmp_1000_firmware epmp_2000_firmware	In version 3.5 and prior of Cambium Networks ePMP firmware, an attacker who knows or can guess the RW community string can provide a URL for a configuration file over SNMP with XSS strings in certain…	CWE-79 Cross-site Scripting	CVE-2017-5258	2024-11-21 12:27	2017-12-21	Show	GitHub Exploit DB Packet Storm

257110	5.4	MEDIUM Network	cambiumnetworks	epmp_1000_firmware epmp_2000_firmware	In version 3.5 and prior of Cambium Networks ePMP firmware, an attacker who knows (or guesses) the SNMP read/write (RW) community string can insert XSS strings in certain SNMP OIDs which will execute…	CWE-79 Cross-site Scripting	CVE-2017-5257	2024-11-21 12:27	2017-12-21	Show	GitHub Exploit DB Packet Storm