Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 14, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
258651 10 危険 オラクル - Oracle Sun Product Suite の Sun Ray Server Software コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-0888 2010-05-14 18:40 2010-04-13 Show GitHub Exploit DB Packet Storm
258652 5 警告 サン・マイクロシステムズ
Pidgin
レッドハット		 - Pidgin の gtkimhtml.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2010-0423 2010-05-14 18:39 2010-02-18 Show GitHub Exploit DB Packet Storm
258653 4.3 警告 サン・マイクロシステムズ
Pidgin
レッドハット		 - Pidgin の libpurple におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2010-0420 2010-05-14 18:38 2010-02-18 Show GitHub Exploit DB Packet Storm
258654 7.5 危険 Carnegie Mellon University (Project Cyrus)
アップル
サイバートラスト株式会社
サン・マイクロシステムズ
オラクル
レッドハット		 - Cyrus SASL ライブラリにおけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-0688 2010-05-14 18:37 2009-05-15 Show GitHub Exploit DB Packet Storm
258655 7.5 危険 サン・マイクロシステムズ
GNOME Project
レッドハット		 - Evolution Data Server (別名 evolution-data-server) における複数の整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2009-0587 2010-05-14 18:37 2009-03-14 Show GitHub Exploit DB Packet Storm
258656 5.8 警告 サン・マイクロシステムズ
GNOME Project
レッドハット		 - Evolution Data Server (別名 evolution-data-server) の ntlm_challenge 関数におけるプロセスメモリ情報の漏洩またはサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2009-0582 2010-05-14 18:37 2009-03-14 Show GitHub Exploit DB Packet Storm
258657 1.2 注意 日本電気
サイバートラスト株式会社
サン・マイクロシステムズ
ターボリナックス
OpenSSL Project
レッドハット		 - RSA key reconstruction vulnerability - CVE-2007-3108 2010-05-14 18:37 2007-08-16 Show GitHub Exploit DB Packet Storm
258658 5 警告 ヒューレット・パッカード
サイバートラスト株式会社
OpenSSL Project
ターボリナックス
レッドハット		 - OpenSSL の zlib_stateful_finish 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2009-4355 2010-05-13 17:21 2010-01-13 Show GitHub Exploit DB Packet Storm
258659 9.3 危険 日立 - XMAP3 における任意のコードが実行される脆弱性 CWE-noinfo
情報不足 		- 2010-05-13 15:14 2010-04-12 Show GitHub Exploit DB Packet Storm
258660 4.3 警告 オラクル - Oracle Industry Product Suite の Retail - Oracle Retail Plan In-Season コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-0863 2010-05-13 15:13 2010-04-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 14, 2026, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
256251 8.8 HIGH
Network 		we-con levi_studio_hmi_editor A Heap-Based Buffer Overflow issue was discovered in Wecon Technologies LEVI Studio HMI Editor before 1.8.1. This vulnerability causes a buffer overflow when a maliciously crafted project file is run… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2017-6037 2024-11-21 12:28 2017-04-27 Show GitHub Exploit DB Packet Storm
256252 8.8 HIGH
Network 		we-con levi_studio_hmi_editor A Stack-Based Buffer Overflow issue was discovered in Wecon Technologies LEVI Studio HMI Editor before 1.8.1. This vulnerability causes a buffer overflow, which could result in denial of service when… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2017-6035 2024-11-21 12:28 2017-04-27 Show GitHub Exploit DB Packet Storm
256253 7.5 HIGH
Network 		hyundaiusa blue_link A Use of Hard-Coded Cryptographic Key issue was discovered in Hyundai Motor America Blue Link 3.9.5 and 3.9.4. The application uses a hard-coded decryption password to protect sensitive user informat… CWE-798
 Use of Hard-coded Credentials 		CVE-2017-6054 2024-11-21 12:28 2017-04-26 Show GitHub Exploit DB Packet Storm
256254 3.7 LOW
Adjacent 		hyundaiusa blue_link A Man-in-the-Middle issue was discovered in Hyundai Motor America Blue Link 3.9.5 and 3.9.4. Communication channel endpoints are not verified, which may allow a remote attacker to access or influence… NVD-CWE-noinfo
CVE-2017-6052 2024-11-21 12:28 2017-04-26 Show GitHub Exploit DB Packet Storm
256255 4.6 MEDIUM
Physics 		oneplus oxygenos In OxygenOS before 4.0.3 on OnePlus 3 and 3T devices, an unauthorized attacker can cause a locked bootloader to partially dump the ciphertext content of an arbitrary partition (except 'keystore') by … CWE-476
 NULL Pointer Dereference 		CVE-2017-5625 2024-11-21 12:28 2017-04-26 Show GitHub Exploit DB Packet Storm
256256 7.5 HIGH
Network 		apache cxf Apache CXF's STSClient before 3.1.11 and 3.0.13 uses a flawed way of caching tokens that are associated with delegation tokens, which means that an attacker could craft a token which would return an … CWE-384
 Session Fixation 		CVE-2017-5656 2024-11-21 12:28 2017-04-19 Show GitHub Exploit DB Packet Storm
256257 5.3 MEDIUM
Network 		apache cxf JAX-RS XML Security streaming clients in Apache CXF before 3.1.11 and 3.0.13 do not validate that the service response was signed or encrypted, which allows remote attackers to spoof servers. CWE-295
Improper Certificate Validation  		CVE-2017-5653 2024-11-21 12:28 2017-04-19 Show GitHub Exploit DB Packet Storm
256258 7.3 HIGH
Network 		apache batik In Apache Batik before 1.9, files lying on the filesystem of the server which uses batik can be revealed to arbitrary users who send maliciously formed SVG files. The file types that can be shown dep… CWE-611
XXE 		CVE-2017-5662 2024-11-21 12:28 2017-04-18 Show GitHub Exploit DB Packet Storm
256259 7.3 HIGH
Network 		apache formatting_objects_processor In Apache FOP before 2.2, files lying on the filesystem of the server which uses FOP can be revealed to arbitrary users who send maliciously formed SVG files. The file types that can be shown depend … CWE-611
XXE 		CVE-2017-5661 2024-11-21 12:28 2017-04-18 Show GitHub Exploit DB Packet Storm
256260 9.8 CRITICAL
Network 		apache
netapp
redhat
oracle 		log4j
snapcenter
storage_automation_store
oncommand_workflow_automation
oncommand_insight
service_level_manager
oncommand_api_services
enterprise_linux_desktop
enterprise_linu… 		In Apache Log4j 2.x before 2.8.2, when using the TCP socket server or UDP socket server to receive serialized log events from another application, a specially crafted binary payload can be sent that,… CWE-502
 Deserialization of Untrusted Data 		CVE-2017-5645 2024-11-21 12:28 2017-04-18 Show GitHub Exploit DB Packet Storm