Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 19, 2026, 12:01 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
258821 6.8 警告 アップル
サイバートラスト株式会社
LibTIFF
レッドハット
- LibTIFF の FAX3 デコーダの Fax3SetupState 関数における整数オーバーフローの脆弱性 CWE-189
数値処理の問題
CVE-2010-1411 2010-08-24 13:44 2010-06-10 Show GitHub Exploit DB Packet Storm
258822 2.6 注意 アップル - Apple Safari の AutoFill 機能におけるアドレスブックカードの情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2010-1796 2010-08-20 18:24 2010-07-30 Show GitHub Exploit DB Packet Storm
258823 4.3 警告 アップル - Apple Safari におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-1778 2010-08-20 18:24 2010-07-30 Show GitHub Exploit DB Packet Storm
258824 7.5 危険 金子 勇 - Winny におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2010-2360 2010-08-20 12:02 2010-08-20 Show GitHub Exploit DB Packet Storm
258825 7.5 危険 金子 勇 - Winny におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2010-2360 2010-08-20 12:02 2010-08-20 Show GitHub Exploit DB Packet Storm
258826 5 警告 金子 勇 - Winny におけるノード情報の処理に関する脆弱性 CWE-Other
その他
CVE-2010-2362 2010-08-20 12:01 2010-08-20 Show GitHub Exploit DB Packet Storm
258827 5 警告 金子 勇 - Winny における BBS 情報の処理に関する脆弱性 CWE-Other
その他
CVE-2010-2361 2010-08-20 12:01 2010-08-20 Show GitHub Exploit DB Packet Storm
258828 10 危険 シマンテック
IBM
- Autonomy KeyView Filter SDK の kvolefio.dll における整数オーバーフローの脆弱性 CWE-189
数値処理の問題
CVE-2009-3032 2010-08-19 18:22 2010-03-5 Show GitHub Exploit DB Packet Storm
258829 5 警告 The PHP Group - PHP の phar 拡張における重要な情報を取得される脆弱性 CWE-134
書式文字列の問題
CVE-2010-2094 2010-08-18 18:26 2010-05-14 Show GitHub Exploit DB Packet Storm
258830 7.5 危険 The PHP Group - PHP の sqlite_single_query および sqlite_array_query 関数における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2010-1868 2010-08-18 18:26 2010-05-7 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 19, 2026, 4:01 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
264381 9.8 CRITICAL
Network
tcpdump tcpdump Several protocol parsers in tcpdump before 4.9.2 could cause a buffer over-read in addrtoname.c:lookup_bytestring(). CWE-125
Out-of-bounds Read
CVE-2017-12894 2024-11-21 12:10 2017-09-14 Show GitHub Exploit DB Packet Storm
264382 9.8 CRITICAL
Network
tcpdump tcpdump The SMB/CIFS parser in tcpdump before 4.9.2 has a buffer over-read in smbutil.c:name_len(). CWE-125
Out-of-bounds Read
CVE-2017-12893 2024-11-21 12:10 2017-09-14 Show GitHub Exploit DB Packet Storm
264383 9.8 CRITICAL
Network
opwglobal sitesentinel_isite_atg_firmware
sitesentinel_integra_500_firmware
sitesentinel_integra_100_firmware
A Missing Authentication for Critical Function issue was discovered in OPW Fuel Management Systems SiteSentinel Integra 100, SiteSentinel Integra 500, and SiteSentinel iSite ATG consoles with the fol… CWE-306
Missing Authentication for Critical Function
CVE-2017-12733 2024-11-21 12:10 2017-09-9 Show GitHub Exploit DB Packet Storm
264384 9.8 CRITICAL
Network
opwglobal sitesentinel_isite_atg_firmware
sitesentinel_integra_500_firmware
sitesentinel_integra_100_firmware
A SQL Injection issue was discovered in OPW Fuel Management Systems SiteSentinel Integra 100, SiteSentinel Integra 500, and SiteSentinel iSite ATG consoles with the following software versions: older… CWE-89
SQL Injection
CVE-2017-12731 2024-11-21 12:10 2017-09-9 Show GitHub Exploit DB Packet Storm
264385 7.1 HIGH
Local
azeotech daqfactory An Incorrect Default Permissions issue was discovered in AzeoTech DAQFactory versions prior to 17.1. Local, non-administrative users may be able to replace or modify original application files with m… CWE-276
Incorrect Default Permissions 
CVE-2017-12699 2024-11-21 12:10 2017-09-9 Show GitHub Exploit DB Packet Storm
264386 5.5 MEDIUM
Local
mp3gain mp3gain The "mpglibDBL/layer3.c" file in MP3Gain 1.5.2.r2 has a vulnerability which results in a read access violation when opening a crafted MP3 file. CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2017-12912 2024-11-21 12:10 2017-09-7 Show GitHub Exploit DB Packet Storm
264387 5.5 MEDIUM
Local
mp3gain mp3gain The "apetag.c" file in MP3Gain 1.5.2.r2 has a vulnerability which results in a stack memory corruption when opening a crafted MP3 file. CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2017-12911 2024-11-21 12:10 2017-09-7 Show GitHub Exploit DB Packet Storm
264388 6.1 MEDIUM
Network
nexusphp_project nexusphp Multiple cross-site scripting (XSS) vulnerabilities in NexusPHP allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to (1) cheaters.php or (2) confirm_resend.php. CWE-79
Cross-site Scripting
CVE-2017-12906 2024-11-21 12:10 2017-09-7 Show GitHub Exploit DB Packet Storm
264389 8.8 HIGH
Network
nexusphp_project nexusphp Cross-site request forgery (CSRF) vulnerability in NexusPHP 1.5 allows remote attackers to hijack the authentication of users for requests that (1) send manas via a request to mybonus.php or (2) add … CWE-352
 Origin Validation Error
CVE-2017-12838 2024-11-21 12:10 2017-09-7 Show GitHub Exploit DB Packet Storm
264390 6.1 MEDIUM
Network
djangoproject django In Django 1.10.x before 1.10.8 and 1.11.x before 1.11.5, HTML autoescaping was disabled in a portion of the template for the technical 500 debug page. Given the right circumstances, this allowed a cr… CWE-79
Cross-site Scripting
CVE-2017-12794 2024-11-21 12:10 2017-09-7 Show GitHub Exploit DB Packet Storm