Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 23, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
260261	7.5	危険	Heartlogic	-	HL-SiteManager における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-1331	2010-04-2 15:02	2010-04-2	Show	GitHub Exploit DB Packet Storm

260262	9.3	危険	Mozilla Foundation	-	Mozilla Firefox の Web Open Fonts Format デコーダにおける整数オーバーフローの脆弱性	CWE-noinfo 情報不足	CVE-2010-1028	2010-04-2 14:05	2010-03-19	Show	GitHub Exploit DB Packet Storm

260263	5	警告	富士通アクセラテクノロジ	-	Accela BizSearch のローカル収集におけるアクセス権限に関する脆弱性	CWE-200 情報漏えい	-	2010-04-2 14:05	2010-03-10	Show	GitHub Exploit DB Packet Storm

260264	1.9	注意	サイバートラスト株式会社 Linux レッドハット	-	Linux kernel における SCSI ホストの属性に任意の変更を加えられる脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2009-3556	2010-04-2 14:02	2010-01-19	Show	GitHub Exploit DB Packet Storm

260265	10	危険	サイバートラスト株式会社 Linux レッドハット	-	Linux kernel の e1000e ドライバにおけるイーサネットフレームの処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2009-4538	2010-04-2 14:02	2010-01-12	Show	GitHub Exploit DB Packet Storm

260266	6.6	警告	サイバートラスト株式会社 Linux レッドハット	-	Linux kernel の poll_mode_io ファイルにおけるドライバの I/O モードを変更される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2009-3939	2010-04-2 14:00	2009-11-16	Show	GitHub Exploit DB Packet Storm

260267	6.6	警告	サイバートラスト株式会社 Linux レッドハット	-	Linux kernel におけるドライバの動作およびログレベルを変更される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2009-3889	2010-04-2 14:00	2009-11-16	Show	GitHub Exploit DB Packet Storm

260268	7.8	危険	サイバートラスト株式会社 Linux レッドハット	-	Linux kernel の hfs サブシステムにおけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2009-4020	2010-04-2 13:59	2009-12-4	Show	GitHub Exploit DB Packet Storm

260269	4.7	警告	サイバートラスト株式会社 Linux レッドハット	-	Linux kernel の drivers/firewire/ohci.c におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2009-4138	2010-04-2 13:58	2009-12-16	Show	GitHub Exploit DB Packet Storm

260270	4.9	警告	サイバートラスト株式会社 Linux レッドハット	-	Linux kernel の fuse_direct_io 関数におけるサービス運用妨害 (DoS)の脆弱性	CWE-399 リソース管理の問題	CVE-2009-4021	2010-04-2 13:58	2009-11-25	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 24, 2026, 4 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
253271	6.5	MEDIUM Adjacent	juniper	junos	A specially crafted MPLS packet received or processed by the system, on an interface configured with MPLS, will store information in the system memory. Subsequently, if this stored information is acc…	NVD-CWE-noinfo	CVE-2018-0003	2024-11-21 12:37	2018-01-11	Show	GitHub Exploit DB Packet Storm

253272	5.9	MEDIUM Network	juniper	junos	On SRX Series and MX Series devices with a Service PIC with any ALG enabled, a crafted TCP/IP response packet processed through the device results in memory corruption leading to a flowd daemon crash…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2018-0002	2024-11-21 12:37	2018-01-11	Show	GitHub Exploit DB Packet Storm

253273	9.8	CRITICAL Network	juniper	junos	A remote, unauthenticated attacker may be able to execute code by exploiting a use-after-free defect found in older versions of PHP through injection of crafted data via specific PHP URLs within the …	CWE-416 Use After Free	CVE-2018-0001	2024-11-21 12:37	2018-01-11	Show	GitHub Exploit DB Packet Storm

253274	7.5	HIGH Network	cisco	node-jose	A vulnerability in the Cisco node-jose open source library before 0.11.0 could allow an unauthenticated, remote attacker to re-sign tokens using a key that is embedded within the token. The vulnerabi…	CWE-347 Improper Verification of Cryptographic Signature	CVE-2018-0114	2024-11-21 12:37	2018-01-4	Show	GitHub Exploit DB Packet Storm

253275	9.6	CRITICAL Network	cisco	webex_meetings_server webex_meetings webex_business_suite webex_network_recording_player	A vulnerability in Cisco WebEx Network Recording Player for Advanced Recording Format (ARF) files could allow a remote attacker to execute arbitrary code on the system of a targeted user. The attacke…	CWE-20 Improper Input Validation	CVE-2018-0104	2024-11-21 12:37	2018-01-4	Show	GitHub Exploit DB Packet Storm

253276	7.8	HIGH Local	cisco	webex_meetings_server webex_meetings webex_business_suite webex_network_recording_player	A Buffer Overflow vulnerability in Cisco WebEx Network Recording Player for Advanced Recording Format (ARF) files could allow a local attacker to execute arbitrary code on the system of a user. The a…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2018-0103	2024-11-21 12:37	2018-01-4	Show	GitHub Exploit DB Packet Storm

253277	7.1	HIGH Network	schneider-electric	pelco_videoxpert	A privilege escalation vulnerability exists in Schneider Electric's Pelco VideoXpert Enterprise versions 2.0 and prior. By replacing certain files, an unauthorized user can obtain system privileges a…	NVD-CWE-noinfo	CVE-2017-9966	2024-11-21 12:37	2018-01-2	Show	GitHub Exploit DB Packet Storm

253278	5.8	MEDIUM Network	schneider-electric	pelco_videoxpert	An exposure of sensitive information vulnerability exists in Schneider Electric's Pelco VideoXpert Enterprise versions 2.0 and prior. Using a directory traversal attack, an unauthorized person can vi…	CWE-22 Path Traversal	CVE-2017-9965	2024-11-21 12:37	2018-01-2	Show	GitHub Exploit DB Packet Storm

253279	6.9	MEDIUM Network	schneider-electric	pelco_videoxpert	A Path Traversal issue was discovered in Schneider Electric Pelco VideoXpert Enterprise all versions prior to 2.1. By sniffing communications, an unauthorized person can execute a directory traversal…	CWE-22 Path Traversal	CVE-2017-9964	2024-11-21 12:37	2018-01-2	Show	GitHub Exploit DB Packet Storm

253280	9.8	CRITICAL Network	siemens	7kt_pac1200_data_manager_firmware	A vulnerability has been identified in Siemens 7KT PAC1200 data manager (7KT1260) in all versions < V2.03. The integrated web server (port 80/tcp) of the affected devices could allow an unauthenticat…	CWE-269 Improper Privilege Management	CVE-2017-9944	2024-11-21 12:37	2017-12-28	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed