Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
251671 9.3 危険 マイクロソフト - Microsoft Office PowerPoint におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-0029 2010-03-2 11:26 2010-02-9 Show GitHub Exploit DB Packet Storm
251672 10 危険 マイクロソフト - Microsoft Office の MSO.DLL におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-0243 2010-03-1 11:37 2010-02-9 Show GitHub Exploit DB Packet Storm
251673 9.3 危険 マイクロソフト - Microsoft DirectX の DirectShow におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-0250 2010-03-1 11:36 2010-02-9 Show GitHub Exploit DB Packet Storm
251674 7.8 危険 マイクロソフト - Microsoft Windows の TCP/IP 実装におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2010-0242 2010-03-1 11:36 2010-02-9 Show GitHub Exploit DB Packet Storm
251675 10 危険 マイクロソフト - Microsoft Windows の TCP/IP 実装における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2010-0241 2010-03-1 11:36 2010-02-9 Show GitHub Exploit DB Packet Storm
251676 10 危険 マイクロソフト - Microsoft Windows の TCP/IP 実装における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2010-0240 2010-03-1 11:36 2010-02-9 Show GitHub Exploit DB Packet Storm
251677 10 危険 マイクロソフト - Microsoft Windows の TCP/IP 実装における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2010-0239 2010-03-1 11:36 2010-02-9 Show GitHub Exploit DB Packet Storm
251678 9.3 危険 マイクロソフト - Microsoft Windows の SMB クライアント実装における権限昇格の脆弱性 CWE-362
競合状態 		CVE-2010-0017 2010-03-1 11:35 2010-02-9 Show GitHub Exploit DB Packet Storm
251679 9.3 危険 マイクロソフト - Microsoft Windows の SMB クライアント実装における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2010-0016 2010-03-1 11:35 2010-02-9 Show GitHub Exploit DB Packet Storm
251680 5 警告 日立 - uCosminexus Portal Framework におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		- 2010-02-26 11:36 2010-01-29 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 19, 2026, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
198691 7.8 HIGH
Local 		linux linux_kernel The sanity_check_ckpt function in fs/f2fs/super.c in the Linux kernel before 4.12.4 does not validate the blkoff and segno arrays, which allows local users to gain privileges via unspecified vectors. CWE-129
 Improper Validation of Array Index 		CVE-2017-10663 2024-11-21 12:06 2017-08-20 Show GitHub Exploit DB Packet Storm
198692 7.8 HIGH
Local 		linux linux_kernel The sanity_check_raw_super function in fs/f2fs/super.c in the Linux kernel before 4.11.1 does not validate the segment count, which allows local users to gain privileges via unspecified vectors. NVD-CWE-noinfo
CVE-2017-10662 2024-11-21 12:06 2017-08-20 Show GitHub Exploit DB Packet Storm
198693 7.0 HIGH
Local 		linux
redhat
debian 		linux_kernel
enterprise_linux
enterprise_linux_server_eus
enterprise_linux_aus
enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions
debian_linux 		Race condition in fs/timerfd.c in the Linux kernel before 4.10.15 allows local users to gain privileges or cause a denial of service (list corruption or use-after-free) via simultaneous file-descript… CWE-416
 Use After Free 		CVE-2017-10661 2024-11-21 12:06 2017-08-20 Show GitHub Exploit DB Packet Storm
198694 7.8 HIGH
Local 		phpgrid phpgrid Directory traversal vulnerability in ajaxfileupload.php in Kayson Group Ltd. phpGrid before 7.2.5 allows remote attackers to execute arbitrary code by uploading a crafted file with a .. (dot dot) in … CWE-22
Path Traversal 		CVE-2017-10665 2024-11-21 12:06 2017-08-18 Show GitHub Exploit DB Packet Storm
198695 7.8 HIGH
Local 		teikoku_databank type_a Untrusted search path vulnerability in TDB CA TypeA use software Version 5.2 and earlier, distributed until 10 August 2017 allows an attacker to gain privileges via a Trojan horse DLL in an unspecifi… CWE-426
 Untrusted Search Path 		CVE-2017-10824 2024-11-21 12:06 2017-08-18 Show GitHub Exploit DB Packet Storm
198696 7.8 HIGH
Local 		enecho.meti shin_kinkyuji_houkoku_data_nyuryoku_program Untrusted search path vulnerability in Installer for Shin Kinkyuji Houkoku Data Nyuryoku Program (program released on 2011 March 10) Distributed on the website till 2017 May 17 allows an attacker to … CWE-426
 Untrusted Search Path 		CVE-2017-10823 2024-11-21 12:06 2017-08-18 Show GitHub Exploit DB Packet Storm
198697 7.8 HIGH
Local 		enecho.meti shin_sekiyu_yunyu_chousa_houkoku_data_nyuryoku_program Untrusted search path vulnerability in Installer for Shin Sekiyu Yunyu Chousa Houkoku Data Nyuryoku Program (program released on 2013 September 30) distributed on the website until 2017 May 17 allows… CWE-426
 Untrusted Search Path 		CVE-2017-10822 2024-11-21 12:06 2017-08-18 Show GitHub Exploit DB Packet Storm
198698 7.8 HIGH
Local 		enecho.meti shin_kikan_toukei_houkoku_data_nyuryokuyou_program Untrusted search path vulnerability in Installer for Shin Kikan Toukei Houkoku Data Nyuryokuyou Program (program released on 2013 September 30) Distributed on the website until 2017 May 17 allows an … CWE-426
 Untrusted Search Path 		CVE-2017-10821 2024-11-21 12:06 2017-08-18 Show GitHub Exploit DB Packet Storm
198699 6.8 MEDIUM
Adjacent 		buffalo wcr-1166ds_firmware Buffalo WCR-1166DS devices with firmware 1.30 and earlier allow an attacker to execute arbitrary OS commands via unspecified vectors. CWE-78
OS Command  		CVE-2017-10811 2024-11-21 12:06 2017-08-18 Show GitHub Exploit DB Packet Storm
198700 8.8 HIGH
Network 		linksys ea4500_firmware Cross-Site Request Forgery (CSRF) exists on Linksys EA4500 devices with Firmware Version before 2.1.41.164606, as demonstrated by a request to apply.cgi to disable SIP. CWE-352
 Origin Validation Error 		CVE-2017-10677 2024-11-21 12:06 2017-08-7 Show GitHub Exploit DB Packet Storm