Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
251821	7.2	危険	サイバートラスト株式会社 Linux	-	Linux kernel の kvm_dev_ioctl_get_supported_cpuid 関数における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2009-3638	2010-02-3 14:35	2009-10-29	Show	GitHub Exploit DB Packet Storm

251822	5	警告	Linear LLC S2 Security	-	Linear eMerge のマネージメントコンポーネントにおけるサービス運用妨害 (DoS)	CWE-noinfo 情報不足	CVE-2009-3734	2010-02-3 14:35	2010-01-5	Show	GitHub Exploit DB Packet Storm

251823	7.5	危険	The PHP Group LibGD project サイバートラスト株式会社レッドハット	-	PHP および GD Graphics Library の _gdGetColors 関数におけるバッファオーバーフローの脆弱性	CWE-Other その他	CVE-2009-3546	2010-02-3 14:34	2009-10-19	Show	GitHub Exploit DB Packet Storm

251824	6.8	警告	GNU Project XEmacs サイバートラスト株式会社	-	Emacs および XEmacs における .flc ファイルの処理に関する任意のコードを実行される脆弱性	CWE-DesignError	CVE-2008-2142	2010-02-2 11:43	2008-05-12	Show	GitHub Exploit DB Packet Storm

251825	3.5	注意	Drupal サイバートラスト株式会社	-	Drupal の Menu モジュールにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-4370	2010-02-2 11:43	2009-12-16	Show	GitHub Exploit DB Packet Storm

251826	3.5	注意	Drupal サイバートラスト株式会社	-	Drupal の Contact モジュールにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-4369	2010-02-2 11:42	2009-12-16	Show	GitHub Exploit DB Packet Storm

251827	7.5	危険	日立	-	Cosminexus、Processing Kit for XML および Hitachi Developer's Kit for Java におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	-	2010-02-2 11:42	2009-12-22	Show	GitHub Exploit DB Packet Storm

251828	4.3	警告	VMware	-	複数の VMware 製品におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-3731	2010-02-1 11:52	2009-12-15	Show	GitHub Exploit DB Packet Storm

251829	10	危険	サイバートラスト株式会社 Linux	-	Linux kernel および gxsnmp パッケージの asn1 の実装における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2008-1673	2010-02-1 11:51	2008-06-10	Show	GitHub Exploit DB Packet Storm

251830	10	危険	ヒューレット・パッカード	-	複数の Symantec 製品の VRTSweb における任意のコードを実行される脆弱性	CWE-287 不適切な認証	CVE-2009-3027	2010-02-1 11:51	2009-12-8	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:April 24, 2026, 4 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
199531	5.4	MEDIUM Network	open-emr	openemr	The application OpenEMR is affected by multiple reflected & stored Cross-Site Scripting (XSS) vulnerabilities affecting version 5.0.0 and prior versions. These vulnerabilities could allow remote auth…	CWE-79 Cross-site Scripting	CVE-2017-1000240	2024-11-21 12:04	2017-11-17	Show	GitHub Exploit DB Packet Storm

199532	5.4	MEDIUM Network	invoiceplane	invoiceplane	InvoicePlane version 1.4.10 is vulnerable to a Stored Cross Site Scripting resulting in allowing an authenticated user to inject malicious client side script which will be executed in the browser of …	CWE-79 Cross-site Scripting	CVE-2017-1000239	2024-11-21 12:04	2017-11-17	Show	GitHub Exploit DB Packet Storm

199533	8.8	HIGH Network	invoiceplane	invoiceplane	InvoicePlane version 1.4.10 is vulnerable to a Arbitrary File Upload resulting in an authenticated user can upload a malicious file to the webserver. It is possible for an attacker to upload a script…	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2017-1000238	2024-11-21 12:04	2017-11-17	Show	GitHub Exploit DB Packet Storm

199534	9.8	CRITICAL Network	ejs	ejs	nodejs ejs versions older than 2.5.3 is vulnerable to remote code execution due to weak input validation in ejs.renderFile() function	CWE-20 Improper Input Validation	CVE-2017-1000228	2024-11-21 12:04	2017-11-17	Show	GitHub Exploit DB Packet Storm

199535	7.5	HIGH Network	ejs	ejs	nodejs ejs version older than 2.5.5 is vulnerable to a denial-of-service due to weak input validation in the ejs.renderFile()	CWE-20 Improper Input Validation	CVE-2017-1000189	2024-11-21 12:04	2017-11-17	Show	GitHub Exploit DB Packet Storm

199536	6.1	MEDIUM Network	ejs	ejs	nodejs ejs version older than 2.5.5 is vulnerable to a Cross-site-scripting in the ejs.renderFile() resulting in code injection	CWE-79 Cross-site Scripting	CVE-2017-1000188	2024-11-21 12:04	2017-11-17	Show	GitHub Exploit DB Packet Storm

199537	9.8	CRITICAL Network	creolabs	gravity	Creolabs Gravity Version: 1.0 Heap Overflow Potential Code Execution. By creating a large loop whiling pushing data to a buffer, we can break out of the bounds checking of that buffer. When list.join…	CWE-125 Out-of-bounds Read	CVE-2017-1000173	2024-11-21 12:04	2017-11-17	Show	GitHub Exploit DB Packet Storm

199538	9.8	CRITICAL Network	creolabs	gravity	Creolabs Gravity Version: 1.0 Use-After-Free Possible code execution. An example of a Heap-Use-After-Free after the 'sublexer' pointer has been freed. Line 542 of gravity_lexer.c. 'lexer' is being us…	CWE-416 Use After Free	CVE-2017-1000172	2024-11-21 12:04	2017-11-17	Show	GitHub Exploit DB Packet Storm

199539	5.9	MEDIUM Network	nv-websocket-client_project	nv-websocket-client	The Java WebSocket client nv-websocket-client does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which …	CWE-295 Improper Certificate Validation	CVE-2017-1000209	2024-11-21 12:04	2017-11-17	Show	GitHub Exploit DB Packet Storm

199540	8.8	HIGH Network	swagger	swagger-parser swagger-codegen	A vulnerability in Swagger-Parser's (version <= 1.0.30) yaml parsing functionality results in arbitrary code being executed when a maliciously crafted yaml Open-API specification is parsed. This in p…	CWE-502 Deserialization of Untrusted Data	CVE-2017-1000208	2024-11-21 12:04	2017-11-17	Show	GitHub Exploit DB Packet Storm