Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 17, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
245561	7.5	危険	enanocms	-	Enano CMS のコメント登録インターフェースにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-0471	2012-06-26 16:19	2010-02-2	Show	GitHub Exploit DB Packet Storm

245562	4.3	警告	comtrend	-	Comtrend CT-507IT ADSL ルータの scvrtsrv.cmd におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-0470	2012-06-26 16:19	2010-02-2	Show	GitHub Exploit DB Packet Storm

245563	7.5	危険	files2links	-	Files2Links F2L 3000 機器における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-0469	2012-06-26 16:19	2010-02-2	Show	GitHub Exploit DB Packet Storm

245564	5	警告	Chill Creations Joomla!	-	Joomla! の ccNewsletter コンポーネントにおけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2010-0467	2012-06-26 16:19	2010-02-2	Show	GitHub Exploit DB Packet Storm

245565	7.5	危険	a3malnet	-	magic-portal の home.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-0457	2012-06-26 16:19	2010-01-28	Show	GitHub Exploit DB Packet Storm

245566	7.5	危険	fabricadigital	-	Publique! の cgi/cgilua.exe/sys/start.htm における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-0454	2012-06-26 16:19	2010-01-28	Show	GitHub Exploit DB Packet Storm

245567	5	警告	Digium	-	Asterisk Open Source におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2010-0441	2012-06-26 16:19	2010-02-4	Show	GitHub Exploit DB Packet Storm

245568	6.9	警告	chip salzenberg	-	Chip Salzenberg Deliver における重要な情報を取得される脆弱性	CWE-59 リンク解釈の問題	CVE-2010-0439	2012-06-26 16:19	2010-03-26	Show	GitHub Exploit DB Packet Storm

245569	4.3	警告	entente-oya Apache Software Foundation neogia	-	Opentaps などで使用される Apache Open For Business Project におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-0432	2012-06-26 16:19	2010-04-15	Show	GitHub Exploit DB Packet Storm

245570	3.3	注意	paul vixie fedorahosted.org	-	cronie および Vixie cron の edit_cmd 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-59 リンク解釈の問題	CVE-2010-0424	2012-06-26 16:19	2010-02-25	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 17, 2026, 4:19 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
252481	7.8	HIGH Local	unzip_project	unzip	A heap-based buffer overflow exists in Info-Zip UnZip version <= 6.00 in the processing of password-protected archives that allows an attacker to perform a denial of service or to possibly achieve co…	CWE-787 Out-of-bounds Write	CVE-2018-1000035	2024-11-21 12:39	2018-02-10	Show	GitHub Exploit DB Packet Storm

252482	9.1	CRITICAL Network	info-zip	unzip	An out-of-bounds read exists in Info-Zip UnZip version 6.10c22 that allows an attacker to perform a denial of service and read sensitive memory.	CWE-125 Out-of-bounds Read	CVE-2018-1000034	2024-11-21 12:39	2018-02-10	Show	GitHub Exploit DB Packet Storm

252483	9.1	CRITICAL Network	info-zip	unzip	An out-of-bounds read exists in Info-Zip UnZip version 6.10c22 that allows an attacker to perform a denial of service and read sensitive memory.	CWE-125 Out-of-bounds Read	CVE-2018-1000033	2024-11-21 12:39	2018-02-10	Show	GitHub Exploit DB Packet Storm

252484	7.8	HIGH Local	info-zip	unzip	A heap-based buffer overflow exists in Info-Zip UnZip version 6.10c22 that allows an attacker to perform a denial of service or to possibly achieve code execution.	CWE-787 Out-of-bounds Write	CVE-2018-1000032	2024-11-21 12:39	2018-02-10	Show	GitHub Exploit DB Packet Storm

252485	7.8	HIGH Local	info-zip	unzip	A heap-based buffer overflow exists in Info-Zip UnZip version 6.10c22 that allows an attacker to perform a denial of service or to possibly achieve code execution.	CWE-787 Out-of-bounds Write	CVE-2018-1000031	2024-11-21 12:39	2018-02-10	Show	GitHub Exploit DB Packet Storm

252486	6.1	MEDIUM Network	elsa_project	elsa	mcholste Enterprise Log Search and Archive (ELSA) version revision 1205, commit 2cc17f1 and earlier contains a Cross Site Scripting (XSS) vulnerability in index view (/) that can result in . This att…	CWE-79 Cross-site Scripting	CVE-2018-1000029	2024-11-21 12:39	2018-02-10	Show	GitHub Exploit DB Packet Storm

252487	7.4	HIGH Network	linux	linux_kernel	Linux kernel version after commit bdcf0a423ea1 - 4.15-rc4+, 4.14.8+, 4.9.76+, 4.4.111+ contains a Incorrect Access Control vulnerability in NFS server (nfsd) that can result in remote users reading o…	CWE-269 Improper Privilege Management	CVE-2018-1000028	2024-11-21 12:39	2018-02-10	Show	GitHub Exploit DB Packet Storm

252488	7.5	HIGH Network	squid-cache debian canonical	squid debian_linux ubuntu_linux	The Squid Software Foundation Squid HTTP Caching Proxy version prior to version 4.0.23 contains a NULL Pointer Dereference vulnerability in HTTP Response X-Forwarded-For header processing that can re…	CWE-476 NULL Pointer Dereference	CVE-2018-1000027	2024-11-21 12:39	2018-02-10	Show	GitHub Exploit DB Packet Storm

252489	7.7	HIGH Network	linux canonical redhat debian	linux_kernel ubuntu_linux enterprise_linux_desktop enterprise_linux_workstation enterprise_linux enterprise_linux_server debian_linux	Linux Linux kernel version at least v4.8 onwards, probably well before contains a Insufficient input validation vulnerability in bnx2x network card driver that can result in DoS: Network card firmwar…	CWE-20 Improper Input Validation	CVE-2018-1000026	2024-11-21 12:39	2018-02-10	Show	GitHub Exploit DB Packet Storm

252490	8.1	HIGH Network	firebase_admin_sdk_for_php_project	firebase_admin_sdk_for_php	Jerome Gamez Firebase Admin SDK for PHP version from 3.2.0 to 3.8.0 contains a Incorrect Access Control vulnerability in src/Firebase/Auth/IdTokenVerifier.php does not verify for token signature that…	CWE-732 Incorrect Permission Assignment for Critical Resource	CVE-2018-1000025	2024-11-21 12:39	2018-02-10	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed