Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 28, 2026, noon

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
245571 4.3 警告 PivotX - PivotX の pivotx/ajaxhelper.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-2274 2012-08-15 15:25 2012-05-13 Show GitHub Exploit DB Packet Storm
245572 4.3 警告 REDAXO - REDAXO におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-3869 2012-08-15 15:11 2012-08-13 Show GitHub Exploit DB Packet Storm
245573 5.5 警告 レッドハット - RHCS および Dogtag Certificate System における認証局証明書を無効にされる脆弱性 CWE-310
暗号の問題 		CVE-2012-3367 2012-08-15 14:50 2012-07-19 Show GitHub Exploit DB Packet Storm
245574 6.8 警告 D. R. Commander - libjpeg-turbo の jdmarker.c におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2012-2806 2012-08-15 14:32 2012-08-13 Show GitHub Exploit DB Packet Storm
245575 4.3 警告 レッドハット - RHCS および Dogtag Certificate System におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-2662 2012-08-15 14:31 2012-07-19 Show GitHub Exploit DB Packet Storm
245576 4.3 警告 MNT-TECH - WordPress 用 WP-FaceThumb プラグインにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-2371 2012-08-15 14:26 2012-08-13 Show GitHub Exploit DB Packet Storm
245577 5 警告 Bytemark - Bytemark Symbiosis における電子メールアカウントへのアクセス権限を取得される脆弱性 CWE-20
不適切な入力確認 		CVE-2012-2368 2012-08-15 14:23 2012-08-13 Show GitHub Exploit DB Packet Storm
245578 2.1 注意 iain - gypsy の NMEA パーサにおけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2011-0524 2012-08-15 14:17 2011-01-24 Show GitHub Exploit DB Packet Storm
245579 1.9 注意 iain - gypsy における制限されているファイルを読まれる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-0523 2012-08-15 14:13 2011-01-24 Show GitHub Exploit DB Packet Storm
245580 2.1 注意 レッドハット - JBoss AS および EAP における資格情報を読まれる脆弱性 CWE-255
証明書・パスワード管理 		CVE-2009-5066 2012-08-15 14:02 2010-01-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 28, 2026, 4:01 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
253571 6.1 MEDIUM
Network 		citrix xenmobile_server There is a Cross-Site Scripting Vulnerability in Citrix XenMobile Server 10.7 before RP3. CWE-79
Cross-site Scripting 		CVE-2018-10649 2024-11-21 12:41 2018-05-24 Show GitHub Exploit DB Packet Storm
253572 9.8 CRITICAL
Network 		citrix xenmobile_server There are Unauthenticated File Upload Vulnerabilities in Citrix XenMobile Server 10.8 before RP2 and 10.7 before RP3. CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2018-10648 2024-11-21 12:41 2018-05-24 Show GitHub Exploit DB Packet Storm
253573 8.8 HIGH
Network 		trendmicro endpoint_application_control A directory traversal vulnerability in Trend Micro Endpoint Application Control 2.0 could allow a remote attacker to execute arbitrary code on vulnerable installations due to a flaw in the FileDrop s… CWE-22
Path Traversal 		CVE-2018-10357 2024-11-21 12:41 2018-05-24 Show GitHub Exploit DB Packet Storm
253574 8.8 HIGH
Network 		trendmicro email_encryption_gateway A SQL injection remote code execution vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow an attacker to execute arbitrary SQL statements on vulnerable installations due to a flaw i… CWE-89
SQL Injection 		CVE-2018-10356 2024-11-21 12:41 2018-05-24 Show GitHub Exploit DB Packet Storm
253575 7.0 HIGH
Local 		trendmicro email_encryption_gateway An authentication weakness vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow an attacker to recover user passwords on vulnerable installations due to a flaw in the DBCrypto class.… CWE-522
 Insufficiently Protected Credentials 		CVE-2018-10355 2024-11-21 12:41 2018-05-24 Show GitHub Exploit DB Packet Storm
253576 8.8 HIGH
Network 		trendmicro email_encryption_gateway A command injection remote command execution vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow a remote attacker to execute arbitrary code on vulnerable installations due to a fla… CWE-78
OS Command  		CVE-2018-10354 2024-11-21 12:41 2018-05-24 Show GitHub Exploit DB Packet Storm
253577 6.5 MEDIUM
Network 		trendmicro email_encryption_gateway A SQL injection information disclosure vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow a remote attacker to disclose sensitive information on vulnerable installations due to a f… CWE-89
SQL Injection 		CVE-2018-10353 2024-11-21 12:41 2018-05-24 Show GitHub Exploit DB Packet Storm
253578 8.8 HIGH
Network 		trendmicro email_encryption_gateway A vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow a remote attacker to execute arbitrary SQL statements on vulnerable installations due to a flaw in the formConfiguration class.… CWE-89
SQL Injection 		CVE-2018-10352 2024-11-21 12:41 2018-05-24 Show GitHub Exploit DB Packet Storm
253579 8.8 HIGH
Network 		trendmicro email_encryption_gateway A vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow a remote attacker to execute arbitrary SQL statements on vulnerable installations due to a flaw in the formRegistration2 class.… CWE-89
SQL Injection 		CVE-2018-10351 2024-11-21 12:41 2018-05-24 Show GitHub Exploit DB Packet Storm
253580 6.1 MEDIUM
Network 		ilias ilias error.php in ILIAS 5.2.x through 5.3.x before 5.3.4 allows XSS via the text of a PDO exception. CWE-79
Cross-site Scripting 		CVE-2018-10307 2024-11-21 12:41 2018-05-18 Show GitHub Exploit DB Packet Storm