Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 23, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
245721 6.5 警告 GLPI-PROJECT.ORG - GLPI の front/popup.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション
CVE-2012-1037 2012-07-17 16:17 2012-02-9 Show GitHub Exploit DB Packet Storm
245722 5.5 警告 Tryton - Tryton アプリケーションフレームワークにおける任意のユーザの権限を変更される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-0215 2012-07-17 16:09 2012-03-28 Show GitHub Exploit DB Packet Storm
245723 5 警告 Tiki Software Community Association - TikiWiki CMS/Groupware におけるインストールパスを取得される脆弱性 CWE-200
情報漏えい
CVE-2012-3996 2012-07-17 16:04 2012-07-12 Show GitHub Exploit DB Packet Storm
245724 7.5 危険 Adrian Chadd - RTG および RTG2 における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2012-3881 2012-07-17 16:03 2012-07-12 Show GitHub Exploit DB Packet Storm
245725 4.3 警告 Kajona - Kajona の system/functions.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-3805 2012-07-17 16:01 2012-07-12 Show GitHub Exploit DB Packet Storm
245726 7.5 危険 artis.imag - Basilic の Config/diff.php における任意のコマンドを実行される脆弱性 CWE-20
不適切な入力確認
CVE-2012-3399 2012-07-17 15:59 2012-07-12 Show GitHub Exploit DB Packet Storm
245727 7.5 危険 Apache Software Foundation - Apache Hadoop の DataNode における任意のブロックを読まれる脆弱性 CWE-310
暗号の問題
CVE-2012-3376 2012-07-17 15:57 2012-07-12 Show GitHub Exploit DB Packet Storm
245728 3.6 注意 suckless.org - slock における重要な情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-1620 2012-07-17 15:45 2012-07-12 Show GitHub Exploit DB Packet Storm
245729 7.5 危険 Tiki Software Community Association - TikiWiki CMS/Groupware における任意の PHP コードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2012-0911 2012-07-17 15:43 2012-07-12 Show GitHub Exploit DB Packet Storm
245730 9.3 危険 Google - Google Chrome の PDF 機能におけるサービス運用妨害 (DoS) の脆弱性 CWE-DesignError
CVE-2012-2844 2012-07-17 11:22 2012-07-11 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 24, 2026, 4 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
252411 6.7 MEDIUM
Local
python python Python Software Foundation CPython version From 3.2 until 3.6.4 on Windows contains a Buffer Overflow vulnerability in os.symlink() function on Windows that can result in Arbitrary code execution, li… CWE-120
Classic Buffer Overflow
CVE-2018-1000117 2024-11-21 12:39 2018-03-7 Show GitHub Exploit DB Packet Storm
252412 9.8 CRITICAL
Network
net-snmp
debian
net-snmp
debian_linux
NET-SNMP version 5.7.2 contains a heap corruption vulnerability in the UDP protocol handler that can result in command execution. CWE-787
 Out-of-bounds Write
CVE-2018-1000116 2024-11-21 12:39 2018-03-7 Show GitHub Exploit DB Packet Storm
252413 8.8 HIGH
Network
electronjs electron Github Electron version Electron 1.8.2-beta.4 and earlier contains a Command Injection vulnerability in Protocol Handler that can result in command execute. This attack appear to be exploitable via t… CWE-78
OS Command 
CVE-2018-1000118 2024-11-21 12:39 2018-03-7 Show GitHub Exploit DB Packet Storm
252414 9.8 CRITICAL
Network
mingw-w64 mingw-w64 Mingw-w64 version 5.0.3 and earlier, 5.0.4, 6.0.0 and 7.0.0 contains an Improper Null Termination (CWE-170) vulnerability in mingw-w64-crt (libc)->(v)snprintf that can result in The bug may be used t… NVD-CWE-noinfo
CVE-2018-1000101 2024-11-21 12:39 2018-03-7 Show GitHub Exploit DB Packet Storm
252415 7.8 HIGH
Local
gpac_project
canonical
gpac
ubuntu_linux
GPAC MP4Box version 0.7.1 and earlier contains a Buffer Overflow vulnerability in src/isomedia/avc_ext.c lines 2417 to 2420 that can result in Heap chunks being modified, this could lead to RCE. This… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2018-1000100 2024-11-21 12:39 2018-03-7 Show GitHub Exploit DB Packet Storm
252416 7.5 HIGH
Network
memcached
canonical
debian
redhat
memcached
ubuntu_linux
debian_linux
openstack
Memcached version 1.5.5 contains an Insufficient Control of Network Message Volume (Network Amplification, CWE-406) vulnerability in the UDP support of the memcached server that can result in denial … CWE-400
 Uncontrolled Resource Consumption
CVE-2018-1000115 2024-11-21 12:39 2018-03-5 Show GitHub Exploit DB Packet Storm
252417 6.1 MEDIUM
Network
microsoft identity_manager Microsoft Identity Manager 2016 SP1 allows an attacker to gain elevated privileges when it does not properly sanitize a specially crafted attribute value being displayed to a user on an affected MIM … CWE-79
Cross-site Scripting
CVE-2018-0908 2024-11-21 12:39 2018-02-27 Show GitHub Exploit DB Packet Storm
252418 5.3 MEDIUM
Network
jenkins
oracle
jenkins
communications_cloud_native_core_automated_test_suite
An improper input validation vulnerability exists in Jenkins versions 2.106 and earlier, and LTS 2.89.3 and earlier, that allows an attacker to access plugin resource files in the META-INF and WEB-IN… CWE-200
Information Exposure
CVE-2018-1000068 2024-11-21 12:39 2018-02-16 Show GitHub Exploit DB Packet Storm
252419 5.3 MEDIUM
Network
jenkins
oracle
jenkins
communications_cloud_native_core_automated_test_suite
An improper authorization vulnerability exists in Jenkins versions 2.106 and earlier, and LTS 2.89.3 and earlier, that allows an attacker to have Jenkins submit HTTP GET requests and get limited info… CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2018-1000067 2024-11-21 12:39 2018-02-16 Show GitHub Exploit DB Packet Storm
252420 5.4 MEDIUM
Network
microsoft sharepoint_enterprise_server SharePoint Server 2016 allows an elevation of privilege vulnerability due to how web requests are handled, aka "Microsoft SharePoint Elevation of Privilege Vulnerability". CWE-79
Cross-site Scripting
CVE-2018-0869 2024-11-21 12:39 2018-02-15 Show GitHub Exploit DB Packet Storm