Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 30, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
245941 6.4 警告 シマンテック - Symantec Norton AntiVirus における任意のコードを実行される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-3497 2012-08-23 16:30 2012-08-22 Show GitHub Exploit DB Packet Storm
245942 6.4 警告 マカフィー - McAfee VirusScan Enterprise における任意のコードを実行される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-3496 2012-08-23 15:52 2012-08-22 Show GitHub Exploit DB Packet Storm
245943 9.3 危険 マカフィー - McAfee VirusScan Enterprise における権限を取得される脆弱性 CWE-Other
その他 		CVE-2009-5118 2012-08-23 15:30 2012-08-22 Show GitHub Exploit DB Packet Storm
245944 1.9 注意 マカフィー - McAfee Host Data Loss Prevention の Web Post Protection 機能における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2009-5117 2012-08-23 15:25 2012-08-22 Show GitHub Exploit DB Packet Storm
245945 6.5 警告 マカフィー - McAfee LinuxShield における統計サーバーへの管理アクセス権を取得される脆弱性 CWE-287
不適切な認証 		CVE-2009-5116 2012-08-23 15:17 2012-08-22 Show GitHub Exploit DB Packet Storm
245946 6.5 警告 マカフィー - McAfee Common Management Agent および McAfee Agent における任意のファイルを上書される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2009-5115 2012-08-23 15:10 2012-08-22 Show GitHub Exploit DB Packet Storm
245947 3.5 注意 The phpMyAdmin Project - phpMyAdmin におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-4579 2012-08-23 15:00 2012-08-16 Show GitHub Exploit DB Packet Storm
245948 2.1 注意 Pawel Jakub Dawidek - FreeBSD 上で稼働する geli 暗号化プロバイダにおける暗号化による保護メカニズムを破られる脆弱性 CWE-310
暗号の問題 		CVE-2012-4578 2012-08-23 14:51 2012-08-21 Show GitHub Exploit DB Packet Storm
245949 10 危険 Google - Google Chrome で使用される Mesa における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2012-2864 2012-08-23 14:25 2012-08-21 Show GitHub Exploit DB Packet Storm
245950 4.3 警告 アップル - Apple Remote Desktop における平文の VNC セッションを取得される脆弱性 CWE-310
暗号の問題 		CVE-2012-0681 2012-08-23 14:23 2012-08-20 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:July 1, 2026, 4:27 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
252831 5.5 MEDIUM
Local 		qualcomm mdm9206_firmware
mdm9607_firmware
mdm9650_firmware
mdm9655_firmware
qm215_firmware
sd_210_firmware
sd_212_firmware
sd_205_firmware
sd_410_firmware
sd_412_firmware
sd_425… 		Insufficient protection of keys in keypad can lead HLOS to gain access to confidential keypad input data in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Sna… NVD-CWE-noinfo
CVE-2018-11958 2024-11-21 12:44 2019-04-5 Show GitHub Exploit DB Packet Storm
252832 6.8 MEDIUM
Physics 		tianocore edk_ii Stack overflow in DxeCore for EDK II may allow an unauthenticated user to potentially enable escalation of privilege, information disclosure and/or denial of service via local access. CWE-787
 Out-of-bounds Write 		CVE-2018-12183 2024-11-21 12:44 2019-03-28 Show GitHub Exploit DB Packet Storm
252833 6.7 MEDIUM
Local 		tianocore edk_ii Insufficient memory write check in SMM service for EDK II may allow an authenticated user to potentially enable escalation of privilege, information disclosure and/or denial of service via local acce… CWE-441
Confused Deputy 		CVE-2018-12182 2024-11-21 12:44 2019-03-28 Show GitHub Exploit DB Packet Storm
252834 6.0 MEDIUM
Local 		tianocore edk_ii Stack overflow in corrupted bmp for EDK II may allow unprivileged user to potentially enable denial of service or elevation of privilege via local access. CWE-787
 Out-of-bounds Write 		CVE-2018-12181 2024-11-21 12:44 2019-03-28 Show GitHub Exploit DB Packet Storm
252835 8.8 HIGH
Network 		tianocore
opensuse 		edk_ii
leap 		Buffer overflow in BlockIo service for EDK II may allow an unauthenticated user to potentially enable escalation of privilege, information disclosure and/or denial of service via network access. CWE-787
 Out-of-bounds Write 		CVE-2018-12180 2024-11-21 12:44 2019-03-28 Show GitHub Exploit DB Packet Storm
252836 7.8 HIGH
Local 		tianocore edk_ii Improper configuration in system firmware for EDK II may allow unauthenticated user to potentially enable escalation of privilege, information disclosure and/or denial of service via local access. NVD-CWE-noinfo
CVE-2018-12179 2024-11-21 12:44 2019-03-28 Show GitHub Exploit DB Packet Storm
252837 9.1 CRITICAL
Network 		tianocore edk_ii Buffer overflow in network stack for EDK II may allow unprivileged user to potentially enable escalation of privilege and/or denial of service via network. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2018-12178 2024-11-21 12:44 2019-03-28 Show GitHub Exploit DB Packet Storm
252838 7.5 HIGH
Network 		fasterxml
debian
fedoraproject
oracle
redhat 		jackson-databind
debian_linux
fedora
jd_edwards_enterpriseone_tools
retail_merchandising_system
openshift_container_platform
jboss_enterprise_application_platform
single_sign-on<… 		An issue was discovered in FasterXML jackson-databind prior to 2.7.9.4, 2.8.11.2, and 2.9.6. When Default Typing is enabled (either globally or for a specific property), the service has the Oracle JD… CWE-502
 Deserialization of Untrusted Data 		CVE-2018-12023 2024-11-21 12:44 2019-03-22 Show GitHub Exploit DB Packet Storm
252839 7.5 HIGH
Network 		fasterxml
debian
fedoraproject
oracle
redhat 		jackson-databind
debian_linux
fedora
jd_edwards_enterpriseone_tools
retail_merchandising_system
openshift_container_platform
jboss_enterprise_application_platform
single_sign-on<… 		An issue was discovered in FasterXML jackson-databind prior to 2.7.9.4, 2.8.11.2, and 2.9.6. When Default Typing is enabled (either globally or for a specific property), the service has the Jodd-db j… CWE-502
 Deserialization of Untrusted Data 		CVE-2018-12022 2024-11-21 12:44 2019-03-22 Show GitHub Exploit DB Packet Storm
252840 7.5 HIGH
Network 		apache heron When accessing the heron-ui webpage, people can modify the file paths outside of the current container to access any file on the host. Example woule be modifying the parameter path= to go to the dire… CWE-22
Path Traversal 		CVE-2018-11789 2024-11-21 12:44 2019-03-22 Show GitHub Exploit DB Packet Storm