Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 24, 2026, 12:02 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
245951 3.5 注意 Apache Software Foundation - Apache Roller におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-2381 2012-06-27 11:20 2012-06-26 Show GitHub Exploit DB Packet Storm
245952 9.3 危険 Apache Software Foundation - Apache Roller の admin/editor コンソールにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2012-2380 2012-06-27 11:18 2012-06-26 Show GitHub Exploit DB Packet Storm
245953 5.8 警告 nicholas thompson - Drupal 用の Global Redirect モジュールにおけるオープンリダイレクトの脆弱性 CWE-20
不適切な入力確認 		CVE-2010-2021 2012-06-27 11:09 2012-06-13 Show GitHub Exploit DB Packet Storm
245954 4.3 警告 アドビシステムズ
日立		 - Adobe RoboHelp Server におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-0523 2012-06-27 11:05 2009-02-24 Show GitHub Exploit DB Packet Storm
245955 4.3 警告 アドビシステムズ
日立		 - Adobe RoboHelp によって作成されたファイルにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-0642 2012-06-27 11:02 2008-02-12 Show GitHub Exploit DB Packet Storm
245956 4.3 警告 Webmin Project - Webmin におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-1937 2012-06-27 10:56 2011-05-31 Show GitHub Exploit DB Packet Storm
245957 5.1 警告 ターボリナックス
ImageMagick
レッドハット
オラクル		 - ImageMagick における不正な Sun Rasterfile ファイルによるヒープオーバーフローの脆弱性 - CVE-2006-3744 2012-06-27 10:50 2006-08-14 Show GitHub Exploit DB Packet Storm
245958 6.8 警告 galeriashqip - GaleriaSHQIP の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-3207 2012-06-26 16:19 2010-09-3 Show GitHub Exploit DB Packet Storm
245959 7.5 危険 diy-cms - DiY-CMS における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2010-3206 2012-06-26 16:19 2010-09-3 Show GitHub Exploit DB Packet Storm
245960 9.3 危険 アドビシステムズ - Adobe Captivate における任意のコードを実行される脆弱性 CWE-Other
その他 		CVE-2010-3191 2012-06-26 16:19 2010-08-31 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 24, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
252751 8.8 HIGH
Network 		cisco vbond_orchestrator
vedge-plus
vedge-pro
vsmart_controller
vmanage_network_management
vedge-100_firmware
vedge_100b_firmware
vedge_100m_firmware
vedge_100wm_firmware
vedge-1… 		A vulnerability in the configuration and management service of the Cisco SD-WAN Solution could allow an authenticated, remote attacker to execute arbitrary code with vmanage user privileges or cause … CWE-269
 Improper Privilege Management 		CVE-2018-0343 2024-11-21 12:38 2018-07-19 Show GitHub Exploit DB Packet Storm
252752 6.7 MEDIUM
Local 		cisco vbond_orchestrator
vedge-plus
vedge-pro
vsmart_controller
vmanage_network_management
vedge-100_firmware
vedge_100b_firmware
vedge_100m_firmware
vedge_100wm_firmware
vedge-1… 		A vulnerability in the configuration and monitoring service of the Cisco SD-WAN Solution could allow an authenticated, local attacker to execute arbitrary code with root privileges or cause a denial … CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2018-0342 2024-11-21 12:38 2018-07-19 Show GitHub Exploit DB Packet Storm
252753 8.8 HIGH
Network 		qnap q\'center Command injection vulnerability in SSH of QNAP Q'center Virtual Appliance version 1.7.1063 and earlier could allow authenticated users to run arbitrary commands. CWE-78
OS Command  		CVE-2018-0710 2024-11-21 12:38 2018-07-17 Show GitHub Exploit DB Packet Storm
252754 8.8 HIGH
Network 		qnap q\'center Command injection vulnerability in date of QNAP Q'center Virtual Appliance version 1.7.1063 and earlier could allow authenticated users to run arbitrary commands. CWE-78
OS Command  		CVE-2018-0709 2024-11-21 12:38 2018-07-17 Show GitHub Exploit DB Packet Storm
252755 8.8 HIGH
Network 		qnap q\'center Command injection vulnerability in networking of QNAP Q'center Virtual Appliance version 1.7.1063 and earlier could allow authenticated users to run arbitrary commands. CWE-78
OS Command  		CVE-2018-0708 2024-11-21 12:38 2018-07-17 Show GitHub Exploit DB Packet Storm
252756 7.2 HIGH
Network 		qnap q\'center Command injection vulnerability in change password of QNAP Q'center Virtual Appliance version 1.7.1063 and earlier could allow authenticated users to run arbitrary commands. CWE-78
OS Command  		CVE-2018-0707 2024-11-21 12:38 2018-07-17 Show GitHub Exploit DB Packet Storm
252757 8.8 HIGH
Network 		qnap q\'center Exposure of Private Information in QNAP Q'center Virtual Appliance version 1.7.1063 and earlier could allow authenticated users to access sensitive information. NVD-CWE-noinfo
CVE-2018-0706 2024-11-21 12:38 2018-07-17 Show GitHub Exploit DB Packet Storm
252758 3.3 LOW
Local 		clamav
debian 		clamav
debian_linux 		ClamAV before 0.100.1 lacks a PDF object length check, resulting in an unreasonably long time to parse a relatively small file. CWE-20
 Improper Input Validation  		CVE-2018-0361 2024-11-21 12:38 2018-07-17 Show GitHub Exploit DB Packet Storm
252759 5.5 MEDIUM
Local 		clamav
canonical
debian 		clamav
ubuntu_linux
debian_linux 		ClamAV before 0.100.1 has an HWP integer overflow with a resultant infinite loop via a crafted Hangul Word Processor file. This is in parsehwp3_paragraph() in libclamav/hwp.c. CWE-190
 Integer Overflow or Wraparound 		CVE-2018-0360 2024-11-21 12:38 2018-07-17 Show GitHub Exploit DB Packet Storm
252760 8.8 HIGH
Network 		cisco ip_phone_multiplatform_firmware A vulnerability in the web-based UI of Cisco IP Phone 6800, 7800, and 8800 Series with Multiplatform Firmware before 11.2(1) could allow an authenticated, remote attacker to perform a command injecti… CWE-78
OS Command  		CVE-2018-0341 2024-11-21 12:38 2018-07-17 Show GitHub Exploit DB Packet Storm