Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 30, 2026, 2:01 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
246051 5 警告 Tridium - Tridium Niagara AX Framework における認証を回避される脆弱性 CWE-287
不適切な認証
CVE-2012-3024 2012-08-20 16:00 2012-08-15 Show GitHub Exploit DB Packet Storm
246052 8.5 危険 シーメンス - Siemens COMOS におけるデータベースの管理者権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-3009 2012-08-20 15:59 2012-08-10 Show GitHub Exploit DB Packet Storm
246053 5.5 警告 Iomega
DELL EMC (旧 EMC Corporation)
- 複数の Iomega 製品の EMC Lifeline ファームウェアにおけるデータを読まれる脆弱性 CWE-noinfo
情報不足
CVE-2012-2283 2012-08-20 15:57 2012-08-16 Show GitHub Exploit DB Packet Storm
246054 4.3 警告 Tom Braider - WordPress 用 Count Per Day モジュールの userperspan.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-3434 2012-08-20 15:53 2012-07-13 Show GitHub Exploit DB Packet Storm
246055 5 警告 Mike Peachey - RT 用 Authen::ExternalAuth エクステンションにおけるログインセッションを取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-2770 2012-08-20 15:45 2012-07-25 Show GitHub Exploit DB Packet Storm
246056 4.3 警告 Jesse Vincent - RT 用 Extension::MobileUI エクステンションにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-2769 2012-08-20 15:42 2012-07-25 Show GitHub Exploit DB Packet Storm
246057 4.3 警告 Best Practical Solutions - RT 用 RTFM エクステンションにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-2768 2012-08-20 15:40 2012-07-25 Show GitHub Exploit DB Packet Storm
246058 7.5 危険 Bharat Mediratta - Gallery における任意の PHP コードを実行される脆弱性 CWE-noinfo
情報不足
CVE-2012-4343 2012-08-20 12:17 2012-06-12 Show GitHub Exploit DB Packet Storm
246059 4.3 警告 Bharat Mediratta - Gallery におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-4342 2012-08-20 12:16 2012-06-12 Show GitHub Exploit DB Packet Storm
246060 10 危険 SAP - SAP NetWeaver ABAP の msg_server.exe におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2012-4341 2012-08-20 12:15 2012-08-15 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 30, 2026, 4:22 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
253531 4.9 MEDIUM
Network
redhat keycloak
single_sign-on
keycloak before version 4.0.0.final is vulnerable to a infinite loop in session replacement. A Keycloak cluster with multiple nodes could mishandle an expired session replacement and lead to an infin… CWE-835
 Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2018-10912 2024-11-21 12:42 2018-07-24 Show GitHub Exploit DB Packet Storm
253532 9.8 CRITICAL
Network
redhat certification redhat-certification does not properly sanitize paths in rhcertStore.py:__saveResultsFile. A remote attacker could use this flaw to overwrite any file, potentially gaining remote code execution. CWE-20
 Improper Input Validation 
CVE-2018-10870 2024-11-21 12:42 2018-07-20 Show GitHub Exploit DB Packet Storm
253533 7.5 HIGH
Network
redhat enterprise_linux
certification
redhat-certification does not properly restrict files that can be download through the /download page. A remote attacker may download any file accessible by the user running httpd. - CVE-2018-10869 2024-11-21 12:42 2018-07-20 Show GitHub Exploit DB Packet Storm
253534 6.5 MEDIUM
Local
canonical
linux
debian
redhat
ubuntu_linux
linux_kernel
debian_linux
enterprise_linux
Linux kernel ext4 filesystem is vulnerable to an out-of-bound access in the ext4_ext_drop_refs() function when operating on a crafted ext4 filesystem image. - CVE-2018-10877 2024-11-21 12:42 2018-07-19 Show GitHub Exploit DB Packet Storm
253535 7.2 HIGH
Network
fedoraproject
debian
389_directory_server
debian_linux
389-ds-base before versions 1.3.8.5, 1.4.0.12 is vulnerable to a Cleartext Storage of Sensitive Information. By default, when the Replica and/or retroChangeLog plugins are enabled, 389-ds-base stores… CWE-312
 Cleartext Storage of Sensitive Information
CVE-2018-10871 2024-11-21 12:42 2018-07-18 Show GitHub Exploit DB Packet Storm
253536 7.5 HIGH
Network
git-annex_project
debian
git-annex
debian_linux
git-annex is vulnerable to a private data exposure and exfiltration attack. It could expose the content of files located outside the git-annex repository, or content from a private web server on loca… CWE-200
Information Exposure
CVE-2018-10857 2024-11-21 12:42 2018-07-17 Show GitHub Exploit DB Packet Storm
253537 6.6 MEDIUM
Physics
linux
canonical
redhat
linux_kernel
ubuntu_linux
enterprise_linux
Linux kernel is vulnerable to a heap-based buffer overflow in the fs/ext4/xattr.c:ext4_xattr_set_entry() function. An attacker could exploit this by operating on a mounted crafted ext4 image. - CVE-2018-10840 2024-11-21 12:42 2018-07-17 Show GitHub Exploit DB Packet Storm
253538 7.5 HIGH
Network
git-annex_project
debian
git-annex
debian_linux
git-annex is vulnerable to an Information Exposure when decrypting files. A malicious server for a special remote could trick git-annex into decrypting a file that was encrypted to the user's gpg key… CWE-200
Information Exposure
CVE-2018-10859 2024-11-21 12:42 2018-07-17 Show GitHub Exploit DB Packet Storm
253539 7.8 HIGH
Local
redhat
debian
suse
canonical
openshift
virtualization_host
virtualization
ceph_storage
ansible_engine
openstack
gluster_storage
debian_linux
package_hub
ubuntu_linux
A flaw was found in ansible. ansible.cfg is read from the current working directory which can be altered to make it point to a plugin or a module path under the control of an attacker, thus allowing … CWE-426
 Untrusted Search Path
CVE-2018-10875 2024-11-21 12:42 2018-07-14 Show GitHub Exploit DB Packet Storm
253540 8.8 HIGH
Network
qutebrowser qutebrowser qutebrowser before version 1.4.1 is vulnerable to a cross-site request forgery flaw that allows websites to access 'qute://*' URLs. A malicious website could exploit this to load a 'qute://settings/s… CWE-352
 Origin Validation Error
CVE-2018-10895 2024-11-21 12:42 2018-07-12 Show GitHub Exploit DB Packet Storm