Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 28, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
246631 5.8 警告 alvaro - aMSN における MSN サーバになりすまされる脆弱性 CWE-287
不適切な認証 		CVE-2010-0744 2012-06-26 16:19 2010-04-20 Show GitHub Exploit DB Packet Storm
246632 6.2 警告 GTK+
GNOME Project		 - gnome-screensaver で使用される GTK+ の gdk/gdkwindow.c における無人のワークステーションにアクセスされる脆弱性 CWE-362
競合状態 		CVE-2010-0732 2012-06-26 16:19 2010-01-29 Show GitHub Exploit DB Packet Storm
246633 6.8 警告 aspcodecms - ASPCode CMS の default.asp におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2010-0711 2012-06-26 16:19 2010-02-25 Show GitHub Exploit DB Packet Storm
246634 7.5 危険 aspcodecms - ASPCode CMS の default.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-0710 2012-06-26 16:19 2010-02-25 Show GitHub Exploit DB Packet Storm
246635 7.2 危険 マイクロソフト
AVAST Software s.r.o.		 - Windows 2000 および XP 上で稼動する avast! の Aavmker4.sys におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2010-0705 2012-06-26 16:19 2010-02-25 Show GitHub Exploit DB Packet Storm
246636 7.5 危険 Fonality - Fonality Trixbox の cisco/services/PhonecDirectory.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-0702 2012-06-26 16:19 2010-02-23 Show GitHub Exploit DB Packet Storm
246637 7.5 危険 dynamicsoft - Dynamicsoft WSC CMS の backoffice/login.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-0698 2012-06-26 16:19 2010-02-23 Show GitHub Exploit DB Packet Storm
246638 4.3 警告 Basic-CMS - BASIC-CMS の pages/index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-0695 2012-06-26 16:19 2010-02-23 Show GitHub Exploit DB Packet Storm
246639 7.5 危険 commodityrentals - CommodityRentals Trade Manager Script の products.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-0693 2012-06-26 16:19 2010-02-23 Show GitHub Exploit DB Packet Storm
246640 7.5 危険 commodityrentals - CommodityRentals Video Games Rentals の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-0690 2012-06-26 16:19 2010-02-23 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 28, 2026, 4:01 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
253151 6.3 MEDIUM
Local 		ovirt
redhat 		vdsm
virtualization 		It was found that vdsm before version 4.20.37 invokes qemu-img on untrusted inputs without limiting resources. By uploading a specially crafted image, an attacker could cause the qemu-img process to … CWE-770
 Allocation of Resources Without Limits or Throttling 		CVE-2018-10908 2024-11-21 12:42 2018-08-10 Show GitHub Exploit DB Packet Storm
253152 5.5 MEDIUM
Local 		ttembed_project ttembed An input validation flaw exists in ttembed. With a crafted input file, an attacker may be able to trigger a denial of service condition due to ttembed trusting attacker controlled values. CWE-20
 Improper Input Validation  		CVE-2018-10922 2024-11-21 12:42 2018-08-3 Show GitHub Exploit DB Packet Storm
253153 7.5 HIGH
Network 		ttembed_project ttembed Certain input files may trigger an integer overflow in ttembed input file processing. This overflow could potentially lead to corruption of the input file due to a lack of checking return codes of fg… CWE-190
 Integer Overflow or Wraparound 		CVE-2018-10921 2024-11-21 12:42 2018-08-3 Show GitHub Exploit DB Packet Storm
253154 6.8 MEDIUM
Network 		nic knot_resolver Improper input validation bug in DNS resolver component of Knot Resolver before 2.4.1 allows remote attacker to poison cache. CWE-20
 Improper Input Validation  		CVE-2018-10920 2024-11-21 12:42 2018-08-2 Show GitHub Exploit DB Packet Storm
253155 7.1 HIGH
Local 		canonical cloud-init The default cloud-init configuration, in cloud-init 0.6.2 and newer, included "ssh_deletekeys: 0", disabling cloud-init's deletion of ssh host keys. In some environments, this could lead to instances… - CVE-2018-10896 2024-11-21 12:42 2018-08-2 Show GitHub Exploit DB Packet Storm
253156 5.4 MEDIUM
Network 		redhat keycloak
single_sign-on 		It was found that SAML authentication in Keycloak 3.4.3.Final incorrectly authenticated expired certificates. A malicious user could use this to access unauthorized data or possibly conduct further a… CWE-295
Improper Certificate Validation  		CVE-2018-10894 2024-11-21 12:42 2018-08-2 Show GitHub Exploit DB Packet Storm
253157 8.1 HIGH
Network 		rpm
redhat 		yum-utils
enterprise_linux_desktop
enterprise_linux_workstation
enterprise_linux_server
virtualization 		A directory traversal issue was found in reposync, a part of yum-utils, where reposync fails to sanitize paths in remote repository configuration files. If an attacker controls a repository, they may… - CVE-2018-10897 2024-11-21 12:42 2018-08-2 Show GitHub Exploit DB Packet Storm
253158 6.5 MEDIUM
Network 		lftp_project
canonical
opensuse 		lftp
ubuntu_linux
leap 		It has been discovered that lftp up to and including version 4.8.3 does not properly sanitize remote file names, leading to a loss of integrity on the local system when reverse mirroring is used. A r… CWE-20
 Improper Input Validation  		CVE-2018-10916 2024-11-21 12:42 2018-08-1 Show GitHub Exploit DB Packet Storm
253159 8.8 HIGH
Adjacent 		dell emc_networker Dell EMC NetWorker versions between 9.0 and 9.1.1.8 through 9.2.1.3, and the version 18.1.0.1 contain a Clear-Text authentication over network vulnerability in the Rabbit MQ Advanced Message Queuing … CWE-319
CWE-522
Cleartext Transmission of Sensitive Information
 Insufficiently Protected Credentials 		CVE-2018-11050 2024-11-21 12:42 2018-08-1 Show GitHub Exploit DB Packet Storm
253160 8.8 HIGH
Adjacent 		redhat
openstack 		openstack
tripleo_heat_templates 		A vulnerability was found in openstack-tripleo-heat-templates before version 8.0.2-40. When deployed using Director using default configuration, Opendaylight in RHOSP13 is configured with easily gues… CWE-798
 Use of Hard-coded Credentials 		CVE-2018-10898 2024-11-21 12:42 2018-07-31 Show GitHub Exploit DB Packet Storm