Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 7, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
250941	7.5	危険	Ruby on Rails project	-	Ruby on Rails における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2011-0448	2012-03-27 18:42	2011-02-8	Show	GitHub Exploit DB Packet Storm

250942	6.8	警告	Ruby on Rails project	-	Ruby on Rails におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2011-0447	2012-03-27 18:42	2011-02-8	Show	GitHub Exploit DB Packet Storm

250943	4.3	警告	Ruby on Rails project	-	Ruby on Rails の mail_to ヘルパーにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-0446	2012-03-27 18:42	2011-02-9	Show	GitHub Exploit DB Packet Storm

250944	6.8	警告	TinyBB	-	TinyBB における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2011-0443	2012-03-27 18:42	2011-01-12	Show	GitHub Exploit DB Packet Storm

250945	3.5	注意	DELL EMC (旧 EMC Corporation)	-	EMC Avamar のサービスユーティリティにおける重要な情報を取得される脆弱性	CWE-310 暗号の問題	CVE-2011-0442	2012-03-27 18:42	2011-03-16	Show	GitHub Exploit DB Packet Storm

250946	6.3	警告	The PHP Group	-	PHP の Debian GNU/Linux /etc/cron.d/php5 クーロンジョブにおける任意のファイルを削除される脆弱性	CWE-59 リンク解釈の問題	CVE-2011-0441	2012-03-27 18:42	2011-03-29	Show	GitHub Exploit DB Packet Storm

250947	5.8	警告	Mahara	-	Mahara におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2011-0440	2012-03-27 18:42	2011-03-28	Show	GitHub Exploit DB Packet Storm

250948	4.3	警告	Mahara	-	Mahara におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-0439	2012-03-27 18:42	2011-03-28	Show	GitHub Exploit DB Packet Storm

250949	6.8	警告	arthurdejong	-	nss-pam-ldapd PAM モジュールにおける認証を回避される脆弱性	CWE-287 不適切な認証	CVE-2011-0438	2012-03-27 18:42	2011-03-15	Show	GitHub Exploit DB Packet Storm

250950	4	警告	GPLHost	-	DTC の shared/inc/sql/ssh.php における任意のアカウントを削除される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-0437	2012-03-27 18:42	2011-03-7	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 7, 2026, 4:13 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
247671	7.5	HIGH Network	block18	block18	The approveAndCallcode function of a smart contract implementation for Block 18 (18T), an tradable Ethereum ERC20 token, allows attackers to steal assets (e.g., transfer the contract's balances into …	CWE-20 Improper Input Validation	CVE-2018-12703	2024-11-21 12:45	2018-06-25	Show	GitHub Exploit DB Packet Storm

247672	7.5	HIGH Network	gve	globalvillage_ecosystem	The approveAndCallcode function of a smart contract implementation for Globalvillage ecosystem (GVE), an Ethereum ERC20 token, allows attackers to steal assets (e.g., transfer the contract's balances…	CWE-20 Improper Input Validation	CVE-2018-12702	2024-11-21 12:45	2018-06-25	Show	GitHub Exploit DB Packet Storm

247673	4.3	MEDIUM Adjacent	google	chromecast_firmware home_firmware	The API service on Google Home and Chromecast devices before mid-July 2018 does not prevent DNS rebinding attacks from reading the scan_results JSON data, which allows remote attackers to determine t…	CWE-200 Information Exposure	CVE-2018-12716	2024-11-21 12:45	2018-06-25	Show	GitHub Exploit DB Packet Storm

247674	9.8	CRITICAL Network	linux	linux_kernel	An issue was discovered in the Linux kernel through 4.17.2. The filter parsing in kernel/trace/trace_events_filter.c could be called with no filter, which is an N=0 case when it expected at least one…	CWE-787 Out-of-bounds Write	CVE-2018-12714	2024-11-21 12:45	2018-06-25	Show	GitHub Exploit DB Packet Storm

247675	9.8	CRITICAL Network	digisol	dg-br4000ng_firmware	DIGISOL DG-BR4000NG devices have a Buffer Overflow via a long Authorization HTTP header.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2018-12706	2024-11-21 12:45	2018-06-25	Show	GitHub Exploit DB Packet Storm

247676	6.1	MEDIUM Network	digisol	dg-br4000ng_firmware	DIGISOL DG-BR4000NG devices have XSS via the SSID (it is validated only on the client side).	CWE-79 Cross-site Scripting	CVE-2018-12705	2024-11-21 12:45	2018-06-25	Show	GitHub Exploit DB Packet Storm

247677	9.1	CRITICAL Network	gimp	gimp	GIMP through 2.10.2 makes g_get_tmp_dir calls to establish temporary filenames, which may result in a filename that already exists, as demonstrated by the gimp_write_and_read_file function in app/tes…	NVD-CWE-noinfo	CVE-2018-12713	2024-11-21 12:45	2018-06-25	Show	GitHub Exploit DB Packet Storm

247678	9.8	CRITICAL Network	gnu canonical	binutils ubuntu_linux	finish_stab in stabs.c in GNU Binutils 2.30 allows attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact, as demonstrated by an out-of-bounds w…	CWE-787 Out-of-bounds Write	CVE-2018-12699	2024-11-21 12:45	2018-06-24	Show	GitHub Exploit DB Packet Storm

247679	7.5	HIGH Network	gnu canonical	binutils ubuntu_linux	demangle_template in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.30, allows attackers to trigger excessive memory consumption (aka OOM) during the "Create an array for saving the t…	NVD-CWE-noinfo	CVE-2018-12698	2024-11-21 12:45	2018-06-24	Show	GitHub Exploit DB Packet Storm

247680	7.5	HIGH Network	gnu canonical	binutils ubuntu_linux	A NULL pointer dereference (aka SEGV on unknown address 0x000000000000) was discovered in work_stuff_copy_to_from in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.30. This can occur …	CWE-476 NULL Pointer Dereference	CVE-2018-12697	2024-11-21 12:45	2018-06-24	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed