Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 4, 2026, 4 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
250981	4.3	警告	Coppermine Photo Gallery	-	CPG におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-4667	2012-03-27 18:42	2011-06-14	Show	GitHub Exploit DB Packet Storm

250982	10	危険	CMS Made Simple	-	CMSMS のNews モジュールにおける詳細不明な脆弱性	CWE-noinfo 情報不足	CVE-2010-4663	2012-03-27 18:42	2011-06-8	Show	GitHub Exploit DB Packet Storm

250983	4.3	警告	Hastymail	-	Hastymail2 におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-4646	2012-03-27 18:42	2011-01-18	Show	GitHub Exploit DB Packet Storm

250984	10	危険	Novell	-	Novell GroupWise の IMAP サーバコンポーネンにおけるメモリ二重解放の脆弱性	CWE-399 リソース管理の問題	CVE-2010-4711	2012-03-27 18:42	2010-11-4	Show	GitHub Exploit DB Packet Storm

250985	4.3	警告	Yahoo!	-	YUI のメニューウィジェットにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-4710	2012-03-27 18:42	2010-12-16	Show	GitHub Exploit DB Packet Storm

250986	7.5	危険	Joomla!	-	Joomla! における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4696	2012-03-27 18:42	2010-11-4	Show	GitHub Exploit DB Packet Storm

250987	4.3	警告	XWiki	-	XWiki Enterprise におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-4642	2012-03-27 18:42	2010-12-30	Show	GitHub Exploit DB Packet Storm

250988	7.5	危険	XWiki	-	XWiki Enterprise における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4641	2012-03-27 18:42	2010-12-30	Show	GitHub Exploit DB Packet Storm

250989	4.3	警告	XWiki	-	XWiki Watch におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-4640	2012-03-27 18:42	2010-12-30	Show	GitHub Exploit DB Packet Storm

250990	7.5	危険	intendance	-	MySource Matrix の index.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4639	2012-03-27 18:42	2010-12-30	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 4, 2026, 4:17 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
248011	8.8	HIGH Network	quest	kace_system_management_appliance	The script '/adminui/error_details.php' in the Quest KACE System Management Appliance 8.0.318 allows authenticated users to conduct PHP object injection attacks.	CWE-1321 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')	CVE-2018-11135	2024-11-21 12:42	2018-06-1	Show	GitHub Exploit DB Packet Storm

248012	8.8	HIGH Network	quest	kace_system_management_appliance	In order to perform actions that requires higher privileges, the Quest KACE System Management Appliance 8.0.318 relies on a message queue managed that runs with root privileges and only allows a set …	CWE-640 Weak Password Recovery Mechanism for Forgotten Password	CVE-2018-11134	2024-11-21 12:42	2018-06-1	Show	GitHub Exploit DB Packet Storm

248013	6.1	MEDIUM Network	quest	kace_system_management_appliance	The 'fmt' parameter of the '/common/run_cross_report.php' script in the the Quest KACE System Management Appliance 8.0.318 is vulnerable to cross-site scripting.	CWE-79 Cross-site Scripting	CVE-2018-11133	2024-11-21 12:42	2018-06-1	Show	GitHub Exploit DB Packet Storm

248014	8.8	HIGH Network	quest	kace_system_management_appliance	In order to perform actions that require higher privileges, the Quest KACE System Management Appliance 8.0.318 relies on a message queue that runs daemonized with root privileges and only allows a se…	CWE-78 OS Command	CVE-2018-11132	2024-11-21 12:42	2018-06-1	Show	GitHub Exploit DB Packet Storm

248015	8.8	HIGH Network	bitmain	antminer_d3_firmware antminer_l3\+_firmware antminer_s9_firmware	Bitmain Antminer D3, L3+, and S9 devices allow Remote Command Execution via the system restore function.	NVD-CWE-noinfo	CVE-2018-11220	2024-11-21 12:42	2018-06-1	Show	GitHub Exploit DB Packet Storm

248016	9.1	CRITICAL Network	ruckuswireless	vsz_firmware scg-200_firmware sz-300_firmware sz-100_firmware	Ruckus SmartZone (formerly Virtual SmartCell Gateway or vSCG) 3.5.0, 3.5.1, 3.6.0, and 3.6.1 (Essentials and High Scale) on vSZ, SZ-100, SZ-300, and SCG-200 devices allows remote attackers to obtain …	CWE-200 Information Exposure	CVE-2018-11036	2024-11-21 12:42	2018-05-31	Show	GitHub Exploit DB Packet Storm

248017	6.1	MEDIUM Network	zimbra synacor	zimbra_collaboration_suite	Zimbra Web Client (ZWC) in Zimbra Collaboration Suite 8.8 before 8.8.8.Patch4 and 8.7 before 8.7.11.Patch4 has Persistent XSS via a contact group.	CWE-79 Cross-site Scripting	CVE-2018-10939	2024-11-21 12:42	2018-05-31	Show	GitHub Exploit DB Packet Storm

248018	5.3	MEDIUM Network	schedmd debian	slurm debian_linux	SchedMD Slurm before 17.02.11 and 17.1x.x before 17.11.7 mishandles user names (aka user_name fields) and group ids (aka gid fields).	CWE-20 Improper Input Validation	CVE-2018-10995	2024-11-21 12:42	2018-05-31	Show	GitHub Exploit DB Packet Storm

248019	7.5	HIGH Network	canonical git-scm	ubuntu_linux git	In Git before 2.13.7, 2.14.x before 2.14.4, 2.15.x before 2.15.2, 2.16.x before 2.16.4, and 2.17.x before 2.17.1, code to sanity-check pathnames on NTFS can result in reading out-of-bounds memory.	CWE-125 Out-of-bounds Read	CVE-2018-11233	2024-11-21 12:42	2018-05-30	Show	GitHub Exploit DB Packet Storm

248020	7.8	HIGH Local	debian canonical redhat git-scm gitforwindows	debian_linux ubuntu_linux enterprise_linux_desktop enterprise_linux_workstation enterprise_linux enterprise_linux_server enterprise_linux_server_eus git	In Git before 2.13.7, 2.14.x before 2.14.4, 2.15.x before 2.15.2, 2.16.x before 2.16.4, and 2.17.x before 2.17.1, remote code execution can occur. With a crafted .gitmodules file, a malicious project…	CWE-22 Path Traversal	CVE-2018-11235	2024-11-21 12:42	2018-05-30	Show	GitHub Exploit DB Packet Storm