Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 3, 2026, 6:08 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
250991 7.5 危険 PilotCart - ASPilot Pilot Cart における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-4632 2012-03-27 18:42 2010-12-30 Show GitHub Exploit DB Packet Storm
250992 4.3 警告 PilotCart - ASPilot Pilot Cart におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-4631 2012-03-27 18:42 2010-12-30 Show GitHub Exploit DB Packet Storm
250993 4.3 警告 fubra - WordPress の WP Survey And Quiz Tool プラグインにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-4630 2012-03-27 18:42 2010-12-30 Show GitHub Exploit DB Packet Storm
250994 5 警告 MyBB Group - MyBB におけるサービス運用妨害 (DoS) の脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2010-4629 2012-03-27 18:42 2010-02-1 Show GitHub Exploit DB Packet Storm
250995 5 警告 MyBB Group - MyBB の member.php におけるサービス運用妨害 (DoS) の脆弱性 CWE-DesignError
CVE-2010-4628 2012-03-27 18:42 2010-01-8 Show GitHub Exploit DB Packet Storm
250996 6.8 警告 MyBB Group - MyBB の usercp2.php におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2010-4627 2012-03-27 18:42 2010-04-6 Show GitHub Exploit DB Packet Storm
250997 5.1 警告 MyBB Group - MyBB の my_rand 関数における任意のアカウントへのアクセスを取得される脆弱性 CWE-310
暗号の問題
CVE-2010-4626 2012-03-27 18:42 2010-04-3 Show GitHub Exploit DB Packet Storm
250998 5 警告 MyBB Group - MyBB における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2010-4625 2012-03-27 18:42 2010-03-15 Show GitHub Exploit DB Packet Storm
250999 3.5 注意 MyBB Group - MyBB における [img] MyCodes の数の制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2010-4624 2012-03-27 18:42 2010-02-2 Show GitHub Exploit DB Packet Storm
251000 4 警告 IBM - IBM Tivoli Access Manager for e-business の WebSEAL におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2010-4623 2012-03-27 18:42 2010-12-30 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 3, 2026, 4:18 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
248271 6.1 MEDIUM
Network
user_project user An issue was discovered in the Users (aka Front-end user management) plugin 1.4.5 for October CMS. XSS exists in the name field. CWE-79
Cross-site Scripting
CVE-2018-10366 2024-11-21 12:41 2018-04-25 Show GitHub Exploit DB Packet Storm
248272 5.4 MEDIUM
Network
catapultthemes cookie_consent A persistent cross-site scripting vulnerability has been identified in the web interface of the Catapult UK Cookie Consent plugin before 2.3.10 for WordPress that allows the execution of arbitrary HT… CWE-79
Cross-site Scripting
CVE-2018-10310 2024-11-21 12:41 2018-04-25 Show GitHub Exploit DB Packet Storm
248273 9.8 CRITICAL
Network
phpliteadmin phpliteadmin An issue was discovered in phpLiteAdmin 1.9.5 through 1.9.7.1. Due to loose comparison with '==' instead of '===' in classes/Authorization.php for the user-provided login password, it is possible to … CWE-287
Improper Authentication
CVE-2018-10362 2024-11-21 12:41 2018-04-25 Show GitHub Exploit DB Packet Storm
248274 7.8 HIGH
Local
kde ktexteditor An issue was discovered in KTextEditor 5.34.0 through 5.45.0. Insecure handling of temporary files in the KTextEditor's kauth_ktexteditor_helper service (as utilized in the Kate text editor) can allo… CWE-668
 Exposure of Resource to Wrong Sphere
CVE-2018-10361 2024-11-21 12:41 2018-04-25 Show GitHub Exploit DB Packet Storm
248275 6.1 MEDIUM
Network
phpipam phpipam app/tools/mac-lookup/index.php in phpIPAM 1.3.1 has Reflected XSS on /tools/mac-lookup/ via the mac parameter. CWE-79
Cross-site Scripting
CVE-2018-10329 2024-11-21 12:41 2018-04-24 Show GitHub Exploit DB Packet Storm
248276 7.4 HIGH
Adjacent
momentum momentum_axel_720p_firmware Momentum Axel 720P 5.1.8 devices have a hardcoded password of streaming for the appagent account, which allows remote attackers to view the RTSP video stream. CWE-798
 Use of Hard-coded Credentials
CVE-2018-10328 2024-11-21 12:41 2018-04-24 Show GitHub Exploit DB Packet Storm
248277 5.5 MEDIUM
Local
linux
canonical
debian
linux_kernel
ubuntu_linux
debian_linux
The xfs_bmap_extents_to_btree function in fs/xfs/libxfs/xfs_bmap.c in the Linux kernel through 4.16.3 allows local users to cause a denial of service (xfs_bmapi_write NULL pointer dereference) via a … CWE-476
 NULL Pointer Dereference
CVE-2018-10323 2024-11-21 12:41 2018-04-24 Show GitHub Exploit DB Packet Storm
248278 5.5 MEDIUM
Local
linux
redhat
linux_kernel
enterprise_linux_desktop
enterprise_linux_workstation
enterprise_linux_server
virtualization_host
The xfs_dinode_verify function in fs/xfs/libxfs/xfs_inode_buf.c in the Linux kernel through 4.16.3 allows local users to cause a denial of service (xfs_ilock_attr_map_shared invalid pointer dereferen… CWE-476
 NULL Pointer Dereference
CVE-2018-10322 2024-11-21 12:41 2018-04-24 Show GitHub Exploit DB Packet Storm
248279 4.8 MEDIUM
Network
frogcms_project frogcms Frog CMS 0.9.5 has a stored Cross Site Scripting Vulnerability via "Admin Site title" in Settings. CWE-79
Cross-site Scripting
CVE-2018-10321 2024-11-21 12:41 2018-04-24 Show GitHub Exploit DB Packet Storm
248280 4.8 MEDIUM
Network
frogcms_project frogcms Frog CMS 0.9.5 has XSS via the admin/?/layout/edit layout[name] parameter, aka Edit Layout. CWE-79
Cross-site Scripting
CVE-2018-10320 2024-11-21 12:41 2018-04-24 Show GitHub Exploit DB Packet Storm