Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 1, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
251021	4.3	警告	ヒューレット・パッカード	-	HP Insight Control Server Migration におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-3991	2012-03-27 18:42	2010-10-25	Show	GitHub Exploit DB Packet Storm

251022	5	警告	ヒューレット・パッカード	-	HP Virtual Server Environment における任意のファイルを読まれる脆弱性	CWE-noinfo 情報不足	CVE-2010-3990	2012-03-27 18:42	2010-10-25	Show	GitHub Exploit DB Packet Storm

251023	6.8	警告	ヒューレット・パッカード	-	HP Insight Control Virtual Machine Management におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2010-3989	2012-03-27 18:42	2010-10-25	Show	GitHub Exploit DB Packet Storm

251024	5	警告	ヒューレット・パッカード	-	HP Insight Control Virtual Machine Management におけるアクセス制限を回避する脆弱性	CWE-noinfo 情報不足	CVE-2010-3988	2012-03-27 18:42	2010-10-25	Show	GitHub Exploit DB Packet Storm

251025	4.3	警告	ヒューレット・パッカード	-	HP Insight Control Virtual Machine Management におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-3987	2012-03-27 18:42	2010-10-25	Show	GitHub Exploit DB Packet Storm

251026	5	警告	ヒューレット・パッカード	-	HP VCEM における任意のファイルを読まれる脆弱性	CWE-noinfo 情報不足	CVE-2010-3986	2012-03-27 18:42	2010-10-21	Show	GitHub Exploit DB Packet Storm

251027	4.3	警告	ヒューレット・パッカード	-	HP Operations Orchestration におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-3985	2012-03-27 18:42	2010-10-20	Show	GitHub Exploit DB Packet Storm

251028	9	危険	SAP	-	SAP BusinessObjects Enterprise の CmcApp における権限を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-3983	2012-03-27 18:42	2010-10-18	Show	GitHub Exploit DB Packet Storm

251029	5	警告	SAP	-	SAP BusinessObjects Enterprise における任意のポートおよびイントラネットホストへの TCP 接続を誘発する脆弱性	CWE-200 情報漏えい	CVE-2010-3982	2012-03-27 18:42	2010-10-18	Show	GitHub Exploit DB Packet Storm

251030	4.3	警告	SAP	-	SAP BusinessObjects Enterprise におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-3981	2012-03-27 18:42	2010-10-18	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 1, 2026, 4:12 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
248301	7.8	HIGH Local	microsoft	windows_10 windows_server_2016	An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory, aka "Windows Kernel Elevation of Privilege Vulnerability." This affects Windows Server 201…	NVD-CWE-noinfo	CVE-2018-0963	2024-11-21 12:39	2018-04-12	Show	GitHub Exploit DB Packet Storm

248302	5.3	MEDIUM Local	microsoft	windows_server_2012 windows_10 windows_server_2016 windows_8.1 windows_rt_8.1	An information disclosure vulnerability exists when Windows Hyper-V on a host operating system fails to properly validate input from an authenticated user on a guest operating system, aka "Hyper-V In…	CWE-20 Improper Input Validation	CVE-2018-0957	2024-11-21 12:39	2018-04-12	Show	GitHub Exploit DB Packet Storm

248303	5.3	MEDIUM Network	microsoft	windows_server_2012 windows_10 windows_server_2016 windows_8.1 windows_server_2008 windows_7 windows_rt_8.1	A denial of service vulnerability exists in Remote Desktop Protocol (RDP) when an attacker connects to the target system using RDP and sends specially crafted requests, aka "Windows Remote Desktop Pr…	NVD-CWE-noinfo	CVE-2018-0976	2024-11-21 12:39	2018-04-12	Show	GitHub Exploit DB Packet Storm

248304	5.5	MEDIUM Local	microsoft	windows_server_2012 windows_server_2008 windows_server_2016 windows_10 windows_7 windows_8.1 windows_rt_8.1	An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve information that could lead to a Kernel Address Space Layout Randomization (ASLR) bypass,…	NVD-CWE-noinfo	CVE-2018-0975	2024-11-21 12:39	2018-04-12	Show	GitHub Exploit DB Packet Storm

248305	5.5	MEDIUM Local	microsoft	windows_server_2012 windows_server_2008 windows_server_2016 windows_10 windows_7 windows_8.1 windows_rt_8.1	An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve information that could lead to a Kernel Address Space Layout Randomization (ASLR) bypass,…	NVD-CWE-noinfo	CVE-2018-0974	2024-11-21 12:39	2018-04-12	Show	GitHub Exploit DB Packet Storm

248306	7.5	HIGH Network	microsoft	windows_10 windows_server_2016	A denial of service vulnerability exists in the HTTP 2.0 protocol stack (HTTP.sys) when HTTP.sys improperly parses specially crafted HTTP 2.0 requests, aka "HTTP.sys Denial of Service Vulnerability."…	NVD-CWE-noinfo	CVE-2018-0956	2024-11-21 12:39	2018-04-12	Show	GitHub Exploit DB Packet Storm

248307	6.5	MEDIUM Network	microsoft	office_compatibility_pack office word	An information disclosure vulnerability exists when Office renders Rich Text Format (RTF) email messages containing OLE objects when a message is opened or previewed, aka "Microsoft Office Informatio…	NVD-CWE-noinfo	CVE-2018-0950	2024-11-21 12:39	2018-04-12	Show	GitHub Exploit DB Packet Storm

248308	7.8	HIGH Local	microsoft	excel	A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "Microsoft Excel Remote Code Execution Vulnerability." This …	NVD-CWE-noinfo	CVE-2018-0920	2024-11-21 12:39	2018-04-12	Show	GitHub Exploit DB Packet Storm

248309	5.5	MEDIUM Local	microsoft	windows_server_2012 windows_server_2008 windows_server_2016 windows_10 windows_7 windows_8.1 windows_rt_8.1	An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve information that could lead to a Kernel Address Space Layout Randomization (ASLR) bypass,…	NVD-CWE-noinfo	CVE-2018-0973	2024-11-21 12:39	2018-04-12	Show	GitHub Exploit DB Packet Storm

248310	5.5	MEDIUM Local	microsoft	windows_server_2012 windows_server_2008 windows_server_2016 windows_10 windows_7 windows_8.1 windows_rt_8.1	An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve information that could lead to a Kernel Address Space Layout Randomization (ASLR) bypass,…	NVD-CWE-noinfo	CVE-2018-0972	2024-11-21 12:39	2018-04-12	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed