Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 7, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
251051	7.5	危険	Wafer	-	Webmatic の index.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4808	2012-03-27 18:42	2011-07-8	Show	GitHub Exploit DB Packet Storm

251052	3.5	注意	IBM	-	IBM WCM におけるサービス運用妨害 (DoS) の脆弱性	CWE-362 競合状態	CVE-2010-4807	2012-03-27 18:42	2011-04-3	Show	GitHub Exploit DB Packet Storm

251053	10	危険	mojolicious	-	Mojolicious における詳細不明な脆弱性	CWE-20 不適切な入力確認	CVE-2010-4803	2012-03-27 18:42	2011-05-2	Show	GitHub Exploit DB Packet Storm

251054	10	危険	mojolicious	-	Mojolicious の Commands.pm における詳細不明な脆弱性	CWE-20 不適切な入力確認	CVE-2010-4802	2012-03-27 18:42	2011-05-2	Show	GitHub Exploit DB Packet Storm

251055	6	警告	baconmap	-	BaconMap の admin/updatelist.php におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2010-4801	2012-03-27 18:42	2011-04-26	Show	GitHub Exploit DB Packet Storm

251056	7.5	危険	baconmap	-	BaconMap の doadd.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4800	2012-03-27 18:42	2011-04-26	Show	GitHub Exploit DB Packet Storm

251057	6.8	警告	Chipmunk Scripts	-	Chipmunk Pwngame における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4799	2012-03-27 18:42	2011-04-26	Show	GitHub Exploit DB Packet Storm

251058	6.8	警告	OrangeHRM	-	OrangeHRM におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2010-4798	2012-03-27 18:42	2011-04-26	Show	GitHub Exploit DB Packet Storm

251059	7.5	危険	truworthit	-	Truworth Flex Timesheet のログインフォームにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4797	2012-03-27 18:42	2011-04-26	Show	GitHub Exploit DB Packet Storm

251060	7.5	危険	phpyun	-	PHPYun における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4796	2012-03-27 18:42	2011-04-26	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 7, 2026, 4:13 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
248201	7.8	HIGH Local	owasp	dependency-check	OWASP Dependency-Check before 3.2.0 allows attackers to write to arbitrary files via a crafted archive that holds directory traversal filenames.	CWE-22 CWE-123 Path Traversal Write-what-where Condition	CVE-2018-12036	2024-11-21 12:44	2018-06-8	Show	GitHub Exploit DB Packet Storm

248202	9.8	CRITICAL Network	eaton	intelligent_power_manager	Local file inclusion in Eaton Intelligent Power Manager v1.6 allows an attacker to include a file via server/node_upgrade_srv.js directory traversal with the firmware parameter in a downloadFirmware …	CWE-22 Path Traversal	CVE-2018-12031	2024-11-21 12:44	2018-06-8	Show	GitHub Exploit DB Packet Storm

248203	7.5	HIGH Network	gnome	epiphany	libephymain.so in GNOME Web (aka Epiphany) through 3.28.2.1 allows remote attackers to cause a denial of service (application crash) via certain window.open and document.write calls.	NVD-CWE-noinfo	CVE-2018-12016	2024-11-21 12:44	2018-06-7	Show	GitHub Exploit DB Packet Storm

248204	7.5	HIGH Network	canonical debian perl archive\ apple netapp	ubuntu_linux debian_linux perl \ mac_os_x snap_creator_framework data_ontap_edge snapdrive oncommand_workflow_automation	In Perl through 5.26.2, the Archive::Tar module allows remote attackers to bypass a directory-traversal protection mechanism, and overwrite arbitrary files, via an archive file containing a symlink a…	CWE-59 Link Following	CVE-2018-12015	2024-11-21 12:44	2018-06-7	Show	GitHub Exploit DB Packet Storm

248205	7.5	HIGH Network	ijg	libjpeg	libjpeg 9c has a large loop because read_pixel in rdtarga.c mishandles EOF.	CWE-834 Excessive Iteration	CVE-2018-11813	2024-11-21 12:44	2018-06-6	Show	GitHub Exploit DB Packet Storm

248206	9.1	CRITICAL Network	zohocorp	manageengine_applications_manager	Incorrect Access Control in CustomFieldsFeedServlet in Zoho ManageEngine Applications Manager Version 13 before build 13740 allows an attacker to delete any file and read certain files on the server …	CWE-20 Improper Input Validation	CVE-2018-11808	2024-11-21 12:44	2018-06-6	Show	GitHub Exploit DB Packet Storm

248207	8.8	HIGH Network	apache	hadoop	Web endpoint authentication check is broken in Apache Hadoop 3.0.0-alpha4, 3.0.0-beta1, and 3.0.0. Authenticated users may impersonate any user even if no proxy user is configured.	CWE-306 Missing Authentication for Critical Function	CVE-2018-11764	2024-11-21 12:43	2020-10-22	Show	GitHub Exploit DB Packet Storm

248208	7.5	HIGH Network	apache	hadoop	In Apache Hadoop versions 3.0.0-alpha2 to 3.0.0, 2.9.0 to 2.9.2, 2.8.0 to 2.8.5, any users can access some servlets without authentication when Kerberos authentication is enabled and SPNEGO through H…	CWE-287 Improper Authentication	CVE-2018-11765	2024-11-21 12:43	2020-10-1	Show	GitHub Exploit DB Packet Storm

248209	5.4	MEDIUM Adjacent	puppet	puppet_server	Previous versions of Puppet Agent didn't verify the peer in the SSL connection prior to downloading the CRL. This issue is resolved in Puppet Agent 6.4.0.	CWE-295 Improper Certificate Validation	CVE-2018-11751	2024-11-21 12:43	2019-12-17	Show	GitHub Exploit DB Packet Storm

248210	7.5	HIGH Network	apache	hadoop	In Apache Hadoop 3.1.0 to 3.1.1, 3.0.0-alpha1 to 3.0.3, 2.9.0 to 2.9.1, and 2.0.0-alpha to 2.8.4, the user/group information can be corrupted across storing in fsimage and reading back from fsimage.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2018-11768	2024-11-21 12:43	2019-10-4	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed