Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 6, 2026, noon

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
251071	5	警告	enanocms	-	Enano CMS における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2010-4781	2012-03-27 18:42	2011-04-7	Show	GitHub Exploit DB Packet Storm

251072	7.5	危険	enanocms	-	Enano CMS の check_banlist 関数における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4780	2012-03-27 18:42	2011-04-7	Show	GitHub Exploit DB Packet Storm

251073	4.3	警告	BraveNewCode WordPress.org	-	WordPress の WPtouch プラグインにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-4779	2012-03-27 18:42	2011-04-7	Show	GitHub Exploit DB Packet Storm

251074	4.3	警告	Horde	-	Horde Groupware Webmail Edition のfetchmailprefs.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-4778	2012-03-27 18:42	2011-04-4	Show	GitHub Exploit DB Packet Storm

251075	7.5	危険	PreProject.com	-	PreProjects Pre Online Tests Generator Pro の takefreestart.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4776	2012-03-27 18:42	2011-03-23	Show	GitHub Exploit DB Packet Storm

251076	7.5	危険	AuraCMS	-	AuraCMS における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4774	2012-03-27 18:42	2011-03-23	Show	GitHub Exploit DB Packet Storm

251077	4.3	警告	matteoiammarrone	-	S-CMS の blocks/lang.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-4772	2012-03-27 18:42	2011-03-23	Show	GitHub Exploit DB Packet Storm

251078	4	警告	IBM	-	IBM Tivoli Directory Server (TDS) のプロキシサーバ実装におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2010-4789	2012-03-27 18:42	2010-10-29	Show	GitHub Exploit DB Packet Storm

251079	4	警告	IBM	-	IBM TDS におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2010-4788	2012-03-27 18:42	2010-02-10	Show	GitHub Exploit DB Packet Storm

251080	4	警告	IBM	-	IBM TDS におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2010-4787	2012-03-27 18:42	2010-06-9	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 6, 2026, 4:18 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
247701	6.5	MEDIUM Local	intel debian opensuse fedoraproject canonical f5 redhat oracle	core_i3-10110u_firmware core_i3-10110y_firmware core_i3-1005g1_firmware core_i3-9300t_firmware core_i3-9300_firmware core_i3-9100_firmware core_i3-9100t_firmware core_i3-9350k_fi…	Improper invalidation for page table updates by a virtual guest operating system for multiple Intel(R) Processors may allow an authenticated user to potentially enable denial of service of the host s…	CWE-20 Improper Input Validation	CVE-2018-12207	2024-11-21 12:44	2019-11-15	Show	GitHub Exploit DB Packet Storm

247702	6.5	MEDIUM Network	apache	subversion	In Apache Subversion versions up to and including 1.9.10, 1.10.4, 1.12.0, Subversion's svnserve server process may exit when a well-formed read-only request produces a particular answer. This can lea…	CWE-20 Improper Input Validation	CVE-2018-11782	2024-11-21 12:44	2019-09-27	Show	GitHub Exploit DB Packet Storm

247703	5.4	MEDIUM Network	clippercms	clippercms	CMS Clipper 1.3.3 has XSS in the Security tab search, User Groups, Resource Groups, and User/Resource Group Links fields.	CWE-79 Cross-site Scripting	CVE-2018-12101	2024-11-21 12:44	2019-08-16	Show	GitHub Exploit DB Packet Storm

247704	7.2	HIGH Network	apache	virtual_computing_lab	Apache VCL versions 2.1 through 2.5 do not properly validate form input when adding and removing VMs to and from hosts. The form data is then used in SQL statements. This allows for an SQL injection …	CWE-89 SQL Injection	CVE-2018-11774	2024-11-21 12:44	2019-07-30	Show	GitHub Exploit DB Packet Storm

247705	9.8	CRITICAL Network	apache	virtual_computing_lab	Apache VCL versions 2.1 through 2.5 do not properly validate form input when processing a submitted block allocation. The form data is then used as an argument to the php built in function strtotime.…	CWE-20 Improper Input Validation	CVE-2018-11773	2024-11-21 12:44	2019-07-30	Show	GitHub Exploit DB Packet Storm

247706	7.2	HIGH Network	apache	virtual_computing_lab	Apache VCL versions 2.1 through 2.5 do not properly validate cookie input when determining what node (if any) was previously selected in the privilege tree. The cookie data is then used in an SQL sta…	CWE-89 SQL Injection	CVE-2018-11772	2024-11-21 12:44	2019-07-30	Show	GitHub Exploit DB Packet Storm

247707	9.8	CRITICAL Network	apache	storm	In Apache Storm versions 1.1.0 to 1.2.2, when the user is using the storm-kafka-client or storm-kafka modules, it is possible to cause the Storm UI daemon to deserialize user provided bytes into a Ja…	CWE-502 Deserialization of Untrusted Data	CVE-2018-11779	2024-11-21 12:44	2019-07-26	Show	GitHub Exploit DB Packet Storm

247708	7.2	HIGH Network	elitecms	elite_cms	An issue was discovered in Elite CMS Pro 2.01. In /admin/add_sidebar.php, the ?page= parameter is vulnerable to SQL injection.	CWE-89 SQL Injection	CVE-2018-12250	2024-11-21 12:44	2019-07-4	Show	GitHub Exploit DB Packet Storm

247709	9.8	CRITICAL Network	qualcomm	mdm9150_firmware mdm9206_firmware mdm9607_firmware mdm9640_firmware mdm9650_firmware msm8909w_firmware msm8996au_firmware qca6174a_firmware qca6574au_firmware qca9377_firmw…	Lack of check on length of reason-code fetched from payload may lead driver access the memory not allocated to the frame and results in out of bound read in Snapdragon Auto, Snapdragon Consumer Elect…	CWE-125 Out-of-bounds Read	CVE-2018-11955	2024-11-21 12:44	2019-06-15	Show	GitHub Exploit DB Packet Storm

247710	5.5	MEDIUM Local	qualcomm	ipq8064_firmware mdm9150_firmware mdm9206_firmware mdm9607_firmware mdm9640_firmware mdm9650_firmware msm8996au_firmware qca6174a_firmware qca6574au_firmware qca9377_firmwa…	The txrx stats req might be double freed in the pdev detach when the host driver is unloading in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Ind…	CWE-415 Double Free	CVE-2018-11947	2024-11-21 12:44	2019-06-15	Show	GitHub Exploit DB Packet Storm