Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 3, 2026, 6:08 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
251091	10	危険	Mozilla Foundation	-	Mozilla Firefox の WebSockets 実装における脆弱性	CWE-noinfo 情報不足	CVE-2010-4508	2012-03-27 18:42	2010-12-9	Show	GitHub Exploit DB Packet Storm

251092	9.3	危険	clear	-	ClearSpot の iSpot における管理者の認証をクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2010-4507	2012-03-27 18:42	2010-12-30	Show	GitHub Exploit DB Packet Storm

251093	6.8	警告	injader	-	Injader の login.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4505	2012-03-27 18:42	2010-12-8	Show	GitHub Exploit DB Packet Storm

251094	4.3	警告	Intelliants	-	eSyndiCat Directory におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-4504	2012-03-27 18:42	2010-12-8	Show	GitHub Exploit DB Packet Storm

251095	7.5	危険	aigaion	-	Aigaion の indexlight.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4503	2012-03-27 18:42	2010-12-8	Show	GitHub Exploit DB Packet Storm

251096	7.2	危険	CA Technologies	-	CA Internet Security Suite Plus の KmxSbx.sys における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2010-4502	2012-03-27 18:42	2010-12-8	Show	GitHub Exploit DB Packet Storm

251097	6.8	警告	mrcgiguy	-	MCG FreeTicket の contact.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4500	2012-03-27 18:42	2010-12-8	Show	GitHub Exploit DB Packet Storm

251098	9	危険	TIBCO Software	-	TIBCO ActiveMatrix Service Grid などで使用される ActiveMatrix Runtime コンポーネントにおける任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2010-4495	2012-03-27 18:42	2010-12-14	Show	GitHub Exploit DB Packet Storm

251099	4.3	警告	Google	-	Google Chrome におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2010-4493	2012-03-27 18:42	2010-12-7	Show	GitHub Exploit DB Packet Storm

251100	10	危険	Google	-	Google Chrome におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2010-4492	2012-03-27 18:42	2010-12-7	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 3, 2026, 4:18 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
248241	5.6	MEDIUM Local	xen debian	xen debian_linux	An issue was discovered in Xen through 4.10.x allowing x86 HVM guest OS users (in certain configurations) to read arbitrary dom0 files via QMP live insertion of a CDROM, in conjunction with specifyin…	CWE-200 Information Exposure	CVE-2018-10472	2024-11-21 12:41	2018-04-28	Show	GitHub Exploit DB Packet Storm

248242	6.5	MEDIUM Local	xen debian	xen debian_linux	An issue was discovered in Xen through 4.10.x allowing x86 PV guest OS users to cause a denial of service (out-of-bounds zero write and hypervisor crash) via unexpected INT 80 processing, because of …	CWE-787 Out-of-bounds Write	CVE-2018-10471	2024-11-21 12:41	2018-04-28	Show	GitHub Exploit DB Packet Storm

248243	9.8	CRITICAL Network	b3log	symphony	b3log Symphony (aka Sym) 2.6.0 allows remote attackers to upload and execute arbitrary JSP files via the name[] parameter to the /upload URI.	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2018-10469	2024-11-21 12:41	2018-04-27	Show	GitHub Exploit DB Packet Storm

248244	5.9	MEDIUM Network	google redhat oracle	guava virtualization_host virtualization openshift_container_platform satellite openstack satellite_capsule jboss_enterprise_application_platform flexcube_investor_servicing	Unbounded memory allocation in Google Guava 11.0 through 24.x before 24.1.1 allows remote attackers to conduct denial of service attacks against servers that depend on this library and deserialize at…	CWE-770 Allocation of Resources Without Limits or Throttling	CVE-2018-10237	2024-11-21 12:41	2018-04-27	Show	GitHub Exploit DB Packet Storm

248245	7.2	HIGH Network	d-link	dir-615_firmware	D-Link DIR-615 2.5.17 devices allow Remote Code Execution via shell metacharacters in the Host field of the System / Traceroute screen.	CWE-78 OS Command	CVE-2018-10431	2024-11-21 12:41	2018-04-27	Show	GitHub Exploit DB Packet Storm

248246	4.8	MEDIUM Network	dilicms	dilicms	An issue was discovered in DiliCMS (aka DiligentCMS) 2.4.0. There is a Stored XSS Vulnerability in the fourth textbox of "System setting->site setting" of admin/index.php.	CWE-79 Cross-site Scripting	CVE-2018-10430	2024-11-21 12:41	2018-04-27	Show	GitHub Exploit DB Packet Storm

248247	9.8	CRITICAL Network	cosmocms	cosmo	Cosmo 1.0.0Beta6 allows attackers to execute arbitrary PHP code via the Database Prefix field on the Database Info screen of install.php.	CWE-94 Code Injection	CVE-2018-10429	2024-11-21 12:41	2018-04-27	Show	GitHub Exploit DB Packet Storm

248248	7.8	HIGH Local	hz-soft	security_guard	An issue was discovered in Shanghai 2345 Security Guard 3.7.0. 2345MPCSafe.exe, 2345SafeTray.exe, and 2345Speedup.exe allow local users to bypass intended process protections, and consequently termin…	NVD-CWE-noinfo	CVE-2018-10425	2024-11-21 12:41	2018-04-26	Show	GitHub Exploit DB Packet Storm

248249	2.7	LOW Network	1234n	minicms	mc-admin/post-edit.php in MiniCMS 1.10 allows full path disclosure via a modified id field.	CWE-200 Information Exposure	CVE-2018-10424	2024-11-21 12:41	2018-04-26	Show	GitHub Exploit DB Packet Storm

248250	2.7	LOW Network	1234n	minicms	mc-admin/post.php in MiniCMS 1.10 allows remote attackers to obtain a directory listing of the top-level directory of the web root via a link that becomes available after posting an article.	CWE-200 Information Exposure	CVE-2018-10423	2024-11-21 12:41	2018-04-26	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed