Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 12, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
251101 9.3 危険 シスコシステムズ - Cisco WebEx Recording Format (WRF) Player におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2012-1336 2012-04-6 15:41 2012-04-4 Show GitHub Exploit DB Packet Storm
251102 9.3 危険 シスコシステムズ - Cisco WebEx Recording Format (WRF) Player におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2012-1335 2012-04-6 15:40 2012-04-4 Show GitHub Exploit DB Packet Storm
251103 5.8 警告 株式会社アイシーズ - せん茶SNS におけるセッション固定の脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-1238 2012-04-5 14:03 2012-04-5 Show GitHub Exploit DB Packet Storm
251104 2.6 注意 株式会社アイシーズ - せん茶SNS におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2012-1237 2012-04-5 14:02 2012-04-5 Show GitHub Exploit DB Packet Storm
251105 6.4 警告 東芝テック - 東芝テック製 e-Studio シリーズにおける認証回避の脆弱性 CWE-287
不適切な認証 		CVE-2012-1239 2012-04-5 14:01 2012-04-5 Show GitHub Exploit DB Packet Storm
251106 6.8 警告 Scadatec Limited
TurboPower Abbrevia		 - TurboPower Abbrevia におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2011-4535 2012-04-4 16:46 2011-12-28 Show GitHub Exploit DB Packet Storm
251107 4.3 警告 ARC Informatique - 複数の ARC Informatique 製品の ActiveX コントロールにおけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2011-4045 2012-04-4 16:44 2011-09-28 Show GitHub Exploit DB Packet Storm
251108 5.8 警告 ARC Informatique - 複数の ARC Informatique 製品の ActiveX コントロールにおけるファイルを変更される脆弱性 CWE-noinfo
情報不足 		CVE-2011-4044 2012-04-4 16:40 2011-09-28 Show GitHub Exploit DB Packet Storm
251109 9.3 危険 ARC Informatique - 複数の ARC Informatique 製品の ActiveX コントロールにおける整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2011-4043 2012-04-4 16:40 2011-09-28 Show GitHub Exploit DB Packet Storm
251110 9.3 危険 ARC Informatique - 複数の ARC Informatique 製品の ActiveX コントロールにおける任意のコードを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2011-4042 2012-04-4 16:38 2011-09-28 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 12, 2026, 4:20 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
247171 7.5 HIGH
Network 		embedthis
juniper 		appweb
goahead
junos 		An issue was discovered in Embedthis GoAhead before 4.0.1 and Appweb before 7.0.2. An HTTP POST request with a specially crafted "Host" header field may cause a NULL pointer dereference and thus caus… CWE-476
 NULL Pointer Dereference 		CVE-2018-15505 2024-11-21 12:50 2018-08-18 Show GitHub Exploit DB Packet Storm
247172 7.5 HIGH
Network 		embedthis
juniper 		appweb
goahead
junos 		An issue was discovered in Embedthis GoAhead before 4.0.1 and Appweb before 7.0.2. The server mishandles some HTTP request fields associated with time, which results in a NULL pointer dereference, as… CWE-476
 NULL Pointer Dereference 		CVE-2018-15504 2024-11-21 12:50 2018-08-18 Show GitHub Exploit DB Packet Storm
247173 7.5 HIGH
Network 		swoole swoole The unpack implementation in Swoole version 4.0.4 lacks correct size checks in the deserialization process. An attacker can craft a serialized object to exploit this vulnerability and cause a SEGV. CWE-502
 Deserialization of Untrusted Data 		CVE-2018-15503 2024-11-21 12:50 2018-08-18 Show GitHub Exploit DB Packet Storm
247174 7.5 HIGH
Network 		debian
libgit2 		debian_linux
libgit2 		In ng_pkt in transports/smart_pkt.c in libgit2 before 0.26.6 and 0.27.x before 0.27.4, a remote attacker can send a crafted smart-protocol "ng" packet that lacks a '\0' byte to trigger an out-of-boun… CWE-125
Out-of-bounds Read 		CVE-2018-15501 2024-11-21 12:50 2018-08-18 Show GitHub Exploit DB Packet Storm
247175 7.5 HIGH
Network 		tecrail responsive_filemanager /filemanager/upload.php in Responsive FileManager before 9.13.3 allows Directory Traversal and SSRF because the url parameter is used directly in a curl_exec call, as demonstrated by a file:///etc/pa… CWE-22
Path Traversal 		CVE-2018-15495 2024-11-21 12:50 2018-08-18 Show GitHub Exploit DB Packet Storm
247176 9.8 CRITICAL
Network 		dojotoolkit
debian 		dojo
debian_linux 		In Dojo Toolkit before 1.14, there is unescaped string injection in dojox/Grid/DataGrid. CWE-116
 Improper Encoding or Escaping of Output 		CVE-2018-15494 2024-11-21 12:50 2018-08-18 Show GitHub Exploit DB Packet Storm
247177 7.5 HIGH
Network 		gemalto sentinel_license_manager A vulnerability in the lservnt.exe component of Sentinel License Manager version 8.5.3.35 (fixed in 8.5.3.2403) causes UDP amplification. CWE-405
 Asymmetric Resource Consumption (Amplification) 		CVE-2018-15492 2024-11-21 12:50 2018-08-18 Show GitHub Exploit DB Packet Storm
247178 7.5 HIGH
Network 		zemana antilogger A vulnerability in the permission and encryption implementation of Zemana Anti-Logger 1.9.3.527 and prior (fixed in 1.9.3.602) allows an attacker to take control of the whitelisting feature (MyRules2… CWE-798
CWE-732
 Use of Hard-coded Credentials
 Incorrect Permission Assignment for Critical Resource 		CVE-2018-15491 2024-11-21 12:50 2018-08-18 Show GitHub Exploit DB Packet Storm
247179 9.8 CRITICAL
Network 		google android Certain LG devices based on Android 6.0 through 8.1 have incorrect access control for MLT application intents. The LG ID is LVE-SMP-180006. CWE-732
 Incorrect Permission Assignment for Critical Resource 		CVE-2018-15482 2024-11-21 12:50 2018-08-18 Show GitHub Exploit DB Packet Storm
247180 9.8 CRITICAL
Network 		google android Certain LG devices based on Android 6.0 through 8.1 have incorrect access control in the GNSS application. The LG ID is LVE-SMP-180004. CWE-732
 Incorrect Permission Assignment for Critical Resource 		CVE-2018-14982 2024-11-21 12:50 2018-08-18 Show GitHub Exploit DB Packet Storm