Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 3, 2026, 2:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
251111	4.3	警告	Horde	-	Horde IMP および Horde Groupware Webmail Edition の fetchmailprefs.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-3695	2012-03-27 18:42	2011-03-31	Show	GitHub Exploit DB Packet Storm

251112	4.3	警告	Horde	-	Horde DIMP および Horde Groupware Webmail Edition におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-3693	2012-03-27 18:42	2011-04-4	Show	GitHub Exploit DB Packet Storm

251113	6.8	警告	Horde	-	Horde Application Framework におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2010-3694	2012-03-27 18:42	2010-11-9	Show	GitHub Exploit DB Packet Storm

251114	6.4	警告	Jasig	-	phpCAS の callback 関数におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2010-3692	2012-03-27 18:42	2010-10-7	Show	GitHub Exploit DB Packet Storm

251115	3.3	注意	Jasig	-	phpCAS の PGTStorage/pgt-file.php における任意のファイルを上書きされる脆弱性	CWE-59 リンク解釈の問題	CVE-2010-3691	2012-03-27 18:42	2010-10-7	Show	GitHub Exploit DB Packet Storm

251116	4.3	警告	Jasig	-	phpCAS におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-3690	2012-03-27 18:42	2010-10-7	Show	GitHub Exploit DB Packet Storm

251117	7.5	危険	NetArt Media	-	NetArtMEDIA WebSiteAdmin の ADMIN/login.php におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2010-3688	2012-03-27 18:42	2010-09-29	Show	GitHub Exploit DB Packet Storm

251118	5	警告	Alex Kellner TYPO3 Association	-	TYPO3 の powermail extension における検証を回避される脆弱性	CWE-noinfo 情報不足	CVE-2010-3687	2012-03-27 18:42	2010-09-22	Show	GitHub Exploit DB Packet Storm

251119	2.1	注意	Synology Inc.	-	Synology Disk Station の FTP 認証モジュールにおける重要な情報を取得される脆弱性	CWE-255 証明書・パスワード管理	CVE-2010-3684	2012-03-27 18:42	2010-09-29	Show	GitHub Exploit DB Packet Storm

251120	7.5	危険	wire plastic design	-	wpQuiz における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-3608	2012-03-27 18:42	2010-09-24	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 3, 2026, 4:18 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
247661	9.8	CRITICAL Network	cobbler_project redhat	cobbler satellite	It was found that cobbler 2.6.x exposed all functions from its CobblerXMLRPCInterface class over XMLRPC. A remote, unauthenticated attacker could use this flaw to gain high privileges within cobbler,…	-	CVE-2018-10931	2024-11-21 12:42	2018-08-10	Show	GitHub Exploit DB Packet Storm

247662	7.5	HIGH Network	redhat canonical debian postgresql	enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server virtualization enterprise_linux_server_eus openstack ubuntu_linux debian_linux postgresql	A vulnerability was found in libpq, the default PostgreSQL client library where libpq failed to properly reset its internal state between connections. If an affected version of libpq was used with "h…	CWE-89 SQL Injection	CVE-2018-10915	2024-11-21 12:42	2018-08-10	Show	GitHub Exploit DB Packet Storm

247663	6.3	MEDIUM Local	ovirt redhat	vdsm virtualization	It was found that vdsm before version 4.20.37 invokes qemu-img on untrusted inputs without limiting resources. By uploading a specially crafted image, an attacker could cause the qemu-img process to …	CWE-770 Allocation of Resources Without Limits or Throttling	CVE-2018-10908	2024-11-21 12:42	2018-08-10	Show	GitHub Exploit DB Packet Storm

247664	5.5	MEDIUM Local	ttembed_project	ttembed	An input validation flaw exists in ttembed. With a crafted input file, an attacker may be able to trigger a denial of service condition due to ttembed trusting attacker controlled values.	CWE-20 Improper Input Validation	CVE-2018-10922	2024-11-21 12:42	2018-08-3	Show	GitHub Exploit DB Packet Storm

247665	7.5	HIGH Network	ttembed_project	ttembed	Certain input files may trigger an integer overflow in ttembed input file processing. This overflow could potentially lead to corruption of the input file due to a lack of checking return codes of fg…	CWE-190 Integer Overflow or Wraparound	CVE-2018-10921	2024-11-21 12:42	2018-08-3	Show	GitHub Exploit DB Packet Storm

247666	6.8	MEDIUM Network	nic	knot_resolver	Improper input validation bug in DNS resolver component of Knot Resolver before 2.4.1 allows remote attacker to poison cache.	CWE-20 Improper Input Validation	CVE-2018-10920	2024-11-21 12:42	2018-08-2	Show	GitHub Exploit DB Packet Storm

247667	7.1	HIGH Local	canonical	cloud-init	The default cloud-init configuration, in cloud-init 0.6.2 and newer, included "ssh_deletekeys: 0", disabling cloud-init's deletion of ssh host keys. In some environments, this could lead to instances…	-	CVE-2018-10896	2024-11-21 12:42	2018-08-2	Show	GitHub Exploit DB Packet Storm

247668	5.4	MEDIUM Network	redhat	keycloak single_sign-on	It was found that SAML authentication in Keycloak 3.4.3.Final incorrectly authenticated expired certificates. A malicious user could use this to access unauthorized data or possibly conduct further a…	CWE-295 Improper Certificate Validation	CVE-2018-10894	2024-11-21 12:42	2018-08-2	Show	GitHub Exploit DB Packet Storm

247669	8.1	HIGH Network	rpm redhat	yum-utils enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server virtualization	A directory traversal issue was found in reposync, a part of yum-utils, where reposync fails to sanitize paths in remote repository configuration files. If an attacker controls a repository, they may…	-	CVE-2018-10897	2024-11-21 12:42	2018-08-2	Show	GitHub Exploit DB Packet Storm

247670	6.5	MEDIUM Network	lftp_project canonical opensuse	lftp ubuntu_linux leap	It has been discovered that lftp up to and including version 4.8.3 does not properly sanitize remote file names, leading to a loss of integrity on the local system when reverse mirroring is used. A r…	CWE-20 Improper Input Validation	CVE-2018-10916	2024-11-21 12:42	2018-08-1	Show	GitHub Exploit DB Packet Storm