Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 6, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
251181 7.5 危険 iskenderaltuntas - Oto Galeri Sistemi における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-4615 2012-03-27 18:42 2010-12-29 Show GitHub Exploit DB Packet Storm
251182 7.5 危険 MH Products - Ero Auktion の item.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-4614 2012-03-27 18:42 2010-12-29 Show GitHub Exploit DB Packet Storm
251183 7.5 危険 Hycus CMS project - Hycus CMS におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2010-4613 2012-03-27 18:42 2010-12-29 Show GitHub Exploit DB Packet Storm
251184 6.8 警告 Hycus CMS project - Hycus CMS の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-4612 2012-03-27 18:42 2010-12-29 Show GitHub Exploit DB Packet Storm
251185 5 警告 html-edit - Html-edit CMS における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2010-4611 2012-03-27 18:42 2010-12-29 Show GitHub Exploit DB Packet Storm
251186 4.3 警告 html-edit - Html-edit CMS の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-4610 2012-03-27 18:42 2010-12-29 Show GitHub Exploit DB Packet Storm
251187 7.5 危険 html-edit - Html-edit CMS の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-89
SQLインジェクション
CVE-2010-4609 2012-03-27 18:42 2010-12-29 Show GitHub Exploit DB Packet Storm
251188 5 警告 habariproject - Habari における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2010-4608 2012-03-27 18:42 2010-12-4 Show GitHub Exploit DB Packet Storm
251189 2.6 注意 habariproject - Habari におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-4607 2012-03-27 18:42 2010-12-4 Show GitHub Exploit DB Packet Storm
251190 10 危険 IBM - IBM TSM の Space Management クライアントにおける任意のコマンドを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2010-4606 2012-03-27 18:42 2010-12-29 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 6, 2026, 4:18 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
247271 5.5 MEDIUM
Local
linux
canonical
linux_kernel
ubuntu_linux
ntfs_read_locked_inode in the ntfs.ko filesystem driver in the Linux kernel 4.15.0 allows attackers to trigger a use-after-free read and possibly cause a denial of service (kernel oops or panic) via … CWE-416
 Use After Free
CVE-2018-12929 2024-11-21 12:46 2018-06-28 Show GitHub Exploit DB Packet Storm
247272 5.5 MEDIUM
Local
linux
canonical
linux_kernel
ubuntu_linux
In the Linux kernel 4.15.0, a NULL pointer dereference was discovered in hfs_ext_read_extent in hfs.ko. This can occur during a mount of a crafted hfs filesystem. CWE-476
 NULL Pointer Dereference
CVE-2018-12928 2024-11-21 12:46 2018-06-28 Show GitHub Exploit DB Packet Storm
247273 7.5 HIGH
Network
northernnep northern_electric_\&_power_inverter_firmware Northern Electric & Power (NEP) inverter devices allow remote attackers to obtain potentially sensitive information via a direct request for the nep/status/index/1 URI. CWE-200
Information Exposure
CVE-2018-12927 2024-11-21 12:46 2018-06-28 Show GitHub Exploit DB Packet Storm
247274 7.5 HIGH
Network
pharoscontrols pharos_firmware Pharos Controls devices allow remote attackers to obtain potentially sensitive information via a direct request for the default/index.lsp or default/log.lsp URI. CWE-200
Information Exposure
CVE-2018-12926 2024-11-21 12:46 2018-06-28 Show GitHub Exploit DB Packet Storm
247275 9.8 CRITICAL
Network
lantronix mss_firmware Baseon Lantronix MSS devices do not require a password for TELNET access. CWE-521
Weak Password Requirements 
CVE-2018-12925 2024-11-21 12:46 2018-06-28 Show GitHub Exploit DB Packet Storm
247276 9.8 CRITICAL
Network
eztcp cie-h10_firmware
cie-h12_firmware
cie-h14_firmware
cse-m53n_firmware
cse-m32_firmware
cse-m24_firmware
cse-m73_firmware
cse-b63n2_firmware
Sollae Serial-Ethernet-Module and Remote-I/O-Device-Server devices have a default password of sollae for the TELNET service. CWE-798
 Use of Hard-coded Credentials
CVE-2018-12924 2024-11-21 12:46 2018-06-28 Show GitHub Exploit DB Packet Storm
247277 7.5 HIGH
Network
bwssystems ha_bridge BWS Systems HA-Bridge devices allow remote attackers to obtain potentially sensitive information via a direct request for the #!/system URI. CWE-200
Information Exposure
CVE-2018-12923 2024-11-21 12:46 2018-06-28 Show GitHub Exploit DB Packet Storm
247278 7.5 HIGH
Network
vertiv liebert_intellislot_firmware Emerson Liebert IntelliSlot Web Card devices allow remote attackers to reconfigure access control via the config/configUser.htm or config/configTelnet.htm URI. CWE-732
 Incorrect Permission Assignment for Critical Resource
CVE-2018-12922 2024-11-21 12:46 2018-06-28 Show GitHub Exploit DB Packet Storm
247279 7.5 HIGH
Network
electroind gaugetech_nexus_firmware Electro Industries GaugeTech Nexus devices allow remote attackers to obtain potentially sensitive information via a direct request for the meter_information.htm, diag_system.htm, or diag_dnp_lan_wan.… CWE-200
Information Exposure
CVE-2018-12921 2024-11-21 12:46 2018-06-28 Show GitHub Exploit DB Packet Storm
247280 7.5 HIGH
Network
flir brickstream_2300_firmware Brickstream 2300 devices allow remote attackers to obtain potentially sensitive information via a direct request for the basic.html#ipsettings or basic.html#datadelivery URI. CWE-200
Information Exposure
CVE-2018-12920 2024-11-21 12:46 2018-06-28 Show GitHub Exploit DB Packet Storm