Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":June 5, 2026, 6 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 251181 | 7.5 | 危険 | iskenderaltuntas | - | Oto Galeri Sistemi における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2010-4615 | 2012-03-27 18:42 | 2010-12-29 | Show | GitHub Exploit DB Packet Storm |
| 251182 | 7.5 | 危険 | MH Products | - | Ero Auktion の item.php における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2010-4614 | 2012-03-27 18:42 | 2010-12-29 | Show | GitHub Exploit DB Packet Storm |
| 251183 | 7.5 | 危険 | Hycus CMS project | - | Hycus CMS におけるディレクトリトラバーサルの脆弱性 |
CWE-22
パス・トラバーサル |
CVE-2010-4613 | 2012-03-27 18:42 | 2010-12-29 | Show | GitHub Exploit DB Packet Storm |
| 251184 | 6.8 | 警告 | Hycus CMS project | - | Hycus CMS の index.php における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2010-4612 | 2012-03-27 18:42 | 2010-12-29 | Show | GitHub Exploit DB Packet Storm |
| 251185 | 5 | 警告 | html-edit | - | Html-edit CMS における重要な情報を取得される脆弱性 |
CWE-200
情報漏えい |
CVE-2010-4611 | 2012-03-27 18:42 | 2010-12-29 | Show | GitHub Exploit DB Packet Storm |
| 251186 | 4.3 | 警告 | html-edit | - | Html-edit CMS の index.php におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2010-4610 | 2012-03-27 18:42 | 2010-12-29 | Show | GitHub Exploit DB Packet Storm |
| 251187 | 7.5 | 危険 | html-edit | - | Html-edit CMS の index.php におけるクロスサイトスクリプティングの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2010-4609 | 2012-03-27 18:42 | 2010-12-29 | Show | GitHub Exploit DB Packet Storm |
| 251188 | 5 | 警告 | habariproject | - | Habari における重要な情報を取得される脆弱性 |
CWE-200
情報漏えい |
CVE-2010-4608 | 2012-03-27 18:42 | 2010-12-4 | Show | GitHub Exploit DB Packet Storm |
| 251189 | 2.6 | 注意 | habariproject | - | Habari におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2010-4607 | 2012-03-27 18:42 | 2010-12-4 | Show | GitHub Exploit DB Packet Storm |
| 251190 | 10 | 危険 | IBM | - | IBM TSM の Space Management クライアントにおける任意のコマンドを実行される脆弱性 |
CWE-94
コード・インジェクション |
CVE-2010-4606 | 2012-03-27 18:42 | 2010-12-29 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:June 6, 2026, 4:18 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 247341 | 9.8 |
CRITICAL
Network |
mozilla debian canonical redhat |
firefox firefox_esr thunderbird debian_linux ubuntu_linux enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server enterprise_linux_server_eus enterpri… |
When manipulating user events in nested loops while opening a document through script, it is possible to trigger a potentially exploitable crash due to poor event handling. This vulnerability affects… |
NVD-CWE-noinfo
|
CVE-2018-12392 | 2024-11-21 12:45 | 2019-03-1 | Show | GitHub Exploit DB Packet Storm |
| 247342 | 8.8 |
HIGH
Network |
mozilla |
firefox firefox_esr thunderbird |
During HTTP Live Stream playback on Firefox for Android, audio data can be accessed across origins in violation of security policies. Because the problem is in the underlying Android service, this is… |
CWE-863
Incorrect Authorization |
CVE-2018-12391 | 2024-11-21 12:45 | 2019-03-1 | Show | GitHub Exploit DB Packet Storm |
| 247343 | 9.8 |
CRITICAL
Network |
mozilla debian canonical redhat |
firefox firefox_esr thunderbird debian_linux ubuntu_linux enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server enterprise_linux_server_aus enterpri… |
Mozilla developers and community members reported memory safety bugs present in Firefox 62 and Firefox ESR 60.2. Some of these bugs showed evidence of memory corruption and we presume that with enoug… |
CWE-119
Incorrect Access of Indexable Resource ('Range Error') |
CVE-2018-12390 | 2024-11-21 12:45 | 2019-03-1 | Show | GitHub Exploit DB Packet Storm |
| 247344 | 8.8 |
HIGH
Network |
mozilla debian canonical redhat |
firefox_esr thunderbird debian_linux ubuntu_linux enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server enterprise_linux_server_eus enterprise_linux_se… |
Mozilla developers and community members reported memory safety bugs present in Firefox ESR 60.2. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that s… |
CWE-119
Incorrect Access of Indexable Resource ('Range Error') |
CVE-2018-12389 | 2024-11-21 12:45 | 2019-03-1 | Show | GitHub Exploit DB Packet Storm |
| 247345 | 6.1 |
MEDIUM
Network |
tibco | silver_fabric | The SOAP Admin API component of TIBCO Software Inc.'s TIBCO Silver Fabric contains a vulnerability that may allow reflected cross-site scripting (XSS) attacks. Affected releases are TIBCO Software In… |
CWE-79
Cross-site Scripting |
CVE-2018-12409 | 2024-11-21 12:45 | 2019-02-14 | Show | GitHub Exploit DB Packet Storm |
| 247346 | 9.8 |
CRITICAL
Network |
eclipse redhat |
openj9 enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server satellite |
In Eclipse OpenJ9 version 0.11.0, the OpenJ9 JIT compiler may incorrectly omit a null check on the receiver object of an Unsafe call when accelerating it. |
CWE-20
Improper Input Validation |
CVE-2018-12549 | 2024-11-21 12:45 | 2019-02-12 | Show | GitHub Exploit DB Packet Storm |
| 247347 | 9.8 |
CRITICAL
Network |
eclipse redhat |
openj9 enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server satellite |
In Eclipse OpenJ9, prior to the 0.12.0 release, the jio_snprintf() and jio_vsnprintf() native methods ignored the length parameter. This affects existing APIs that called the functions to exceed the … |
CWE-119
Incorrect Access of Indexable Resource ('Range Error') |
CVE-2018-12547 | 2024-11-21 12:45 | 2019-02-12 | Show | GitHub Exploit DB Packet Storm |
| 247348 | 9.8 |
CRITICAL
Network |
eclipse | openj9 | In OpenJDK + Eclipse OpenJ9 version 0.11.0 builds, the public jdk.crypto.jniprovider.NativeCrypto class contains public static natives which accept pointer values that are dereferenced in the native … |
CWE-119
Incorrect Access of Indexable Resource ('Range Error') |
CVE-2018-12548 | 2024-11-21 12:45 | 2019-02-1 | Show | GitHub Exploit DB Packet Storm |
| 247349 | 6.1 |
MEDIUM
Network |
open-xchange | open-xchange_appsuite | OX App Suite 7.8.4 and earlier allows Directory Traversal. |
CWE-79
Cross-site Scripting |
CVE-2018-12611 | 2024-11-21 12:45 | 2019-01-31 | Show | GitHub Exploit DB Packet Storm |
| 247350 | 5.3 |
MEDIUM
Network |
open-xchange | open-xchange_appsuite | OX App Suite 7.8.4 and earlier allows Information Exposure. |
CWE-200
Information Exposure |
CVE-2018-12610 | 2024-11-21 12:45 | 2019-01-31 | Show | GitHub Exploit DB Packet Storm |