Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 7, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
251181	7.5	危険	iskenderaltuntas	-	Oto Galeri Sistemi における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4615	2012-03-27 18:42	2010-12-29	Show	GitHub Exploit DB Packet Storm

251182	7.5	危険	MH Products	-	Ero Auktion の item.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4614	2012-03-27 18:42	2010-12-29	Show	GitHub Exploit DB Packet Storm

251183	7.5	危険	Hycus CMS project	-	Hycus CMS におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2010-4613	2012-03-27 18:42	2010-12-29	Show	GitHub Exploit DB Packet Storm

251184	6.8	警告	Hycus CMS project	-	Hycus CMS の index.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4612	2012-03-27 18:42	2010-12-29	Show	GitHub Exploit DB Packet Storm

251185	5	警告	html-edit	-	Html-edit CMS における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2010-4611	2012-03-27 18:42	2010-12-29	Show	GitHub Exploit DB Packet Storm

251186	4.3	警告	html-edit	-	Html-edit CMS の index.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-4610	2012-03-27 18:42	2010-12-29	Show	GitHub Exploit DB Packet Storm

251187	7.5	危険	html-edit	-	Html-edit CMS の index.php におけるクロスサイトスクリプティングの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4609	2012-03-27 18:42	2010-12-29	Show	GitHub Exploit DB Packet Storm

251188	5	警告	habariproject	-	Habari における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2010-4608	2012-03-27 18:42	2010-12-4	Show	GitHub Exploit DB Packet Storm

251189	2.6	注意	habariproject	-	Habari におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-4607	2012-03-27 18:42	2010-12-4	Show	GitHub Exploit DB Packet Storm

251190	10	危険	IBM	-	IBM TSM の Space Management クライアントにおける任意のコマンドを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-4606	2012-03-27 18:42	2010-12-29	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 7, 2026, 4:13 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
247591	5.4	MEDIUM Network	gitlab	gitlab	An issue was discovered in GitLab Community Edition and Enterprise Edition 10.7.x before 10.7.6. The usage of 'url_for' contained a XSS issue due to it allowing arbitrary protocols as a parameter.	CWE-79 Cross-site Scripting	CVE-2018-12605	2024-11-21 12:45	2018-08-4	Show	GitHub Exploit DB Packet Storm

247592	5.3	MEDIUM Network	navercorp	whale	Whale Browser before 1.3.48.4 displays no URL information but only a title of a web page on the browser's address bar when visiting a non-http page, which allows an attacker to display a malicious we…	CWE-20 Improper Input Validation	CVE-2018-12448	2024-11-21 12:45	2018-08-2	Show	GitHub Exploit DB Packet Storm

247593	7.2	HIGH Network	microfocus	groupwise	A vulnerability in the administration console of Micro Focus GroupWise prior to version 18.0.2 may allow a remote attacker authenticated as an administrator to upload files to an arbitrary path on th…	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2018-12468	2024-11-21 12:45	2018-08-2	Show	GitHub Exploit DB Packet Storm

247594	6.5	MEDIUM Network	opensuse	open_build_service	Authorized users of the openbuildservice before 2.9.4 could delete packages by using a malicious request against projects having the OBS:InitializeDevelPackage attribute, a similar issue to CVE-2018-…	CWE-732 Incorrect Permission Assignment for Critical Resource	CVE-2018-12467	2024-11-21 12:45	2018-08-2	Show	GitHub Exploit DB Packet Storm

247595	6.5	MEDIUM Network	opensuse	open_build_service	openSUSE openbuildservice before 9.2.4 allowed authenticated users to delete packages on specific projects with project links.	CWE-732 Incorrect Permission Assignment for Critical Resource	CVE-2018-12466	2024-11-21 12:45	2018-08-2	Show	GitHub Exploit DB Packet Storm

247596	9.8	CRITICAL Network	adobe	acrobat_dc acrobat_reader_dc	Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have a Use-after-free vulnerability. Successful exploitation could lead to arb…	CWE-416 Use After Free	CVE-2018-12815	2024-11-21 12:45	2018-07-21	Show	GitHub Exploit DB Packet Storm

247597	9.8	CRITICAL Network	adobe	acrobat_dc acrobat_reader_dc	Adobe Acrobat and Reader 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier versions have a Type Confusion vulnerability. Successful exploitation could lead to arb…	CWE-704 Incorrect Type Conversion or Cast	CVE-2018-12812	2024-11-21 12:45	2018-07-21	Show	GitHub Exploit DB Packet Storm

247598	7.5	HIGH Network	adobe	experience_manager	Adobe Experience Manager versions 6.4 and earlier have a Server-Side Request Forgery vulnerability. Successful exploitation could lead to sensitive information disclosure.	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2018-12809	2024-11-21 12:45	2018-07-21	Show	GitHub Exploit DB Packet Storm

247599	9.8	CRITICAL Network	adobe	connect	Adobe Connect versions 9.7.5 and earlier have an Insecure Library Loading vulnerability. Successful exploitation could lead to privilege escalation.	CWE-427 Uncontrolled Search Path Element	CVE-2018-12805	2024-11-21 12:45	2018-07-21	Show	GitHub Exploit DB Packet Storm

247600	9.8	CRITICAL Network	adobe	connect	Adobe Connect versions 9.7.5 and earlier have an Authentication Bypass vulnerability. Successful exploitation could lead to session hijacking.	CWE-287 Improper Authentication	CVE-2018-12804	2024-11-21 12:45	2018-07-21	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed