Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 7, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
251201	4.3	警告	IBM	-	IBM LMC の HTTP-AS におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-4590	2012-03-27 18:42	2010-12-22	Show	GitHub Exploit DB Packet Storm

251202	4.3	警告	IBM	-	IBM ENOVIA 6 におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-4589	2012-03-27 18:42	2010-12-22	Show	GitHub Exploit DB Packet Storm

251203	10	危険	IBM	-	IBM Rational ClearQuest における .ocx ファイルに関する処理に不備がある脆弱性	CWE-noinfo 情報不足	CVE-2010-4601	2012-03-27 18:42	2009-11-2	Show	GitHub Exploit DB Packet Storm

251204	4.3	警告	Mozilla Foundation	-	Bugzilla の chart.cgi における CRLF インジェクションの脆弱性	CWE-94 コード・インジェクション	CVE-2010-4572	2012-03-27 18:42	2011-01-28	Show	GitHub Exploit DB Packet Storm

251205	4.3	警告	Mozilla Foundation	-	Bugzilla の duplicate-detection 機能におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-4570	2012-03-27 18:42	2011-01-28	Show	GitHub Exploit DB Packet Storm

251206	4.3	警告	Mozilla Foundation	-	Bugzilla におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-4569	2012-03-27 18:42	2011-01-28	Show	GitHub Exploit DB Packet Storm

251207	7.5	危険	Mozilla Foundation	-	Bugzilla における任意のアカウントにアクセスされる脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-4568	2012-03-27 18:42	2011-01-28	Show	GitHub Exploit DB Packet Storm

251208	4.3	警告	Mozilla Foundation	-	Bugzilla におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-4567	2012-03-27 18:42	2011-01-28	Show	GitHub Exploit DB Packet Storm

251209	4.3	警告	SquirrelMail Project	-	SquirrelMail におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-4555	2012-03-27 18:42	2011-07-11	Show	GitHub Exploit DB Packet Storm

251210	4.3	警告	SquirrelMail Project	-	SquirrelMail の functions/page_header.php におけるクリックジャック攻撃を誘発する脆弱性	CWE-20 不適切な入力確認	CVE-2010-4554	2012-03-27 18:42	2011-07-12	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 7, 2026, 4:13 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
248671	7.5	HIGH Network	amazon	fire_os	kernel/omap/drivers/misc/gcx/gcioctl/gcif.c in the kernel component in Amazon Kindle Fire HD(3rd) Fire OS 4.5.5.3 allows attackers to inject a crafted argument via the argument of an ioctl on device …	CWE-88 Argument Injection	CVE-2018-11019	2024-11-21 12:42	2018-10-17	Show	GitHub Exploit DB Packet Storm

248672	6.5	MEDIUM Network	qemu canonical debian	qemu ubuntu_linux debian_linux	Qemu emulator <= 3.0.0 built with the NE2000 NIC emulation support is vulnerable to an integer overflow, which could lead to buffer overflow issue. It could occur when receiving packets over the netw…	-	CVE-2018-10839	2024-11-21 12:42	2018-10-16	Show	GitHub Exploit DB Packet Storm

248673	8.1	HIGH Network	cloud_foundry	bosh	Cloud Foundry BOSH, versions v264 prior to v264.14.0 and v265 prior to v265.7.0 and v266 prior to v266.8.0 and v267 prior to v267.2.0, allows refresh tokens to be as access tokens when using UAA for …	NVD-CWE-noinfo	CVE-2018-11083	2024-11-21 12:42	2018-10-6	Show	GitHub Exploit DB Packet Storm

248674	9.8	CRITICAL Network	pivotal_software	cloudfoundry_uaa_release cloudfoundry_uaa	Cloud Foundry UAA, all versions prior to 4.20.0 and Cloud Foundry UAA Release, all versions prior to 61.0, allows brute forcing of MFA codes. A remote unauthenticated malicious user in possession of …	CWE-307 mproper Restriction of Excessive Authentication Attempts	CVE-2018-11082	2024-11-21 12:42	2018-10-6	Show	GitHub Exploit DB Packet Storm

248675	8.8	HIGH Network	pivotal_software	operations_manager	Pivotal Operations Manager, versions 2.2.x prior to 2.2.1, 2.1.x prior to 2.1.11, 2.0.x prior to 2.0.16, and 1.11.x prior to 2, fails to write the Operations Manager UAA config onto the temp RAM disk…	NVD-CWE-noinfo	CVE-2018-11081	2024-11-21 12:42	2018-10-6	Show	GitHub Exploit DB Packet Storm

248676	7.8	HIGH Local	dell	emc_unity_operating_environment emc_unityvsa_operating_environment	Dell EMC Unity OE versions 4.3.0.x and 4.3.1.x and UnityVSA OE versions 4.3.0.x and 4.3.1.x contains an Incorrect File Permissions vulnerability. A locally authenticated malicious user could potentia…	CWE-732 Incorrect Permission Assignment for Critical Resource	CVE-2018-11064	2024-11-21 12:42	2018-10-6	Show	GitHub Exploit DB Packet Storm

248677	7.8	HIGH Local	dell	digital_delivery	Dell Digital Delivery versions prior to 3.5.1 contain a DLL Injection Vulnerability. A local authenticated malicious user with advance knowledge of the application workflow could potentially load and…	CWE-427 Uncontrolled Search Path Element	CVE-2018-11072	2024-11-21 12:42	2018-10-2	Show	GitHub Exploit DB Packet Storm

248678	4.8	MEDIUM Network	rsa emc	authentication_manager rsa_authentication_manager	RSA Authentication Manager versions prior to 8.3 P3 contain a stored cross-site scripting vulnerability in the Operations Console. A malicious Operations Console administrator could exploit this vuln…	CWE-79 Cross-site Scripting	CVE-2018-11073	2024-11-21 12:42	2018-09-29	Show	GitHub Exploit DB Packet Storm

248679	4.7	MEDIUM Network	rsa emc	authentication_manager rsa_authentication_manager	RSA Authentication Manager versions prior to 8.3 P3 contain a reflected cross-site scripting vulnerability in a Security Console page. A remote, unauthenticated malicious user, with the knowledge of …	CWE-79 Cross-site Scripting	CVE-2018-11075	2024-11-21 12:42	2018-09-29	Show	GitHub Exploit DB Packet Storm

248680	6.1	MEDIUM Network	rsa emc	authentication_manager rsa_authentication_manager	RSA Authentication Manager versions prior to 8.3 P3 are affected by a DOM-based cross-site scripting vulnerability which exists in its embedded MadCap Flare Help files. A remote unauthenticated attac…	CWE-79 Cross-site Scripting	CVE-2018-11074	2024-11-21 12:42	2018-09-29	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed