Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 2, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
251211	4.3	警告	Invision Power Services, Inc	-	IP.Board の admin/sources/classes/bbcode/custom/defaults.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-3424	2012-03-27 18:42	2010-09-7	Show	GitHub Exploit DB Packet Storm

251212	7.5	危険	freka	-	Drupal の Yr Weatherdata モジュールにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-3423	2012-03-27 18:42	2010-09-8	Show	GitHub Exploit DB Packet Storm

251213	7.5	危険	solventus Joomla!	-	Jmoola! 用の JGen コンポーネントにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-3422	2012-03-27 18:42	2010-09-16	Show	GitHub Exploit DB Packet Storm

251214	4.3	警告	productcart	-	ProductCart の AffiliateLogin.asp におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-3421	2012-03-27 18:42	2010-09-16	Show	GitHub Exploit DB Packet Storm

251215	4.3	警告	webassist	-	PowerStore の Products_Results.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-3420	2012-03-27 18:42	2010-09-16	Show	GitHub Exploit DB Packet Storm

251216	7.5	危険	Haudenschilt	-	FCMS における任意の PHP コードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-3419	2012-03-27 18:42	2010-09-16	Show	GitHub Exploit DB Packet Storm

251217	4.3	警告	NetArt Media	-	NetArt Media Car Portal におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-3418	2012-03-27 18:42	2010-09-16	Show	GitHub Exploit DB Packet Storm

251218	7.5	危険	eshtery.com	-	eshtery CMS における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-3404	2012-03-27 18:42	2010-09-16	Show	GitHub Exploit DB Packet Storm

251219	9.3	危険	クアルコム	-	QXDM における任意のコードを実行されるおよび DLL ハイジャック攻撃をされる脆弱性	CWE-Other その他	CVE-2010-3403	2012-03-27 18:42	2010-09-16	Show	GitHub Exploit DB Packet Storm

251220	9.3	危険	dm computer solutions	-	IDM Computer Solutions UltraEdit における任意のコードを実行される脆弱性	CWE-Other その他	CVE-2010-3402	2012-03-27 18:42	2010-09-16	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 2, 2026, 4:18 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
248561	5.5	MEDIUM Local	microsoft	windows_server_2012 windows_10 windows_8.1 windows_server_2016 windows_server_2008 windows_7 windows_rt_8.1 windows_server	The Windows kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and 1709, Windows Server 2016…	CWE-665 Improper Initialization	CVE-2018-0926	2024-11-21 12:39	2018-03-15	Show	GitHub Exploit DB Packet Storm

248562	6.5	MEDIUM Network	microsoft	exchange_server	Microsoft Exchange Server 2010 Service Pack 3 Update Rollup 20, Microsoft Exchange Server 2013 Cumulative Update 18, Microsoft Exchange Server 2013 Cumulative Update 19, Microsoft Exchange Server 201…	CWE-601 Open Redirect	CVE-2018-0924	2024-11-21 12:39	2018-03-15	Show	GitHub Exploit DB Packet Storm

248563	7.8	HIGH Local	microsoft	word office office_web_apps sharepoint_server office_word_viewer sharepoint_enterprise_server office_online_server office_compatibility_pack	Microsoft Office 2010 SP2, 2013 SP1, and 2016, Microsoft Office 2016 Click-to-Run Microsoft Office 2016 for Mac, Microsoft Office Compatibility Pack SP2, Microsoft Office Web Apps 2010 SP2, Microsoft…	CWE-787 Out-of-bounds Write	CVE-2018-0922	2024-11-21 12:39	2018-03-15	Show	GitHub Exploit DB Packet Storm

248564	8.8	HIGH Network	microsoft	sharepoint_enterprise_server	Microsoft SharePoint Enterprise Server 2016 allows an elevation of privilege vulnerability to due how specially crafted web requests are sanitized, aka "Microsoft SharePoint Elevation of Privilege Vu…	CWE-79 Cross-site Scripting	CVE-2018-0921	2024-11-21 12:39	2018-03-15	Show	GitHub Exploit DB Packet Storm

248565	3.3	LOW Local	microsoft	word office_web_apps sharepoint_server office office_web_apps_server sharepoint_enterprise_server office_online_server	Microsoft Office 2010 SP2, 2013 SP1, and 2016, Microsoft Office 2016 Click-to-Run Microsoft Office 2016 for Mac, Microsoft Office Web Apps 2010 SP2, Microsoft Office Web Apps 2013 SP1, Microsoft Shar…	CWE-125 CWE-908 Out-of-bounds Read Use of Uninitialized Resource	CVE-2018-0919	2024-11-21 12:39	2018-03-15	Show	GitHub Exploit DB Packet Storm

248566	8.8	HIGH Network	microsoft	sharepoint_enterprise_server	Microsoft SharePoint Enterprise Server 2016 allows an elevation of privilege vulnerability to due how specially crafted web requests are sanitized, aka "Microsoft SharePoint Elevation of Privilege Vu…	CWE-79 Cross-site Scripting	CVE-2018-0917	2024-11-21 12:39	2018-03-15	Show	GitHub Exploit DB Packet Storm

248567	8.8	HIGH Network	microsoft	project_server sharepoint_enterprise_server	Microsoft Project Server 2013 SP1 and Microsoft SharePoint Enterprise Server 2016 allow an elevation of privilege vulnerability to due how specially crafted web requests are sanitized, aka "Microsoft…	CWE-79 Cross-site Scripting	CVE-2018-0915	2024-11-21 12:39	2018-03-15	Show	GitHub Exploit DB Packet Storm

248568	7.8	HIGH Local	microsoft	excel office	Microsoft Excel 2007 SP3, Microsoft Excel 2010 SP2, Microsoft Excel 2013 SP1, Microsoft Excel 2016, Microsoft Office 2016 Click-to-Run and Microsoft Office 2016 for Mac allow a security feature bypas…	NVD-CWE-noinfo	CVE-2018-0907	2024-11-21 12:39	2018-03-15	Show	GitHub Exploit DB Packet Storm

248569	7.8	HIGH Local	microsoft	access office	Microsoft Access 2010 SP2, Microsoft Access 2013 SP1, Microsoft Access 2016, and Microsoft Office 2016 Click-to-Run allow a remote code execution vulnerability due to how objects are handled in memor…	NVD-CWE-noinfo	CVE-2018-0903	2024-11-21 12:39	2018-03-15	Show	GitHub Exploit DB Packet Storm

248570	8.8	HIGH Network	microsoft	project_server sharepoint_enterprise_server	Microsoft Project Server 2013 SP1 and Microsoft SharePoint Enterprise Server 2016 allow an elevation of privilege vulnerability to due how specially crafted web requests are sanitized, aka "Microsoft…	CWE-79 Cross-site Scripting	CVE-2018-0916	2024-11-21 12:39	2018-03-15	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed