Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 2, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
251281	6.9	警告	Alcatel-Lucent	-	Alcatel-Lucent OmniTouch Contact Center の TSA コンポーネントの CCAgent オプションにおける Contact Center 操作を監視または再設定される脆弱性	CWE-200 情報漏えい	CVE-2010-3280	2012-03-27 18:42	2010-09-20	Show	GitHub Exploit DB Packet Storm

251282	7.6	危険	Alcatel-Lucent	-	Alcatel-Lucent OmniTouch Contact Center の CCAgent オプションのディフォルト設定における Contact Center 操作を監視または再設定される脆弱性	CWE-16 環境設定	CVE-2010-3279	2012-03-27 18:42	2010-09-20	Show	GitHub Exploit DB Packet Storm

251283	2.1	注意	VMware	-	VMware Workstation および VMware Player のインストーラにおける Web スクリプトまたは HTML の想定外の解釈が発生する脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-3277	2012-03-27 18:42	2010-09-23	Show	GitHub Exploit DB Packet Storm

251284	9.3	危険	VideoLAN	-	VideoLAN VLC Media Player の libdirectx_plugin.dll における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-3276	2012-03-27 18:42	2011-03-28	Show	GitHub Exploit DB Packet Storm

251285	9.3	危険	VideoLAN	-	VideoLAN VLC Media Player の libdirectx_plugin.dll における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-3275	2012-03-27 18:42	2011-03-28	Show	GitHub Exploit DB Packet Storm

251286	4.3	警告	Zoho Corporation	-	ZOHO ManageEngine ADSelfService Plus の Employee Search Engine におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-3274	2012-03-27 18:42	2011-02-17	Show	GitHub Exploit DB Packet Storm

251287	5	警告	Zoho Corporation	-	ZOHO ManageEngine ADSelfService Plus における任意のユーザアカウントへのアクセスを取得される脆弱性	CWE-20 不適切な入力確認	CVE-2010-3273	2012-03-27 18:42	2011-02-17	Show	GitHub Exploit DB Packet Storm

251288	4.3	警告	Zoho Corporation	-	ZOHO ManageEngine ADSelfService Plus の security-questions 実装における任意のユーザアカウントへのアクセスを取得される脆弱性	CWE-20 不適切な入力確認	CVE-2010-3272	2012-03-27 18:42	2011-02-17	Show	GitHub Exploit DB Packet Storm

251289	6.8	警告	IBM	-	IBM WAS の Integrated Solutions Console におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2010-3271	2012-03-27 18:42	2011-07-18	Show	GitHub Exploit DB Packet Storm

251290	6.8	警告	シスコシステムズ	-	Cisco WebEx Meeting Center T27LB におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-3270	2012-03-27 18:42	2011-02-1	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 2, 2026, 4:18 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
247391	7.5	HIGH Network	vmware oracle debian	spring_framework flexcube_private_banking retail_xstore_point_of_service application_testing_suite hospitality_guest_access weblogic_server enterprise_manager_ops_center endeca_i…	Spring Framework, versions 5.0.x prior to 5.0.7 and 4.3.x prior to 4.3.18 and older unsupported versions, allows web applications to enable cross-domain requests via JSONP (JSON with Padding) through…	CWE-829 Inclusion of Functionality from Untrusted Control Sphere	CVE-2018-11040	2024-11-21 12:42	2018-06-26	Show	GitHub Exploit DB Packet Storm

247392	7.5	HIGH Network	ipconfigure	orchid_core_vms	IPConfigure Orchid Core VMS 2.0.5 allows Directory Traversal.	CWE-22 Path Traversal	CVE-2018-10956	2024-11-21 12:42	2018-06-26	Show	GitHub Exploit DB Packet Storm

247393	5.9	MEDIUM Network	vmware oracle debian	spring_framework retail_xstore_point_of_service weblogic_server application_testing_suite hospitality_guest_access enterprise_manager_ops_center primavera_p6_enterprise_project_port…	Spring Framework (versions 5.0.x prior to 5.0.7, versions 4.3.x prior to 4.3.18, and older unsupported versions) allow web applications to change the HTTP request method to any HTTP method (including…	NVD-CWE-noinfo	CVE-2018-11039	2024-11-21 12:42	2018-06-26	Show	GitHub Exploit DB Packet Storm

247394	8.8	HIGH Network	gluster debian	glusterfs debian_linux	glusterfs is vulnerable to privilege escalation on gluster server nodes. An authenticated gluster client via TLS could use gluster cli with --remote-host command to add it self to trusted storage poo…	-	CVE-2018-10841	2024-11-21 12:42	2018-06-21	Show	GitHub Exploit DB Packet Storm

247395	8.8	HIGH Network	openwrt	openwrt	OpenWrt mishandles access control in /etc/config/rpcd and the /usr/share/rpcd/acl.d files, which allows remote authenticated users to call arbitrary methods (i.e., achieve ubus access over HTTP) that…	CWE-732 Incorrect Permission Assignment for Critical Resource	CVE-2018-11116	2024-11-21 12:42	2018-06-20	Show	GitHub Exploit DB Packet Storm

247396	7.5	HIGH Network	cesanta	mongoose	The mg_handle_cgi function in mongoose.c in Mongoose 6.11 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash, or NULL pointer dereference) via an …	CWE-125 CWE-476 Out-of-bounds Read NULL Pointer Dereference	CVE-2018-10945	2024-11-21 12:42	2018-06-20	Show	GitHub Exploit DB Packet Storm

247397	7.5	HIGH Network	strongswan debian canonical fedoraproject	strongswan debian_linux ubuntu_linux fedora	strongSwan 5.6.0 and older allows Remote Denial of Service because of Missing Initialization of a Variable.	CWE-909 Missing Initialization of Resource	CVE-2018-10811	2024-11-21 12:42	2018-06-20	Show	GitHub Exploit DB Packet Storm

247398	9.8	CRITICAL Network	redislabs debian oracle redhat	redis debian_linux communications_operations_monitor openstack	An Integer Overflow issue was discovered in the struct library in the Lua subsystem in Redis before 3.2.12, 4.x before 4.0.10, and 5.x before 5.0 RC2, leading to a failure of bounds checking.	CWE-190 Integer Overflow or Wraparound	CVE-2018-11219	2024-11-21 12:42	2018-06-18	Show	GitHub Exploit DB Packet Storm

247399	9.8	CRITICAL Network	redislabs debian oracle redhat	redis debian_linux communications_operations_monitor openstack	Memory Corruption was discovered in the cmsgpack library in the Lua subsystem in Redis before 3.2.12, 4.x before 4.0.10, and 5.x before 5.0 RC2 because of stack-based buffer overflows.	CWE-787 Out-of-bounds Write	CVE-2018-11218	2024-11-21 12:42	2018-06-18	Show	GitHub Exploit DB Packet Storm

247400	9.8	CRITICAL Network	etere	etereweb	Etere EtereWeb before 28.1.20 has a pre-authentication blind SQL injection in the POST parameters txUserName and txPassword.	CWE-89 SQL Injection	CVE-2018-10997	2024-11-21 12:42	2018-06-18	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed