Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 2, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
251461 3.5 注意 OTRS プロジェクト - OTRS におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2009-5055 2012-03-27 18:42 2011-03-18 Show GitHub Exploit DB Packet Storm
251462 7.5 危険 Smarty - Smarty におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2009-5054 2012-03-27 18:42 2011-02-3 Show GitHub Exploit DB Packet Storm
251463 7.5 危険 Smarty - Smarty における任意の PHP コードを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2009-5053 2012-03-27 18:42 2011-02-3 Show GitHub Exploit DB Packet Storm
251464 10 危険 Smarty - Smarty における詳細不明の脆弱性 CWE-noinfo
情報不足 		CVE-2009-5052 2012-03-27 18:42 2011-02-3 Show GitHub Exploit DB Packet Storm
251465 5 警告 Hastymail - Hastymail2 におけるクッキーを取り込まれる脆弱性 CWE-16
環境設定 		CVE-2009-5051 2012-03-27 18:42 2011-01-18 Show GitHub Exploit DB Packet Storm
251466 5 警告 ViewVC - ViewVC における cvsdb row_limit 設定を迂回される脆弱性 CWE-399
リソース管理の問題 		CVE-2009-5024 2012-03-27 18:42 2011-05-23 Show GitHub Exploit DB Packet Storm
251467 6.8 警告 catb - gif2png における任意のコマンドを実行される脆弱性 CWE-119
バッファエラー 		CVE-2009-5018 2012-03-27 18:42 2011-01-14 Show GitHub Exploit DB Packet Storm
251468 4 警告 IBM - IBM Lotus Notes Traveler の traveler.exe におけるサービス運用妨害 (DoS) の脆弱性 CWE-DesignError
CVE-2009-5036 2012-03-27 18:42 2010-12-16 Show GitHub Exploit DB Packet Storm
251469 4.3 警告 IBM - IBM Lotus Notes Traveler の Nokia クライアントにおける他人への電子メールを読まれる脆弱性 CWE-200
情報漏えい 		CVE-2009-5035 2012-03-27 18:42 2010-12-16 Show GitHub Exploit DB Packet Storm
251470 4 警告 IBM - IBM Lotus Notes Traveler におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2009-5034 2012-03-27 18:42 2010-12-16 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 2, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
247211 6.5 MEDIUM
Adjacent 		radiothermostat ct50_firmware
ct80_firmware 		The Local HTTP API in Radio Thermostat CT50 and CT80 1.04.84 and below products allows unauthorized access via a DNS rebinding attack. This can result in remote device temperature control, as demonst… CWE-20
 Improper Input Validation  		CVE-2018-11315 2024-11-21 12:43 2018-05-20 Show GitHub Exploit DB Packet Storm
247212 6.5 MEDIUM
Network 		podofo_project podofo An issue was discovered in PoDoFo 0.9.5. The function PdfDocument::Append() in PdfDocument.cpp in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (NULL pointer dereference and appli… CWE-476
 NULL Pointer Dereference 		CVE-2018-11256 2024-11-21 12:43 2018-05-19 Show GitHub Exploit DB Packet Storm
247213 7.5 HIGH
Network 		axiosys bento4 The AP4_CttsAtom class in Core/Ap4CttsAtom.cpp in Bento4 1.5.1.0 allows remote attackers to cause a denial of service (application crash), related to a memory allocation failure, as demonstrated by m… CWE-770
 Allocation of Resources Without Limits or Throttling 		CVE-2018-10790 2024-11-21 12:42 2021-08-25 Show GitHub Exploit DB Packet Storm
247214 7.5 HIGH
Network 		redhat certification redhat-certification 7 does not properly restrict the number of recursive definitions of entities in XML documents, allowing an unauthenticated user to run a "Billion Laugh Attack" by replying to XML… CWE-400
CWE-776
 Uncontrolled Resource Consumption
XML Entity Expansion 		CVE-2018-10868 2024-11-21 12:42 2021-05-27 Show GitHub Exploit DB Packet Storm
247215 9.1 CRITICAL
Network 		redhat certification Files are accessible without restrictions from the /update/results page of redhat-certification 7 package, allowing an attacker to remove any file accessible by the apached user. CWE-552
 Files or Directories Accessible to External Parties 		CVE-2018-10867 2024-11-21 12:42 2021-05-27 Show GitHub Exploit DB Packet Storm
247216 9.1 CRITICAL
Network 		redhat certification It was discovered that the /configuration view of redhat-certification 7 does not perform an authorization check and it allows an unauthenticated user to remove a "system" file, that is an xml file w… CWE-862
 Missing Authorization 		CVE-2018-10866 2024-11-21 12:42 2021-05-27 Show GitHub Exploit DB Packet Storm
247217 7.5 HIGH
Network 		redhat certification It was discovered that the /configuration view of redhat-certification 7 does not perform an authorization check and it allows an unauthenticated user to call a "restart" RPC method on any host acces… CWE-862
 Missing Authorization 		CVE-2018-10865 2024-11-21 12:42 2021-05-27 Show GitHub Exploit DB Packet Storm
247218 7.5 HIGH
Network 		redhat certification It was discovered that redhat-certification 7 is not properly configured and it lists all files and directories in the /var/www/rhcert/store/transfer directory, through the /rhcert-transfer URL. An u… CWE-552
 Files or Directories Accessible to External Parties 		CVE-2018-10863 2024-11-21 12:42 2021-05-27 Show GitHub Exploit DB Packet Storm
247219 7.5 HIGH
Network 		k7computing enterprise_security
ultimate_security
total_security
antivrius 		K7TSMngr.exe in K7Computing K7AntiVirus Premium 15.1.0.53 has a Memory Leak. CWE-401
 Missing Release of Memory after Effective Lifetime 		CVE-2018-11246 2024-11-21 12:42 2021-01-12 Show GitHub Exploit DB Packet Storm
247220 7.8 HIGH
Local 		k7computing enterprise_security
ultimate_security
total_security
antivrius 		A Buffer Overflow issue was discovered in K7Computing K7AntiVirus Premium 15.01.00.53. CWE-787
 Out-of-bounds Write 		CVE-2018-11010 2024-11-21 12:42 2021-01-12 Show GitHub Exploit DB Packet Storm