Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":July 1, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
251471 4.3 警告 arizona-dream - Arizona Dream livor の index.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-1919 2012-06-26 15:46 2007-04-10 Show GitHub Exploit DB Packet Storm
251472 6.8 警告 MyBB Group
ecardmax.com		 - eCardMAX Hot Editor および HotEditor プラグインの richedit/keyboard.php におけるディレクトリトラバーサルの脆弱性 - CVE-2007-1906 2012-06-26 15:46 2007-04-10 Show GitHub Exploit DB Packet Storm
251473 4.3 警告 AOL - AIM および ICQ におけるディレクトリトラバーサルの脆弱性 - CVE-2007-1904 2012-06-26 15:46 2007-04-10 Show GitHub Exploit DB Packet Storm
251474 9.3 危険 アカマイテクノロジーズ - Akamai Technologies Download Manager ActiveX コントロール (DownloadManagerV2.ocx) におけるスタックベースのバッファオーバーフローの脆弱性 - CVE-2007-1892 2012-06-26 15:46 2007-04-17 Show GitHub Exploit DB Packet Storm
251475 7.2 危険 アドビシステムズ - Adobe ColdFusion MX における任意のコードを実行される脆弱性 - CVE-2007-1874 2012-06-26 15:46 2007-04-10 Show GitHub Exploit DB Packet Storm
251476 4.3 警告 chcounter - chcounter におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-1871 2012-06-26 15:46 2007-04-13 Show GitHub Exploit DB Packet Storm
251477 5 警告 drake team - Drake CMS の classes/captcha/captcha.jpg.php におけるディレクトリトラバーサルの脆弱性 - CVE-2007-1850 2012-06-26 15:46 2007-04-3 Show GitHub Exploit DB Packet Storm
251478 7.5 危険 drake team - Drake CMS の 404.php におけるディレクトリトラバーサルの脆弱性 - CVE-2007-1849 2012-06-26 15:46 2007-04-3 Show GitHub Exploit DB Packet Storm
251479 4.3 警告 drake team - Drake CMS の admin/classes/ui.dta.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-1848 2012-06-26 15:46 2007-04-3 Show GitHub Exploit DB Packet Storm
251480 7.5 危険 avatic - Aardvark Topsites PHP における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-1844 2012-06-26 15:46 2007-04-3 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:July 1, 2026, 4:27 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
253931 7.8 HIGH
Local 		2345.cc security_guard In 2345 Security Guard 3.7, the driver file (2345NsProtect.sys, X64 version) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating… CWE-20
 Improper Input Validation  		CVE-2018-11034 2024-11-21 12:42 2018-05-14 Show GitHub Exploit DB Packet Storm
253932 5.9 MEDIUM
Network 		rasputinonline rasputin_online_coin The request_dividend function of a smart contract implementation for ROC (aka Rasputin Online Coin), an Ethereum ERC20 token, allows attackers to steal all of the contract's Ether. NVD-CWE-noinfo
CVE-2018-10944 2024-11-21 12:42 2018-05-14 Show GitHub Exploit DB Packet Storm
253933 7.8 HIGH
Local 		xpdfreader xpdf The DCTStream::readHuffSym function in Stream.cc in the DCT decoder in xpdf before 4.00 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other imp… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2018-11033 2024-11-21 12:42 2018-05-14 Show GitHub Exploit DB Packet Storm
253934 9.8 CRITICAL
Network 		gouguoyin phprap PHPRAP 1.0.4 through 1.0.8 has SQL Injection via the application/home/controller/project.php search() function. CWE-89
SQL Injection 		CVE-2018-11032 2024-11-21 12:42 2018-05-14 Show GitHub Exploit DB Packet Storm
253935 9.8 CRITICAL
Network 		gouguoyin phprap application/home/controller/debug.php in PHPRAP 1.0.4 through 1.0.8 has SSRF via the /debug URI, as demonstrated by an api[url]=file:////etc/passwd&api[method]=get POST request. CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2018-11031 2024-11-21 12:42 2018-05-14 Show GitHub Exploit DB Packet Storm
253936 8.8 HIGH
Network 		pbootcms pbootcms An issue was discovered in PbootCMS v1.0.7. Cross-site request forgery (CSRF) vulnerability in apps/admin/controller/system/RoleController.php allows remote attackers to add administrator accounts vi… CWE-352
 Origin Validation Error 		CVE-2018-11018 2024-11-21 12:42 2018-05-14 Show GitHub Exploit DB Packet Storm
253937 8.8 HIGH
Network 		libming libming The newVar_N function in decompile.c in libming through 0.4.8 mishandles cases where the header indicates a file size greater than the actual size, which allows remote attackers to cause a denial of … CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2018-11017 2024-11-21 12:42 2018-05-14 Show GitHub Exploit DB Packet Storm
253938 9.8 CRITICAL
Network 		d-link dir-816_a2_firmware Stack-based buffer overflow in the websRedirect function in GoAhead on D-Link DIR-816 A2 (CN) routers with firmware version 1.10B05 allows unauthenticated remote attackers to execute arbitrary code v… CWE-787
 Out-of-bounds Write 		CVE-2018-11013 2024-11-21 12:42 2018-05-14 Show GitHub Exploit DB Packet Storm
253939 6.1 MEDIUM
Network 		halo halo ruibaby Halo 0.0.2 has stored XSS via the loginName and loginPwd parameters in a failed login attempt to AdminController.java. CWE-79
Cross-site Scripting 		CVE-2018-11012 2024-11-21 12:42 2018-05-12 Show GitHub Exploit DB Packet Storm
253940 6.1 MEDIUM
Network 		halo halo ruibaby Halo 0.0.2 has stored XSS via the commentAuthor field to FrontCommentController.java. CWE-79
Cross-site Scripting 		CVE-2018-11011 2024-11-21 12:42 2018-05-12 Show GitHub Exploit DB Packet Storm