Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 9, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
251481 7.5 危険 joomlaseller
Joomla!		 - Joomla! の com_jscalendar コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-4795 2012-03-27 18:42 2011-04-26 Show GitHub Exploit DB Packet Storm
251482 4.3 警告 joomlaseller
Joomla!		 - Joomla! の com_jscalendar コンポーネントにおけるクロスサイトスクリプティング脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-4794 2012-03-27 18:42 2011-04-26 Show GitHub Exploit DB Packet Storm
251483 7.5 危険 site2nite - Site2Nite Auto e-Manager の detail.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-4793 2012-03-27 18:42 2011-04-26 Show GitHub Exploit DB Packet Storm
251484 4.3 警告 openit - OPEN IT OverLook の title.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-4792 2012-03-27 18:42 2011-04-26 Show GitHub Exploit DB Packet Storm
251485 4 警告 IBM - IBM WCM のオーサリングツールにおけるドラフト生成のアクセス制限を回避する脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-4806 2012-03-27 18:42 2010-11-16 Show GitHub Exploit DB Packet Storm
251486 7.5 危険 marcusg - PHP-Fusion の MG User-Fotoalbum モジュールにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-4791 2012-03-27 18:42 2011-04-26 Show GitHub Exploit DB Packet Storm
251487 5.8 警告 in-mediakg - FilterFTP におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2010-4790 2012-03-27 18:42 2011-04-26 Show GitHub Exploit DB Packet Storm
251488 6.8 警告 PHP Web Scripts - PHP Web Scripts Easy Banner Free の member.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-4784 2012-03-27 18:42 2011-04-7 Show GitHub Exploit DB Packet Storm
251489 2.6 注意 PHP Web Scripts - PHP Web Scripts Easy Banner Free の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-4783 2012-03-27 18:42 2011-04-7 Show GitHub Exploit DB Packet Storm
251490 7.5 危険 softwebsnepal - Softwebs Nepal Ananda Real Estate の list.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-4782 2012-03-27 18:42 2011-04-7 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 9, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
246871 6.1 MEDIUM
Network 		atlassian jira
jira_server 		Various resources in Atlassian Jira before version 7.6.8, from version 7.7.0 before version 7.7.5, from version 7.8.0 before version 7.8.5, from version 7.9.0 before version 7.9.3, from version 7.10.… CWE-79
Cross-site Scripting 		CVE-2018-13395 2024-11-21 12:47 2018-08-28 Show GitHub Exploit DB Packet Storm
246872 5.3 MEDIUM
Network 		atlassian jira
jira_server 		The ProfileLinkUserFormat component of Jira Server before version 7.6.8, from version 7.7.0 before version 7.7.5, from version 7.8.0 before version 7.8.5, from version 7.9.0 before version 7.9.3, fro… CWE-200
Information Exposure 		CVE-2018-13391 2024-11-21 12:47 2018-08-28 Show GitHub Exploit DB Packet Storm
246873 7.0 HIGH
Local 		linecorp line An issue was discovered in the LINE jp.naver.line application 8.8.1 for Android. The Passcode feature allows authentication bypass via runtime manipulation that forces a certain method's return value… CWE-287
Improper Authentication 		CVE-2018-13446 2024-11-21 12:47 2018-08-17 Show GitHub Exploit DB Packet Storm
246874 7.0 HIGH
Local 		linecorp line An issue was discovered in the LINE jp.naver.line application 8.8.0 for iOS. The Passcode feature allows authentication bypass via runtime manipulation that forces a certain method to disable passcod… CWE-287
Improper Authentication 		CVE-2018-13435 2024-11-21 12:47 2018-08-17 Show GitHub Exploit DB Packet Storm
246875 6.3 MEDIUM
Physics 		linecorp line An issue was discovered in the LINE jp.naver.line application 8.8.0 for iOS. The LAContext class for Biometric (TouchID) validation allows authentication bypass by overriding the LAContext return Boo… CWE-287
Improper Authentication 		CVE-2018-13434 2024-11-21 12:47 2018-08-17 Show GitHub Exploit DB Packet Storm
246876 6.5 MEDIUM
Network 		atlassian questions_for_confluence The acceptAnswer resource in Atlassian Confluence Questions before version 2.6.6, the bundled version of Confluence Questions was updated to a fixed version in Confluence version 6.9.0, allows remote… CWE-352
 Origin Validation Error 		CVE-2018-13394 2024-11-21 12:47 2018-08-15 Show GitHub Exploit DB Packet Storm
246877 6.5 MEDIUM
Network 		atlassian questions_for_confluence The convertCommentToAnswer resource in Atlassian Confluence Questions before version 2.6.6, the bundled version of Confluence Questions was updated to a fixed version in Confluence version 6.9.0, all… CWE-352
 Origin Validation Error 		CVE-2018-13393 2024-11-21 12:47 2018-08-15 Show GitHub Exploit DB Packet Storm
246878 9.8 CRITICAL
Network 		vuze bittorrent_client In Vuze Bittorrent Client 5.7.6.0, the XML parsing engine for SSDP/UPnP functionality is vulnerable to an XML External Entity Processing (XXE) attack. Remote, unauthenticated attackers can use this v… CWE-611
XXE 		CVE-2018-13417 2024-11-21 12:47 2018-08-14 Show GitHub Exploit DB Packet Storm
246879 9.8 CRITICAL
Network 		plex media_server In Plex Media Server 1.13.2.5154, the XML parsing engine for SSDP/UPnP functionality is vulnerable to an XML External Entity Processing (XXE) attack. Remote, unauthenticated attackers can use this vu… CWE-611
XXE 		CVE-2018-13415 2024-11-21 12:47 2018-08-14 Show GitHub Exploit DB Packet Storm
246880 6.1 MEDIUM
Network 		atlassian fisheye
crucible 		Several resources in Atlassian Fisheye and Crucible before version 4.6.0 allow remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in linked issue k… CWE-79
Cross-site Scripting 		CVE-2018-13392 2024-11-21 12:47 2018-08-13 Show GitHub Exploit DB Packet Storm