Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 6, 2026, noon

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
251571 5 警告 VMware
IBM
acegisecurity		 - VMware SpringSource Spring Security および IBM WAS で使用される Acegi Security におけるセキュリティ制約条件を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-3700 2012-03-27 18:42 2010-10-27 Show GitHub Exploit DB Packet Storm
251572 4.3 警告 FreeRADIUS - FreeRADIUS の wait_for_child_to_die 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2010-3697 2012-03-27 18:42 2010-09-28 Show GitHub Exploit DB Packet Storm
251573 4.3 警告 FreeRADIUS - FreeRADIUS の fr_dhcp_decode 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2010-3696 2012-03-27 18:42 2010-09-28 Show GitHub Exploit DB Packet Storm
251574 4.3 警告 Horde - Horde IMP および Horde Groupware Webmail Edition の fetchmailprefs.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-3695 2012-03-27 18:42 2011-03-31 Show GitHub Exploit DB Packet Storm
251575 4.3 警告 Horde - Horde DIMP および Horde Groupware Webmail Edition におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-3693 2012-03-27 18:42 2011-04-4 Show GitHub Exploit DB Packet Storm
251576 6.8 警告 Horde - Horde Application Framework におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2010-3694 2012-03-27 18:42 2010-11-9 Show GitHub Exploit DB Packet Storm
251577 6.4 警告 Jasig - phpCAS の callback 関数におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2010-3692 2012-03-27 18:42 2010-10-7 Show GitHub Exploit DB Packet Storm
251578 3.3 注意 Jasig - phpCAS の PGTStorage/pgt-file.php における任意のファイルを上書きされる脆弱性 CWE-59
リンク解釈の問題 		CVE-2010-3691 2012-03-27 18:42 2010-10-7 Show GitHub Exploit DB Packet Storm
251579 4.3 警告 Jasig - phpCAS におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-3690 2012-03-27 18:42 2010-10-7 Show GitHub Exploit DB Packet Storm
251580 7.5 危険 NetArt Media - NetArtMEDIA WebSiteAdmin の ADMIN/login.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2010-3688 2012-03-27 18:42 2010-09-29 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 6, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
247021 7.8 HIGH
Local 		adobe acrobat_dc
acrobat_reader_dc 		Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-bounds write vulnerability. Successful exploitation could lead … CWE-787
 Out-of-bounds Write 		CVE-2018-12868 2024-11-21 12:46 2018-10-13 Show GitHub Exploit DB Packet Storm
247022 5.5 MEDIUM
Local 		adobe acrobat_dc
acrobat_reader_dc 		Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead t… CWE-125
Out-of-bounds Read 		CVE-2018-12867 2024-11-21 12:46 2018-10-13 Show GitHub Exploit DB Packet Storm
247023 5.5 MEDIUM
Local 		adobe acrobat_dc
acrobat_reader_dc 		Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead t… CWE-125
Out-of-bounds Read 		CVE-2018-12866 2024-11-21 12:46 2018-10-13 Show GitHub Exploit DB Packet Storm
247024 5.9 MEDIUM
Network 		1password 1password The 1Password application 6.8 for Android is affected by a Denial Of Service vulnerability. By starting the activity com.agilebits.onepassword.filling.openyolo.OpenYoloDeleteActivity or com.agilebits… CWE-20
 Improper Input Validation  		CVE-2018-13042 2024-11-21 12:46 2018-10-6 Show GitHub Exploit DB Packet Storm
247025 5.3 MEDIUM
Network 		mediawiki mediawiki Mediawiki 1.31 before 1.31.1 misses .htaccess files in the provided tarball used to protect some directories that shouldn't be web accessible. CWE-200
Information Exposure 		CVE-2018-13258 2024-11-21 12:46 2018-10-5 Show GitHub Exploit DB Packet Storm
247026 8.1 HIGH
Network 		druide antidote_9 Druide Antidote through 9.5.1 on Windows and Linux allows remote code execution through the update mechanism by leveraging use of HTTP to download installation packages. CWE-319
Cleartext Transmission of Sensitive Information 		CVE-2018-13140 2024-11-21 12:46 2018-09-25 Show GitHub Exploit DB Packet Storm
247027 7.5 HIGH
Network 		cryptosaga cryptosaga The random() function of the smart contract implementation for CryptoSaga, an Ethereum game, generates a random value with publicly readable variables such as timestamp, the current block's blockhash… CWE-338
 Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) 		CVE-2018-12975 2024-11-21 12:46 2018-09-25 Show GitHub Exploit DB Packet Storm
247028 5.9 MEDIUM
Network 		wanscam hw0021_firmware There exists a partial Denial of Service vulnerability in Wanscam HW0021 IP Cameras. An attacker could craft a malicious POST request to crash the ONVIF service on such a device. CWE-20
 Improper Input Validation  		CVE-2018-13111 2024-11-21 12:46 2018-09-22 Show GitHub Exploit DB Packet Storm
247029 7.8 HIGH
Local 		solarwinds dameware_mini_remote_control SolarWinds DameWare Mini Remote Control before 12.1 has a Buffer Overflow. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2018-12897 2024-11-21 12:46 2018-09-8 Show GitHub Exploit DB Packet Storm
247030 9.8 CRITICAL
Network 		canonical
zsh 		ubuntu_linux
zsh 		An issue was discovered in zsh before 5.6. Shebang lines exceeding 64 characters were truncated, potentially leading to an execve call to a program name that is a substring of the intended one. CWE-20
 Improper Input Validation  		CVE-2018-13259 2024-11-21 12:46 2018-09-5 Show GitHub Exploit DB Packet Storm