Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 4, 2026, 4 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
251651 6.8 警告 MediaWiki - MediaWiki の MediaWikiParserTest.php における任意の PHP コードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2010-2789 2012-03-27 18:42 2011-04-26 Show GitHub Exploit DB Packet Storm
251652 2.6 注意 MediaWiki - MediaWiki の profileinfo.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-2788 2012-03-27 18:42 2011-04-26 Show GitHub Exploit DB Packet Storm
251653 4.3 警告 MediaWiki - MediaWiki の api.php における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2010-2787 2012-03-27 18:42 2011-04-26 Show GitHub Exploit DB Packet Storm
251654 9 危険 シスコシステムズ - Cisco WLC におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2010-2843 2012-03-27 18:42 2010-09-8 Show GitHub Exploit DB Packet Storm
251655 9 危険 シスコシステムズ - Cisco WLC におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2010-2842 2012-03-27 18:42 2010-09-8 Show GitHub Exploit DB Packet Storm
251656 6.8 警告 シスコシステムズ - Cisco WLC におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足
CVE-2010-2841 2012-03-27 18:42 2010-09-8 Show GitHub Exploit DB Packet Storm
251657 3.5 注意 MantisBT Group - MantisBT におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-2802 2012-03-27 18:42 2010-05-23 Show GitHub Exploit DB Packet Storm
251658 6.8 警告 dest-unreach.org - Socat の nestlex 関数におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2010-2799 2012-03-27 18:42 2010-09-14 Show GitHub Exploit DB Packet Storm
251659 7.5 危険 CMS Made Simple - CMS Made Simple の lib/translation.functions.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2010-2797 2012-03-27 18:42 2010-07-13 Show GitHub Exploit DB Packet Storm
251660 6.8 警告 マイクロソフト
レッドハット
- RHEV Manager の SPICE plug-in for Internet Explorer における競合状態の脆弱性 CWE-362
競合状態
CVE-2010-2793 2012-03-27 18:42 2010-12-6 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 4, 2026, 4:17 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
246981 7.8 HIGH
Local
qualcomm mdm9150_firmware
mdm9206_firmware
mdm9607_firmware
mdm9640_firmware
mdm9650_firmware
mdm9655_firmware
msm8909w_firmware
msm8996au_firmware
qcs605_firmware
sd_210_firmware
Undefined behavior in UE while processing unknown IEI in OTA message in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearable… CWE-20
 Improper Input Validation 
CVE-2018-11966 2024-11-21 12:44 2019-04-5 Show GitHub Exploit DB Packet Storm
246982 7.8 HIGH
Local
qualcomm mdm9206_firmware
mdm9607_firmware
mdm9650_firmware
mdm9655_firmware
msm8996au_firmware
sd_410_firmware
sd_412_firmware
sd_820a_firmware
Improper input validation in QCPE create function may lead to integer overflow in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile in MDM920… CWE-20
 Improper Input Validation 
CVE-2018-11830 2024-11-21 12:44 2019-04-5 Show GitHub Exploit DB Packet Storm
246983 5.5 MEDIUM
Local
qualcomm mdm9206_firmware
mdm9607_firmware
mdm9650_firmware
mdm9655_firmware
qm215_firmware
sd_210_firmware
sd_212_firmware
sd_205_firmware
sd_410_firmware
sd_412_firmware
sd_425…
Insufficient protection of keys in keypad can lead HLOS to gain access to confidential keypad input data in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Sna… NVD-CWE-noinfo
CVE-2018-11958 2024-11-21 12:44 2019-04-5 Show GitHub Exploit DB Packet Storm
246984 6.8 MEDIUM
Physics
tianocore edk_ii Stack overflow in DxeCore for EDK II may allow an unauthenticated user to potentially enable escalation of privilege, information disclosure and/or denial of service via local access. CWE-787
 Out-of-bounds Write
CVE-2018-12183 2024-11-21 12:44 2019-03-28 Show GitHub Exploit DB Packet Storm
246985 6.7 MEDIUM
Local
tianocore edk_ii Insufficient memory write check in SMM service for EDK II may allow an authenticated user to potentially enable escalation of privilege, information disclosure and/or denial of service via local acce… CWE-441
Confused Deputy
CVE-2018-12182 2024-11-21 12:44 2019-03-28 Show GitHub Exploit DB Packet Storm
246986 6.0 MEDIUM
Local
tianocore edk_ii Stack overflow in corrupted bmp for EDK II may allow unprivileged user to potentially enable denial of service or elevation of privilege via local access. CWE-787
 Out-of-bounds Write
CVE-2018-12181 2024-11-21 12:44 2019-03-28 Show GitHub Exploit DB Packet Storm
246987 8.8 HIGH
Network
tianocore
opensuse
edk_ii
leap
Buffer overflow in BlockIo service for EDK II may allow an unauthenticated user to potentially enable escalation of privilege, information disclosure and/or denial of service via network access. CWE-787
 Out-of-bounds Write
CVE-2018-12180 2024-11-21 12:44 2019-03-28 Show GitHub Exploit DB Packet Storm
246988 7.8 HIGH
Local
tianocore edk_ii Improper configuration in system firmware for EDK II may allow unauthenticated user to potentially enable escalation of privilege, information disclosure and/or denial of service via local access. NVD-CWE-noinfo
CVE-2018-12179 2024-11-21 12:44 2019-03-28 Show GitHub Exploit DB Packet Storm
246989 9.1 CRITICAL
Network
tianocore edk_ii Buffer overflow in network stack for EDK II may allow unprivileged user to potentially enable escalation of privilege and/or denial of service via network. CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2018-12178 2024-11-21 12:44 2019-03-28 Show GitHub Exploit DB Packet Storm
246990 7.5 HIGH
Network
fasterxml
debian
fedoraproject
oracle
redhat
jackson-databind
debian_linux
fedora
jd_edwards_enterpriseone_tools
retail_merchandising_system
openshift_container_platform
jboss_enterprise_application_platform
single_sign-on<…
An issue was discovered in FasterXML jackson-databind prior to 2.7.9.4, 2.8.11.2, and 2.9.6. When Default Typing is enabled (either globally or for a specific property), the service has the Oracle JD… CWE-502
 Deserialization of Untrusted Data
CVE-2018-12023 2024-11-21 12:44 2019-03-22 Show GitHub Exploit DB Packet Storm