Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 27, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
251691 7.5 危険 LANDesk - Lenovo ThinkManagement Console の ServerSetup web サービスにおける任意のコードを実行される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-1195 2012-02-21 16:43 2012-02-18 Show GitHub Exploit DB Packet Storm
251692 4.3 警告 Craig Barratt - BackupPC の RestoreFile.pm におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-5081 2012-02-21 16:42 2012-02-18 Show GitHub Exploit DB Packet Storm
251693 4.3 警告 Craig Barratt - BackupPC の View.pm におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-4923 2012-02-21 16:41 2012-02-18 Show GitHub Exploit DB Packet Storm
251694 9.3 危険 TYPO3 Association - TYPO3 の workspaces system エクステンションにおける PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2011-4614 2012-02-21 16:40 2011-12-16 Show GitHub Exploit DB Packet Storm
251695 4.3 警告 Craig Barratt - BackupPC の CGI/Browse.pm におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-3361 2012-02-21 16:34 2012-02-18 Show GitHub Exploit DB Packet Storm
251696 7.5 危険 Earl Miles - Drupal 用 Views モジュールにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2011-4113 2012-02-21 16:33 2012-02-17 Show GitHub Exploit DB Packet Storm
251697 2.1 注意 Robert Ancell - LightDM における任意のファイルの所有権を変更される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-4105 2012-02-21 16:26 2012-02-17 Show GitHub Exploit DB Packet Storm
251698 6.4 警告 マイクロソフト - Microsoft Windows Server 2008 における無効なドメイン名の継続的な名前解決を可能にされる脆弱性 CWE-Other
その他 		CVE-2012-1194 2012-02-21 16:25 2012-02-17 Show GitHub Exploit DB Packet Storm
251699 6.4 警告 PowerDNS - PowerDNS における無効なドメイン名の継続的な名前解決を可能にされる脆弱性 CWE-DesignError
CVE-2012-1193 2012-02-21 16:24 2012-02-17 Show GitHub Exploit DB Packet Storm
251700 6.4 警告 Stichting NLnet Labs - Unbound における無効なドメイン名の継続的な名前解決を可能にされる脆弱性 CWE-DesignError
CVE-2012-1192 2012-02-21 16:22 2012-02-17 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
247291 5.5 MEDIUM
Local 		artifex
debian 		mupdf
debian_linux 		In Artifex MuPDF 1.12.0 and earlier, multiple use of uninitialized value bugs in the PDF parser could allow an attacker to cause a denial of service (crash) or influence program flow via a crafted fi… CWE-20
 Improper Input Validation  		CVE-2018-1000040 2024-11-21 12:39 2018-05-24 Show GitHub Exploit DB Packet Storm
247292 7.8 HIGH
Local 		artifex mupdf In Artifex MuPDF 1.12.0 and earlier, multiple heap use after free bugs in the PDF parser could allow an attacker to execute arbitrary code, read memory, or cause a denial of service via a crafted fil… CWE-416
 Use After Free 		CVE-2018-1000039 2024-11-21 12:39 2018-05-24 Show GitHub Exploit DB Packet Storm
247293 9.1 CRITICAL
Network 		debian
canonical
haxx
redhat
oracle 		debian_linux
ubuntu_linux
curl
enterprise_linux_desktop
enterprise_linux_workstation
enterprise_linux_server
enterprise_manager_ops_center
peoplesoft_enterprise_peopletools
co… 		curl version curl 7.20.0 to and including curl 7.59.0 contains a CWE-126: Buffer Over-read vulnerability in denial of service that can result in curl can be tricked into reading data beyond the end o… CWE-125
Out-of-bounds Read 		CVE-2018-1000301 2024-11-21 12:39 2018-05-24 Show GitHub Exploit DB Packet Storm
247294 5.5 MEDIUM
Local 		debian
linux
canonical
redhat 		debian_linux
linux_kernel
ubuntu_linux
enterprise_linux_desktop
enterprise_linux
enterprise_linux_server_aus
enterprise_linux_workstation
enterprise_linux_server_tus
enterpris… 		The Linux Kernel version 3.18 contains a dangerous feature vulnerability in modify_user_hw_breakpoint() that can result in crash and possibly memory corruption. This attack appear to be exploitable v… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2018-1000199 2024-11-21 12:39 2018-05-24 Show GitHub Exploit DB Packet Storm
247295 9.8 CRITICAL
Network 		opennetworking openflow OpenFlow version 1.0 onwards contains a Denial of Service and Improper authorization vulnerability in OpenFlow handshake: The DPID (DataPath IDentifier) in the features_reply message are inherently t… CWE-863
 Incorrect Authorization 		CVE-2018-1000155 2024-11-21 12:39 2018-05-24 Show GitHub Exploit DB Packet Storm
247296 7.8 HIGH
Local 		artifex mupdf In Artifex MuPDF 1.12.0 and earlier, a stack buffer overflow in function pdf_lookup_cmap_full in pdf/pdf-cmap.c could allow an attacker to execute arbitrary code via a crafted file. CWE-787
 Out-of-bounds Write 		CVE-2018-1000038 2024-11-21 12:39 2018-05-24 Show GitHub Exploit DB Packet Storm
247297 5.5 MEDIUM
Local 		artifex
debian 		mupdf
debian_linux 		In Artifex MuPDF 1.12.0 and earlier, multiple reachable assertions in the PDF parser allow an attacker to cause a denial of service (assert crash) via a crafted file. CWE-20
 Improper Input Validation  		CVE-2018-1000037 2024-11-21 12:39 2018-05-24 Show GitHub Exploit DB Packet Storm
247298 5.5 MEDIUM
Local 		artifex
debian 		mupdf
debian_linux 		In Artifex MuPDF 1.12.0 and earlier, multiple memory leaks in the PDF parser allow an attacker to cause a denial of service (memory leak) via a crafted file. CWE-772
 Missing Release of Resource after Effective Lifetime 		CVE-2018-1000036 2024-11-21 12:39 2018-05-24 Show GitHub Exploit DB Packet Storm
247299 8.8 HIGH
Network 		kubernetes cri-o Kubernetes CRI-O version prior to 1.9 contains a Privilege Context Switching Error (CWE-270) vulnerability in the handling of ambient capabilities that can result in containers running with elevated … CWE-269
 Improper Privilege Management 		CVE-2018-1000400 2024-11-21 12:39 2018-05-19 Show GitHub Exploit DB Packet Storm
247300 7.6 HIGH
Adjacent 		microsoft windows_10
windows_server_2016 		A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate vSMB packet data, aka "Hyper-V vSMB Remote Code Execution Vulnerability." This affects Wi… CWE-20
 Improper Input Validation  		CVE-2018-0961 2024-11-21 12:39 2018-05-10 Show GitHub Exploit DB Packet Storm