Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 11, 2026, 2 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
251771 6.2 警告 Fedora Project
レッドハット
- 389 Directory Server のバックアップおよび復旧スクリプトにおける権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2011-0532 2012-03-27 18:42 2011-02-23 Show GitHub Exploit DB Packet Storm
251772 9.3 危険 VideoLAN - VideoLAN VLC media player の demux/mkv/mkv.hpp におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2011-0531 2012-03-27 18:42 2011-01-26 Show GitHub Exploit DB Packet Storm
251773 7.5 危険 Wouter Verhelst - nbd の nbd-server.c におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2011-0530 2012-03-27 18:42 2011-02-22 Show GitHub Exploit DB Packet Storm
251774 5 警告 VMware - VMware の vFabric tc Server におけるアクセス権を取得される脆弱性 CWE-287
不適切な認証
CVE-2011-0527 2012-03-27 18:42 2011-08-11 Show GitHub Exploit DB Packet Storm
251775 4.3 警告 Vanilla Forums - Vanilla Forums の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-0526 2012-03-27 18:42 2011-02-8 Show GitHub Exploit DB Packet Storm
251776 6.8 警告 VideoLAN - VideoLAN VLC メディアプレイヤーの StripTags 関数 における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2011-0522 2012-03-27 18:42 2011-02-7 Show GitHub Exploit DB Packet Storm
251777 7.5 危険 MaraDNS - MaraDNS の compress_add_dlabel_points 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2011-0520 2012-03-27 18:42 2011-01-28 Show GitHub Exploit DB Packet Storm
251778 7.5 危険 gallarific - Gallarific PHP Photo Gallery script の gallery.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2011-0519 2012-03-27 18:42 2011-01-20 Show GitHub Exploit DB Packet Storm
251779 5.1 警告 lotuscms - LotusCMS Fraise の core/lib/router.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2011-0518 2012-03-27 18:42 2011-01-20 Show GitHub Exploit DB Packet Storm
251780 7.5 危険 epromptc - E-PROMPT C BetMore Site Suite における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2011-0516 2012-03-27 18:42 2011-01-18 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 11, 2026, 5:13 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
246491 8.8 HIGH
Network
pivotal_software cloud_foundry_uaa-release Cloud Foundry UAA, versions 60 prior to 66.0, contain an authorization logic error. In environments with multiple identity providers that contain accounts across identity providers with the same user… CWE-863
 Incorrect Authorization
CVE-2018-15754 2024-11-21 12:51 2018-12-14 Show GitHub Exploit DB Packet Storm
246492 9.8 CRITICAL
Network
opendental opendental Open Dental before version 18.4 installs a mysql database and uses the default credentials of "root" with a blank password. This allows anyone on the network with access to the server to access all d… CWE-521
Weak Password Requirements 
CVE-2018-15719 2024-11-21 12:51 2018-12-13 Show GitHub Exploit DB Packet Storm
246493 7.5 HIGH
Network
opendental opendental Open Dental before version 18.4 transmits the entire user database over the network when a remote unauthenticated user accesses the command prompt. This allows the attacker to gain access to username… CWE-200
Information Exposure
CVE-2018-15718 2024-11-21 12:51 2018-12-13 Show GitHub Exploit DB Packet Storm
246494 5.3 MEDIUM
Network
opendental opendental Open Dental before version 18.4 stores user passwords as base64 encoded MD5 hashes. CWE-522
 Insufficiently Protected Credentials
CVE-2018-15717 2024-11-21 12:51 2018-12-13 Show GitHub Exploit DB Packet Storm
246495 9.1 CRITICAL
Network
accusoft prizmdoc Accusoft PrizmDoc HTML5 Document Viewer before 13.5 contains an XML external entity (XXE) vulnerability, allowing an attacker to read arbitrary files or cause a denial of service (resource consumptio… CWE-611
XXE
CVE-2018-15805 2024-11-21 12:51 2018-12-11 Show GitHub Exploit DB Packet Storm
246496 6.8 MEDIUM
Network
cloud_foundry bits_service Cloud Foundry Bits Service, versions prior to 2.18.0, includes an information disclosure vulnerability. A remote malicious user may execute a timing attack to brute-force the signing key, allowing th… CWE-200
Information Exposure
CVE-2018-15800 2024-11-21 12:51 2018-12-11 Show GitHub Exploit DB Packet Storm
246497 8.8 HIGH
Network
pivotal_software cloud_foundry_nfs_volume Cloud Foundry NFS volume release, 1.2.x prior to 1.2.5, 1.5.x prior to 1.5.4, 1.7.x prior to 1.7.3, logs the cf admin username and password when running the nfsbrokerpush BOSH deploy errand. A remote… CWE-532
 Inclusion of Sensitive Information in Log Files
CVE-2018-15797 2024-11-21 12:51 2018-12-6 Show GitHub Exploit DB Packet Storm
246498 4.3 MEDIUM
Physics
dell data_protection_\|_encryption Dell Encryption (formerly Dell Data Protection | Encryption) v10.1.0 and earlier contain an information disclosure vulnerability. A malicious user with physical access to the machine could potentiall… CWE-200
Information Exposure
CVE-2018-15773 2024-11-21 12:51 2018-12-6 Show GitHub Exploit DB Packet Storm
246499 8.8 HIGH
Network
nuuo nvrmini2_firmware NUUO NVRMini2 version 3.9.1 is vulnerable to authenticated remote command injection. An attacker can send crafted requests to upgrade_handle.php to execute OS commands as root. CWE-78
OS Command 
CVE-2018-15716 2024-11-21 12:51 2018-12-1 Show GitHub Exploit DB Packet Storm
246500 9.8 CRITICAL
Network
zoom zoom Zoom clients on Windows (before version 4.1.34814.1119), Mac OS (before version 4.1.34801.1116), and Linux (2.4.129780.0915 and below) are vulnerable to unauthorized message processing. A remote unau… CWE-20
 Improper Input Validation 
CVE-2018-15715 2024-11-21 12:51 2018-12-1 Show GitHub Exploit DB Packet Storm