Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 27, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
251801 7.5 危険 ソフォス - Cyberoam Central Console におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2012-1047 2012-02-14 14:47 2012-02-12 Show GitHub Exploit DB Packet Storm
251802 4.3 警告 Symphony CMS - Symphony CMS における SQL インジェクションの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-4341 2012-02-14 14:46 2012-02-12 Show GitHub Exploit DB Packet Storm
251803 3.5 注意 Symphony CMS - Symphony CMS におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-4340 2012-02-14 14:45 2012-02-12 Show GitHub Exploit DB Packet Storm
251804 4.3 警告 Deon George - phpLDAPadmin におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-0834 2012-02-14 14:45 2012-02-11 Show GitHub Exploit DB Packet Storm
251805 7.5 危険 Mozilla Foundation - 複数の Mozilla 製品におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2012-0452 2012-02-14 14:42 2012-02-10 Show GitHub Exploit DB Packet Storm
251806 4.3 警告 IBM - IBM Cognos TM1 の TM1 Web におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-1046 2012-02-14 14:18 2012-02-10 Show GitHub Exploit DB Packet Storm
251807 5 警告 Apache Software Foundation - Apache Portable Runtime ライブラリの apr_hash.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2012-0840 2012-02-14 14:17 2012-02-10 Show GitHub Exploit DB Packet Storm
251808 5 警告 AdaCore - AdaCore Ada Web Services におけるサービス運用妨害 (CPU 資源の消費) の脆弱性 CWE-20
不適切な入力確認 		CVE-2012-1035 2012-02-13 16:39 2012-01-27 Show GitHub Exploit DB Packet Storm
251809 6.5 警告 サイベース - Sybase M-Business Anywhere の Web 管理インターフェイスにおけるユーザーアカウントをリストアップされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-5078 2012-02-13 16:15 2012-02-8 Show GitHub Exploit DB Packet Storm
251810 5 警告 INRIA - OCaml におけるサービス運用妨害 (CPU 資源の消費) の脆弱性 CWE-20
不適切な入力確認 		CVE-2012-0839 2012-02-13 16:13 2012-02-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 27, 2026, 4:52 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
247121 8.8 HIGH
Network 		qnap q\'center Command injection vulnerability in date of QNAP Q'center Virtual Appliance version 1.7.1063 and earlier could allow authenticated users to run arbitrary commands. CWE-78
OS Command  		CVE-2018-0709 2024-11-21 12:38 2018-07-17 Show GitHub Exploit DB Packet Storm
247122 8.8 HIGH
Network 		qnap q\'center Command injection vulnerability in networking of QNAP Q'center Virtual Appliance version 1.7.1063 and earlier could allow authenticated users to run arbitrary commands. CWE-78
OS Command  		CVE-2018-0708 2024-11-21 12:38 2018-07-17 Show GitHub Exploit DB Packet Storm
247123 7.2 HIGH
Network 		qnap q\'center Command injection vulnerability in change password of QNAP Q'center Virtual Appliance version 1.7.1063 and earlier could allow authenticated users to run arbitrary commands. CWE-78
OS Command  		CVE-2018-0707 2024-11-21 12:38 2018-07-17 Show GitHub Exploit DB Packet Storm
247124 8.8 HIGH
Network 		qnap q\'center Exposure of Private Information in QNAP Q'center Virtual Appliance version 1.7.1063 and earlier could allow authenticated users to access sensitive information. NVD-CWE-noinfo
CVE-2018-0706 2024-11-21 12:38 2018-07-17 Show GitHub Exploit DB Packet Storm
247125 3.3 LOW
Local 		clamav
debian 		clamav
debian_linux 		ClamAV before 0.100.1 lacks a PDF object length check, resulting in an unreasonably long time to parse a relatively small file. CWE-20
 Improper Input Validation  		CVE-2018-0361 2024-11-21 12:38 2018-07-17 Show GitHub Exploit DB Packet Storm
247126 5.5 MEDIUM
Local 		clamav
canonical
debian 		clamav
ubuntu_linux
debian_linux 		ClamAV before 0.100.1 has an HWP integer overflow with a resultant infinite loop via a crafted Hangul Word Processor file. This is in parsehwp3_paragraph() in libclamav/hwp.c. CWE-190
 Integer Overflow or Wraparound 		CVE-2018-0360 2024-11-21 12:38 2018-07-17 Show GitHub Exploit DB Packet Storm
247127 8.8 HIGH
Network 		cisco ip_phone_multiplatform_firmware A vulnerability in the web-based UI of Cisco IP Phone 6800, 7800, and 8800 Series with Multiplatform Firmware before 11.2(1) could allow an authenticated, remote attacker to perform a command injecti… CWE-78
OS Command  		CVE-2018-0341 2024-11-21 12:38 2018-07-17 Show GitHub Exploit DB Packet Storm
247128 7.5 HIGH
Network 		cisco firepower_management_center A vulnerability in the detection engine parsing of Security Socket Layer (SSL) protocol packets for Cisco Firepower System Software could allow an unauthenticated, remote attacker to cause a denial o… CWE-20
 Improper Input Validation  		CVE-2018-0385 2024-11-21 12:38 2018-07-17 Show GitHub Exploit DB Packet Storm
247129 5.8 MEDIUM
Network 		cisco firepower_management_center A vulnerability in the detection engine of Cisco FireSIGHT System Software could allow an unauthenticated, remote attacker to bypass a URL-based access control policy that is configured to block traf… CWE-693
 Protection Mechanism Failure 		CVE-2018-0384 2024-11-21 12:38 2018-07-17 Show GitHub Exploit DB Packet Storm
247130 8.6 HIGH
Network 		cisco firepower_management_center A vulnerability in the detection engine of Cisco FireSIGHT System Software could allow an unauthenticated, remote attacker to bypass a file policy that is configured to block the transfer of files to… CWE-693
 Protection Mechanism Failure 		CVE-2018-0383 2024-11-21 12:38 2018-07-17 Show GitHub Exploit DB Packet Storm