Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 28, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
251921 6.8 警告 アップル - Apple Mac OS X の CoreText における任意のコードを実行される脆弱性 CWE-399
リソース管理の問題 		CVE-2011-3449 2012-02-6 16:28 2012-02-2 Show GitHub Exploit DB Packet Storm
251922 6.8 警告 アップル - Apple Mac OS X の CoreMedia におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2011-3448 2012-02-6 16:28 2012-02-2 Show GitHub Exploit DB Packet Storm
251923 4.3 警告 アップル - Apple Mac OS X の CFNetwork における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2011-3447 2012-02-6 16:27 2012-02-2 Show GitHub Exploit DB Packet Storm
251924 7.5 危険 アップル - Apple Mac OS X の Apple Type Services における任意のコードを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2011-3446 2012-02-6 16:26 2012-02-2 Show GitHub Exploit DB Packet Storm
251925 4.3 警告 アップル - Apple Mac OS X の Address Book における CardDAV データを読まれる脆弱性 CWE-310
暗号の問題 		CVE-2011-3444 2012-02-6 16:25 2012-02-2 Show GitHub Exploit DB Packet Storm
251926 9.3 危険 Invensys - Invensys Wonderware InBatch の ActiveX コントロールにおけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2011-3141 2012-02-3 16:59 2011-08-16 Show GitHub Exploit DB Packet Storm
251927 9.3 危険 Invensys - Invensys Wonderware Information Server におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2011-2962 2012-02-3 16:58 2011-07-29 Show GitHub Exploit DB Packet Storm
251928 9.3 危険 Schneider Electric - InduSoft Web Studio の CEServer.exe におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2011-4052 2012-02-3 16:58 2011-12-5 Show GitHub Exploit DB Packet Storm
251929 10 危険 Schneider Electric - InduSoft Web Studio の CEServer.exe における任意のコードを実行される脆弱性 CWE-287
不適切な認証 		CVE-2011-4051 2012-02-3 16:57 2011-12-5 Show GitHub Exploit DB Packet Storm
251930 4.3 警告 General Electric Company - GE Intelligent Platforms Proficy Historian におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-3320 2012-02-3 16:56 2011-11-2 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
246891 9.8 CRITICAL
Network 		battelle v2i_hub Battelle V2I Hub 2.5.1 could allow a remote attacker to bypass security restrictions, caused by the direct checking of the API key against a user-supplied value in PHP's GET global variable array usi… NVD-CWE-noinfo
CVE-2018-1000628 2024-11-21 12:40 2018-12-29 Show GitHub Exploit DB Packet Storm
246892 9.8 CRITICAL
Network 		battelle v2i_hub Battelle V2I Hub 2.5.1 could allow a remote attacker to obtain sensitive information, caused by the failure to restrict access to the API key file. An attacker could exploit this vulnerability to obt… CWE-522
 Insufficiently Protected Credentials 		CVE-2018-1000627 2024-11-21 12:40 2018-12-29 Show GitHub Exploit DB Packet Storm
246893 9.8 CRITICAL
Network 		battelle v2i_hub Battelle V2I Hub 2.5.1 could allow a remote attacker to bypass security restrictions, caused by the lack of requirement to change the default API key. An attacker could exploit this vulnerability usi… NVD-CWE-noinfo
CVE-2018-1000626 2024-11-21 12:40 2018-12-29 Show GitHub Exploit DB Packet Storm
246894 9.8 CRITICAL
Network 		battelle v2i_hub Battelle V2I Hub 2.5.1 contains hard-coded credentials for the administrative account. An attacker could exploit this vulnerability to log in as an admin on any installation and gain unauthorized acc… CWE-798
 Use of Hard-coded Credentials 		CVE-2018-1000625 2024-11-21 12:40 2018-12-29 Show GitHub Exploit DB Packet Storm
246895 7.5 HIGH
Network 		battelle v2i_hub Battelle V2I Hub 2.5.1 is vulnerable to a denial of service, caused by the failure to restrict access to a sensitive functionality. By visiting http://V2I_HUB/UI/powerdown.php, a remote attacker coul… CWE-269
 Improper Privilege Management 		CVE-2018-1000624 2024-11-21 12:40 2018-12-29 Show GitHub Exploit DB Packet Storm
246896 5.5 MEDIUM
Local 		nasm netwide_assembler nasm version 2.14.01rc5, 2.15 contains a Buffer Overflow vulnerability in asm/stdscan.c:130 that can result in Stack-overflow caused by triggering endless macro generation, crash the program. This at… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2018-1000886 2024-11-21 12:40 2018-12-21 Show GitHub Exploit DB Packet Storm
246897 9.8 CRITICAL
Network 		phkp_project phkp PHKP version including commit 88fd9cfdf14ea4b6ac3e3967feea7bcaabb6f03b contains a Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in function pgp_exe… CWE-78
OS Command  		CVE-2018-1000885 2024-11-21 12:40 2018-12-21 Show GitHub Exploit DB Packet Storm
246898 9.8 CRITICAL
Network 		vestacp vesta_control_panel Vesta CP version Prior to commit f6f6f9cfbbf2979e301956d1c6ab5c44386822c0 -- any release prior to 0.9.8-18 contains a CWE-208 / Information Exposure Through Timing Discrepancy vulnerability in Passwo… CWE-203
 Information Exposure Through Discrepancy 		CVE-2018-1000884 2024-11-21 12:40 2018-12-21 Show GitHub Exploit DB Packet Storm
246899 6.5 MEDIUM
Network 		plug_project plug Elixir Plug Plug version All contains a Header Injection vulnerability in Connection that can result in Given a cookie value, Headers can be added. This attack appear to be exploitable via Crafting a… CWE-20
 Improper Input Validation  		CVE-2018-1000883 2024-11-21 12:40 2018-12-21 Show GitHub Exploit DB Packet Storm
246900 7.5 HIGH
Network 		webidsupport webid WeBid version up to current version 1.2.2 contains a Directory Traversal vulnerability in getthumb.php that can result in Arbitrary Image File Read. This attack appear to be exploitable via HTTP GET … CWE-22
Path Traversal 		CVE-2018-1000882 2024-11-21 12:40 2018-12-21 Show GitHub Exploit DB Packet Storm