Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 11, 2026, 10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
252031	7.5	危険	intendance	-	MySource Matrix の index.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4639	2012-03-27 18:42	2010-12-30	Show	GitHub Exploit DB Packet Storm

252032	6.8	警告	iptechinside	-	JQuarks4s コンポーネントの submitSurvey 関数における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4638	2012-03-27 18:42	2010-12-30	Show	GitHub Exploit DB Packet Storm

252033	4.3	警告	finalcut	-	WordPress の FeedList プラグインにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-4637	2012-03-27 18:42	2010-12-30	Show	GitHub Exploit DB Packet Storm

252034	7.5	危険	site2nite	-	Site2Nite Business e-Listings の detail.asp における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4636	2012-03-27 18:42	2010-12-30	Show	GitHub Exploit DB Packet Storm

252035	7.5	危険	site2nite	-	Site2Nite VRBO Listings の detail.asp における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4635	2012-03-27 18:42	2010-12-30	Show	GitHub Exploit DB Packet Storm

252036	7.5	危険	sumeffect	-	digiSHOP の cart.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4633	2012-03-27 18:42	2010-12-30	Show	GitHub Exploit DB Packet Storm

252037	7.5	危険	PilotCart	-	ASPilot Pilot Cart における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4632	2012-03-27 18:42	2010-12-30	Show	GitHub Exploit DB Packet Storm

252038	4.3	警告	PilotCart	-	ASPilot Pilot Cart におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-4631	2012-03-27 18:42	2010-12-30	Show	GitHub Exploit DB Packet Storm

252039	4.3	警告	fubra	-	WordPress の WP Survey And Quiz Tool プラグインにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-4630	2012-03-27 18:42	2010-12-30	Show	GitHub Exploit DB Packet Storm

252040	5	警告	MyBB Group	-	MyBB におけるサービス運用妨害 (DoS) の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-4629	2012-03-27 18:42	2010-02-1	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 11, 2026, 5:13 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
246361	7.5	HIGH Network	dnnsoftware	dotnetnuke	DNN (aka DotNetNuke) 9.2 through 9.2.1 incorrectly converts encryption key source values, resulting in lower than expected entropy.	CWE-331 Insufficient Entropy	CVE-2018-15812	2024-11-21 12:51	2019-07-4	Show	GitHub Exploit DB Packet Storm

246362	9.8	CRITICAL Network	actiontec	web6000q_firmware	On Telus Actiontec WEB6000Q v1.1.02.22 devices, an attacker can login with root level access with the user "root" and password "admin" by using the enabled onboard UART headers.	CWE-662 Improper Synchronization	CVE-2018-15555	2024-11-21 12:51	2019-06-29	Show	GitHub Exploit DB Packet Storm

246363	9.8	CRITICAL Network	lexmark	cx82x_firmware cx860_firmware xc6152_firmware xc8155_firmware xc8160_firmware cx72x_firmware xc41x0_firmware cx92x_firmware xc92x5_firmware mx321_firmware mb2338_firmwar…	Various Lexmark devices have a Buffer Overflow (issue 2 of 2).	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2018-15520	2024-11-21 12:51	2019-06-29	Show	GitHub Exploit DB Packet Storm

246364	8.8	HIGH Adjacent	actiontec	web6000q_firmware	An issue was discovered in the Quantenna WiFi Controller on Telus Actiontec WEB6000Q v1.1.02.22 devices. An attacker can statically set his/her IP to anything on the 169.254.1.0/24 subnet, and obtain…	CWE-269 Improper Privilege Management	CVE-2018-15557	2024-11-21 12:51	2019-06-28	Show	GitHub Exploit DB Packet Storm

246365	9.8	CRITICAL Network	actiontec	web6000q_firmware	The Quantenna WiFi Controller on Telus Actiontec WEB6000Q v1.1.02.22 allows login with root level access with the user "root" and an empty password by using the enabled onboard UART headers.	CWE-287 Improper Authentication	CVE-2018-15556	2024-11-21 12:51	2019-06-28	Show	GitHub Exploit DB Packet Storm

246366	5.5	MEDIUM Local	stopzilla	antimalware	An issue was discovered in STOPzilla AntiMalware 6.5.2.59. The driver file szkg64.sys contains an Arbitrary Write vulnerability due to not validating the output buffer address value from IOCtl 0x8000…	CWE-20 Improper Input Validation	CVE-2018-15735	2024-11-21 12:51	2019-06-22	Show	GitHub Exploit DB Packet Storm

246367	5.5	MEDIUM Local	stopzilla	antimalware	An issue was discovered in STOPzilla AntiMalware 6.5.2.59. The driver file szkg64.sys contains an Arbitrary Write vulnerability due to not validating the output buffer address value from IOCtl 0x8000…	CWE-20 Improper Input Validation	CVE-2018-15734	2024-11-21 12:51	2019-06-22	Show	GitHub Exploit DB Packet Storm

246368	5.5	MEDIUM Local	stopzilla	antimalware	An issue was discovered in STOPzilla AntiMalware 6.5.2.59. The driver file szkg64.sys contains a NULL Pointer Dereference vulnerability due to not validating the size of the output buffer value from …	CWE-476 NULL Pointer Dereference	CVE-2018-15733	2024-11-21 12:51	2019-06-22	Show	GitHub Exploit DB Packet Storm

246369	5.5	MEDIUM Local	stopzilla	antimalware	An issue was discovered in STOPzilla AntiMalware 6.5.2.59. The driver file szkg64.sys contains an Arbitrary Write vulnerability due to not validating the output buffer address value from IOCtl 0x8000…	CWE-20 Improper Input Validation	CVE-2018-15732	2024-11-21 12:51	2019-06-22	Show	GitHub Exploit DB Packet Storm

246370	5.5	MEDIUM Local	stopzilla	antimalware	An issue was discovered in STOPzilla AntiMalware 6.5.2.59. The driver file szkg64.sys contains a Denial of Service vulnerability due to not validating the output buffer address value from IOCtl 0x800…	CWE-20 Improper Input Validation	CVE-2018-15731	2024-11-21 12:51	2019-06-22	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed