Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 9, 2026, noon

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
252061 6.8 警告 ApPHP - ApPHP PHP MicroCMS における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-3481 2012-03-27 18:42 2010-09-22 Show GitHub Exploit DB Packet Storm
252062 4.3 警告 g.rodola - pyftpdlib の FTPHandler クラスにおけるサービス運用妨害 (DoS) の脆弱性 CWE-362
競合状態 		CVE-2010-3494 2012-03-27 18:42 2009-04-1 Show GitHub Exploit DB Packet Storm
252063 6.8 警告 ApPHP - ApPHP PHP MicroCMS の index.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2010-3480 2012-03-27 18:42 2010-09-22 Show GitHub Exploit DB Packet Storm
252064 7.5 危険 boutikone - BoutikOne の list.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-3479 2012-03-27 18:42 2010-09-22 Show GitHub Exploit DB Packet Storm
252065 5 警告 OTRS プロジェクト - OTRS におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2010-3476 2012-03-27 18:42 2010-09-20 Show GitHub Exploit DB Packet Storm
252066 5.8 警告 IBM - IBM FileNet P8AE の Workplace コンポーネントにおけるオープンリダイレクトの脆弱性 CWE-20
不適切な入力確認 		CVE-2010-3473 2012-03-27 18:42 2010-09-20 Show GitHub Exploit DB Packet Storm
252067 4.3 警告 IBM - IBM FileNet P8AE の Workplace コンポーネントにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-3472 2012-03-27 18:42 2010-09-20 Show GitHub Exploit DB Packet Storm
252068 4.3 警告 IBM - IBM FileNet P8AE の Workplace コンポーネントにおけるセッションをハイジャックされる脆弱性 CWE-287
不適切な認証 		CVE-2010-3471 2012-03-27 18:42 2010-09-20 Show GitHub Exploit DB Packet Storm
252069 4.3 警告 IBM - IBM FileNet P8AE の Workplace コンポーネントにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-3470 2012-03-27 18:42 2010-09-20 Show GitHub Exploit DB Packet Storm
252070 5 警告 Blue River - Mura CMS および Sava CMS の fileManager.cfc におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2010-3468 2012-03-27 18:42 2010-09-29 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 9, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
246401 5.5 MEDIUM
Local 		php
canonical
debian
netapp 		php
ubuntu_linux
debian_linux
storage_automation_store 		exif_process_IFD_in_MAKERNOTE in ext/exif/exif.c in PHP before 5.6.37, 7.0.x before 7.0.31, 7.1.x before 7.1.20, and 7.2.x before 7.2.8 allows remote attackers to cause a denial of service (out-of-bo… CWE-125
Out-of-bounds Read 		CVE-2018-14851 2024-11-21 12:49 2018-08-3 Show GitHub Exploit DB Packet Storm
246402 9.1 CRITICAL
Network 		mikrotik routeros MikroTik RouterOS through 6.42 allows unauthenticated remote attackers to read arbitrary files and remote authenticated attackers to write arbitrary files due to a directory traversal vulnerability i… CWE-22
Path Traversal 		CVE-2018-14847 2024-11-21 12:49 2018-08-2 Show GitHub Exploit DB Packet Storm
246403 6.1 MEDIUM
Network 		intelliants subrion uploads/.htaccess in Subrion CMS 4.2.1 allows XSS because it does not block .html file uploads (but does block, for example, .htm file uploads). CWE-79
Cross-site Scripting 		CVE-2018-14840 2024-11-21 12:49 2018-08-2 Show GitHub Exploit DB Packet Storm
246404 6.1 MEDIUM
Network 		rejucms_project rejucms rejucms 2.1 has stored XSS via the admin/book.php content parameter. CWE-79
Cross-site Scripting 		CVE-2018-14838 2024-11-21 12:49 2018-08-2 Show GitHub Exploit DB Packet Storm
246405 6.5 MEDIUM
Network 		subrion subrion_cms Subrion 4.2.1 is vulnerable to Improper Access control because user groups not having access to the Admin panel are able to access it (but not perform actions) if the Guests user group has access to … CWE-269
 Improper Privilege Management 		CVE-2018-14836 2024-11-21 12:49 2018-08-2 Show GitHub Exploit DB Packet Storm
246406 5.4 MEDIUM
Network 		subrion subrion_cms Subrion CMS v4.2.1 is vulnerable to Stored XSS because of no escaping added to the tooltip information being displayed in multiple areas. CWE-79
Cross-site Scripting 		CVE-2018-14835 2024-11-21 12:49 2018-08-2 Show GitHub Exploit DB Packet Storm
246407 5.4 MEDIUM
Network 		dleviet datalife_engine An issue was discovered in DataLife Engine (DLE) through 13.0. An attacker can use XSS (related to the /addnews.html and /index.php?do=addnews URIs) to send a malicious script to unsuspecting Admins … CWE-79
Cross-site Scripting 		CVE-2018-14777 2024-11-21 12:49 2018-08-2 Show GitHub Exploit DB Packet Storm
246408 5.4 MEDIUM
Network 		clickstudios passwordstate Click Studios Passwordstate before 8.3 Build 8397 allows XSS by authenticated users via an uploaded HTML document. CWE-79
Cross-site Scripting 		CVE-2018-14776 2024-11-21 12:49 2018-08-1 Show GitHub Exploit DB Packet Storm
246409 5.5 MEDIUM
Local 		openbsd openbsd tss_alloc in sys/arch/i386/i386/gdt.c in OpenBSD 6.2 and 6.3 has a Local Denial of Service (system crash) due to incorrect I/O port access control on the i386 architecture. CWE-20
 Improper Input Validation  		CVE-2018-14775 2024-11-21 12:49 2018-08-1 Show GitHub Exploit DB Packet Storm
246410 7.8 HIGH
Local 		red-gate .net_reflector
smartassembly 		Redgate .NET Reflector before 10.0.7.774 and SmartAssembly before 6.12.5 allow attackers to execute code by decompiling a compiled .NET object (such as a DLL or EXE file) with a specific embedded res… CWE-20
 Improper Input Validation  		CVE-2018-14581 2024-11-21 12:49 2018-07-31 Show GitHub Exploit DB Packet Storm