Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 13, 2026, 2 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
252071 5 警告 Wireshark - Wireshark の dissect_ber_choice 関数におけるスタック消費の脆弱性 CWE-399
リソース管理の問題 		CVE-2011-1142 2012-03-27 18:43 2011-03-2 Show GitHub Exploit DB Packet Storm
252072 4.3 警告 Wireshark - Wireshark の dissect_6lowpan_iphc 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-189
数値処理の問題 		CVE-2011-1138 2012-03-27 18:43 2011-03-1 Show GitHub Exploit DB Packet Storm
252073 5 警告 Simple Machines - SMF の PlushSearch2 関数における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2011-1131 2012-03-27 18:43 2011-02-11 Show GitHub Exploit DB Packet Storm
252074 7.5 危険 Simple Machines - SMF における SQL インジェクション攻撃を誘発する脆弱性 CWE-20
不適切な入力確認 		CVE-2011-1130 2012-03-27 18:43 2011-02-11 Show GitHub Exploit DB Packet Storm
252075 5 警告 mark pilgrim - Universal Feed Parser の feedparser.py におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2011-1156 2012-03-27 18:43 2008-01-31 Show GitHub Exploit DB Packet Storm
252076 3.5 注意 Simple Machines - SMF の EditNews 関数におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-1129 2012-03-27 18:43 2011-02-11 Show GitHub Exploit DB Packet Storm
252077 7.5 危険 Simple Machines - SMF の loadUserSettings 関数におけるアクセスを取得される脆弱性 CWE-310
暗号の問題 		CVE-2011-1128 2012-03-27 18:43 2011-02-11 Show GitHub Exploit DB Packet Storm
252078 10 危険 Simple Machines - SMF の SSI.php における詳細不明な脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-1127 2012-03-27 18:43 2011-02-11 Show GitHub Exploit DB Packet Storm
252079 6.9 警告 VMware - VIX API および VMware Workstation で使用されている VMware vmrun における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-1126 2012-03-27 18:43 2011-03-29 Show GitHub Exploit DB Packet Storm
252080 4.3 警告 IBM - IBM Lotus Sametime の stcenter.nsf におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-1106 2012-03-27 18:43 2011-03-1 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 13, 2026, 4:20 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
246321 7.5 HIGH
Network 		openafs
debian 		openafs
debian_linux 		An issue was discovered in OpenAFS before 1.6.23 and 1.8.x before 1.8.2. Several data types used as RPC input variables were implemented as unbounded array types, limited only by the inherent 32-bit … CWE-400
 Uncontrolled Resource Consumption 		CVE-2018-16949 2024-11-21 12:53 2018-09-12 Show GitHub Exploit DB Packet Storm
246322 7.5 HIGH
Network 		openafs
debian 		openafs
debian_linux 		An issue was discovered in OpenAFS before 1.6.23 and 1.8.x before 1.8.2. Several RPC server routines did not fully initialize their output variables before returning, leaking memory contents from bot… CWE-200
Information Exposure 		CVE-2018-16948 2024-11-21 12:53 2018-09-12 Show GitHub Exploit DB Packet Storm
246323 9.8 CRITICAL
Network 		openafs
debian 		openafs
debian_linux 		An issue was discovered in OpenAFS before 1.6.23 and 1.8.x before 1.8.2. The backup tape controller (butc) process accepts incoming RPCs but does not require (or allow for) authentication of those RP… CWE-287
Improper Authentication 		CVE-2018-16947 2024-11-21 12:53 2018-09-12 Show GitHub Exploit DB Packet Storm
246324 7.5 HIGH
Network 		lg lnb5110_firmware
lnb5320_firmware
lnb5320r_firmware
lnb7210_firmware
lnd3230r_firmware
lnd5110_firmware
lnd5110r_firmware
lnd5220r_firmware
lnd7210_firmware
lnd7210r_firmwa… 		LG LNB*, LND*, LNU*, and LNV* smart network camera devices have broken access control. Attackers are able to download /updownload/t.report (aka Log & Report) files and download backup files (via down… CWE-552
 Files or Directories Accessible to External Parties 		CVE-2018-16946 2024-11-21 12:53 2018-09-12 Show GitHub Exploit DB Packet Storm
246325 9.8 CRITICAL
Network 		rubedo_project rubedo Rubedo through 3.4.0 contains a Directory Traversal vulnerability in the theme component, allowing unauthenticated attackers to read and execute arbitrary files outside of the service root path, as d… CWE-22
Path Traversal 		CVE-2018-16836 2024-11-21 12:53 2018-09-12 Show GitHub Exploit DB Packet Storm
246326 6.5 MEDIUM
Network 		xunfeng_project xunfeng CSRF in the anti-csrf decorator in xunfeng 0.2.0 allows an attacker to modify the configuration via a Flash file because views/lib/AntiCSRF.py can overwrite the request.host value with the content of… CWE-352
 Origin Validation Error 		CVE-2018-16832 2024-11-21 12:53 2018-09-11 Show GitHub Exploit DB Packet Storm
246327 5.9 MEDIUM
Network 		smarty smarty Smarty before 3.1.33-dev-4 allows attackers to bypass the trusted_dir protection mechanism via a file:./../ substring in an include statement. CWE-22
Path Traversal 		CVE-2018-16831 2024-11-21 12:53 2018-09-11 Show GitHub Exploit DB Packet Storm
246328 7.5 HIGH
Network 		bro bro In Bro through 2.5.5, there is a memory leak potentially leading to DoS in scripts/base/protocols/krb/main.bro in the Kerberos protocol parser. CWE-772
 Missing Release of Resource after Effective Lifetime 		CVE-2018-16807 2024-11-21 12:53 2018-09-11 Show GitHub Exploit DB Packet Storm
246329 6.5 MEDIUM
Adjacent 		pektron passive_keyless_entry_and_start_system_firmware A Pektron Passive Keyless Entry and Start (PKES) system, as used on the Tesla Model S and possibly other vehicles, relies on the DST40 cipher, which makes it easier for attackers to obtain access via… CWE-327
 Use of a Broken or Risky Cryptographic Algorithm 		CVE-2018-16806 2024-11-21 12:53 2018-09-11 Show GitHub Exploit DB Packet Storm
246330 4.8 MEDIUM
Network 		b3log solo In b3log Solo 2.9.3, XSS in the Input page under the Publish Articles menu, with an ID of linkAddress stored in the link JSON field, allows remote attackers to inject arbitrary Web scripts or HTML vi… CWE-79
Cross-site Scripting 		CVE-2018-16805 2024-11-21 12:53 2018-09-11 Show GitHub Exploit DB Packet Storm