Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":July 1, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
252991	5	警告	Plugin Newsletter	-	WordPress 用 Plugin Newsletter プラグインにおけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2012-3588	2012-06-21 14:33	2012-06-19	Show	GitHub Exploit DB Packet Storm

252992	2.6	注意	Debian	-	APT におけるトロイの木馬のパッケージをインストールされる脆弱性	CWE-20 不適切な入力確認	CVE-2012-3587	2012-06-21 14:21	2012-06-14	Show	GitHub Exploit DB Packet Storm

252993	4	警告	Digium	-	Asterisk Open Source の chan_skinny.c におけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2012-3553	2012-06-21 14:19	2012-06-14	Show	GitHub Exploit DB Packet Storm

252994	6.9	警告	チェック・ポイント・ソフトウェア・テクノロジーズ	-	Check Point の複数の製品における権限を取得される脆弱性	CWE-Other その他	CVE-2012-2753	2012-06-21 14:17	2012-06-10	Show	GitHub Exploit DB Packet Storm

252995	7.6	危険	アドビシステムズアップルヒューレット・パッカード OpenSSL Project VMware レッドハット	-	OpenSSL の ssl/t1_lib.c における任意のコードを実行される脆弱性	CWE-362 競合状態	CVE-2010-3864	2012-06-20 17:08	2010-11-16	Show	GitHub Exploit DB Packet Storm

252996	9.3	危険	The Document Foundation	-	LibreOffice に複数の脆弱性	CWE-119 バッファエラー	CVE-2011-2685	2012-06-20 17:03	2011-06-23	Show	GitHub Exploit DB Packet Storm

252997	3.3	注意	Gajim.org	-	Gajim の src/common/latex.py における任意のファイルを上書きされる脆弱性	CWE-59 リンク解釈の問題	CVE-2012-2093	2012-06-20 16:45	2012-04-10	Show	GitHub Exploit DB Packet Storm

252998	9.3	危険	マイクロソフト	-	Microsoft Excel および Microsoft Office における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2012-0141	2012-06-20 16:29	2012-05-8	Show	GitHub Exploit DB Packet Storm

252999	7.5	危険	Mozilla Foundation	-	複数の Mozilla 製品の nsHTMLSelectElement 関数における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2011-3671	2012-06-20 15:24	2012-06-18	Show	GitHub Exploit DB Packet Storm

253000	3.6	注意	MantisBT Group	-	MantisBT におけるアクセス制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-2692	2012-06-20 15:15	2012-06-2	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:July 1, 2026, 4:27 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
246461	9.8	CRITICAL Network	phome	empirecms	Empire CMS 7.5 allows remote attackers to execute arbitrary PHP code via the ftemp parameter in an enews=EditMemberForm action because this code is injected into a memberform.$fid.php file.	CWE-94 Code Injection	CVE-2018-20300	2024-11-21 13:01	2018-12-20	Show	GitHub Exploit DB Packet Storm

246462	9.8	CRITICAL Network	bosch	360-indoor_camera_firmware eyes_outdoor_camera_firmware	An issue was discovered in several Bosch Smart Home cameras (360 degree indoor camera and Eyes outdoor camera) with firmware before 6.52.4. A malicious client could potentially succeed in the unautho…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2018-20299	2024-11-21 13:01	2018-12-20	Show	GitHub Exploit DB Packet Storm

246463	6.5	MEDIUM Network	s3browser	s3_browser	S3 Browser before 8.1.5 contains an XML external entity (XXE) vulnerability, allowing remote attackers to read arbitrary files and obtain NTLMv2 hash values by tricking a user into connecting to a ma…	CWE-611 XXE	CVE-2018-20298	2024-11-21 13:01	2018-12-20	Show	GitHub Exploit DB Packet Storm

246464	8.8	HIGH Network	simbahosting	two-factor-authentication	Cross Site Request Forgery (CSRF) in the two-factor-authentication plugin before 1.3.13 for WordPress allows remote attackers to disable 2FA via the tfa_enable_tfa parameter due to missing nonce vali…	CWE-352 Origin Validation Error	CVE-2018-20231	2024-11-21 13:01	2018-12-19	Show	GitHub Exploit DB Packet Storm

246465	7.8	HIGH Local	gnu	pspp	An issue was discovered in PSPP 1.2.0. There is a heap-based buffer overflow at the function read_bytes_internal in utilities/pspp-dump-sav.c, which allows attackers to cause a denial of service (app…	CWE-787 Out-of-bounds Write	CVE-2018-20230	2024-11-21 13:01	2018-12-19	Show	GitHub Exploit DB Packet Storm

246466	8.0	HIGH Network	subsonic	subsonic	Subsonic V6.1.5 allows internetRadioSettings.view streamUrl CSRF, with resultant SSRF.	CWE-352 CWE-918 Origin Validation Error Server-Side Request Forgery (SSRF)	CVE-2018-20228	2024-11-21 13:01	2018-12-19	Show	GitHub Exploit DB Packet Storm

246467	7.5	HIGH Network	eclipse	rdf4j	RDF4J 2.4.2 allows Directory Traversal via ../ in an entry in a ZIP archive.	CWE-22 Path Traversal	CVE-2018-20227	2024-11-21 13:01	2018-12-19	Show	GitHub Exploit DB Packet Storm

246468	7.5	HIGH Network	libexcel_project	libexcel	wbook_addworksheet in workbook.c in libexcel.a in libexcel 0.01 allows attackers to cause a denial of service (SEGV) via a long name. NOTE: this is not a Microsoft product.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2018-20213	2024-11-21 13:01	2018-12-19	Show	GitHub Exploit DB Packet Storm

246469	7.8	HIGH Local	pur3	espruino	There is a stack-based buffer over-read in the jsfNameFromString function of jsflash.c in Espruino 2V00, leading to a denial of service or possibly unspecified other impact via a crafted js file.	CWE-125 Out-of-bounds Read	CVE-2018-20201	2024-11-21 13:01	2018-12-18	Show	GitHub Exploit DB Packet Storm

246470	5.5	MEDIUM Local	audiocoding debian	freeware_advanced_audio_decoder_2 debian_linux	A NULL pointer dereference was discovered in ifilter_bank of libfaad/filtbank.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8. The vulnerability causes a segmentation fault and application crash…	CWE-476 NULL Pointer Dereference	CVE-2018-20199	2024-11-21 13:01	2018-12-18	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed