Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 9, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
253061	7.8	危険	シスコシステムズ	-	複数の Cisco 製品における設定ファイルを置き換えられる脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-0364	2012-02-28 16:16	2012-02-23	Show	GitHub Exploit DB Packet Storm

253062	9	危険	シスコシステムズ	-	複数の Cisco 製品の Web インタフェースにおける任意のコマンドを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2012-0363	2012-02-28 16:13	2012-02-23	Show	GitHub Exploit DB Packet Storm

253063	7.5	危険	Joomla!	-	Joomla! の Weblinks コンポーネントにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4938	2012-02-28 16:04	2011-10-9	Show	GitHub Exploit DB Packet Storm

253064	7.5	危険	RoBIT	-	Joomla! 用の Amblog コンポーネントにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4937	2012-02-28 15:56	2011-10-9	Show	GitHub Exploit DB Packet Storm

253065	7.5	危険	Webmaster-Tips	-	Joomla! 用の Slide Show コンポーネントにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4936	2012-02-28 15:54	2011-10-9	Show	GitHub Exploit DB Packet Storm

253066	7.5	危険	Khader Abbeb	-	Entrans の poll.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4935	2012-02-28 15:53	2011-10-9	Show	GitHub Exploit DB Packet Storm

253067	7.5	危険	SV Creation	-	Get Tube の video.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4934	2012-02-28 15:50	2011-10-9	Show	GitHub Exploit DB Packet Storm

253068	7.5	危険	Geeklog	-	Geeklog の filemgmt/singlefile.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4933	2012-02-28 15:48	2011-10-9	Show	GitHub Exploit DB Packet Storm

253069	4.3	警告	Khader Abbeb	-	Entrans の search.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-4932	2012-02-28 15:47	2011-10-9	Show	GitHub Exploit DB Packet Storm

253070	4.3	警告	atmail pty ltd	-	Atmail Webmail の index.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-4930	2012-02-28 14:27	2011-10-9	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 10, 2026, 5 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
246181	7.1	HIGH Local	dell	emc_recoverpoint emc_recoverpoint_for_virtual_machines	Dell EMC RecoverPoint versions prior to 5.1.2.1 and RecoverPoint for VMs versions prior to 5.2.0.2 contain an uncontrolled resource consumption vulnerability. A malicious boxmgmt user may potentially…	CWE-400 Uncontrolled Resource Consumption	CVE-2018-15772	2024-11-21 12:51	2018-11-13	Show	GitHub Exploit DB Packet Storm

246182	5.5	MEDIUM Local	emc	recoverpoint recoverpoint_for_virtual_machines	Dell EMC RecoverPoint versions prior to 5.1.2.1 and RecoverPoint for VMs versions prior to 5.2.0.2 contain an information disclosure vulnerability. A malicious boxmgmt user may potentially be able to…	CWE-200 Information Exposure	CVE-2018-15771	2024-11-21 12:51	2018-11-13	Show	GitHub Exploit DB Packet Storm

246183	8.1	HIGH Network	pivotal_software	bits_service	Cloud Foundry Bits Service Release, versions prior to 2.14.0, uses an insecure hashing algorithm to sign URLs. A remote malicious user may obtain a signed URL and extract the signing key, allowing th…	CWE-326 Inadequate Encryption Strength	CVE-2018-15796	2024-11-21 12:51	2018-11-10	Show	GitHub Exploit DB Packet Storm

246184	8.8	HIGH Network	pivotal_software	operations_manager	Pivotal Operations Manager, versions 2.0.x prior to 2.0.24, versions 2.1.x prior to 2.1.15, versions 2.2.x prior to 2.2.7, and versions 2.3.x prior to 2.3.1, grants all users a scope which allows for…	CWE-269 Improper Privilege Management	CVE-2018-15762	2024-11-21 12:51	2018-11-3	Show	GitHub Exploit DB Packet Storm

246185	5.4	MEDIUM Network	advantech	webaccess	Advantech WebAccess 8.3.1 and 8.3.2 are vulnerable to cross-site scripting in the Bwmainleft.asp page. An attacker could leverage this vulnerability to disclose credentials amongst other things.	CWE-79 Cross-site Scripting	CVE-2018-15707	2024-11-21 12:51	2018-11-1	Show	GitHub Exploit DB Packet Storm

246186	6.5	MEDIUM Network	advantech	webaccess	WADashboard API in Advantech WebAccess 8.3.1 and 8.3.2 allows remote authenticated attackers to read any file on the filesystem due to a directory traversal vulnerability in the readFile API.	CWE-22 Path Traversal	CVE-2018-15706	2024-11-21 12:51	2018-11-1	Show	GitHub Exploit DB Packet Storm

246187	6.5	MEDIUM Network	advantech	webaccess	WADashboard API in Advantech WebAccess 8.3.1 and 8.3.2 allows remote authenticated attackers to write or overwrite any file on the filesystem due to a directory traversal vulnerability in the writeFi…	CWE-22 Path Traversal	CVE-2018-15705	2024-11-21 12:51	2018-11-1	Show	GitHub Exploit DB Packet Storm

246188	8.8	HIGH Adjacent	systemd_project debian canonical redhat	systemd debian_linux ubuntu_linux enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server enterprise_linux_server_tus enterprise_linux_server_eus enterpr…	A buffer overflow vulnerability in the dhcp6 client of systemd allows a malicious dhcp6 server to overwrite heap memory in systemd-networkd. Affected releases are systemd: versions up to and includin…	CWE-120 Classic Buffer Overflow	CVE-2018-15688	2024-11-21 12:51	2018-10-26	Show	GitHub Exploit DB Packet Storm

246189	7.0	HIGH Local	canonical systemd_project	ubuntu_linux systemd	A race condition in chown_one() of systemd allows an attacker to cause systemd to set arbitrary permissions on arbitrary files. Affected releases are systemd versions up to and including 239.	CWE-362 Race Condition	CVE-2018-15687	2024-11-21 12:51	2018-10-26	Show	GitHub Exploit DB Packet Storm

246190	7.8	HIGH Local	debian canonical systemd_project oracle	debian_linux ubuntu_linux systemd communications_cloud_native_core_network_function_cloud_native_environment	A vulnerability in unit_deserialize of systemd allows an attacker to supply arbitrary state across systemd re-execution via NotifyAccess. This can be used to improperly influence systemd execution an…	CWE-502 Deserialization of Untrusted Data	CVE-2018-15686	2024-11-21 12:51	2018-10-26	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed