Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 8, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
253101	6.8	警告	Zuitu	-	Zuitu の ajax/coupon.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4854	2012-02-9 11:02	2011-10-5	Show	GitHub Exploit DB Packet Storm

253102	7.5	危険	Chill Creations	-	Joomla! 用 ccInvoices コンポーネントにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4853	2012-02-9 11:01	2011-10-5	Show	GitHub Exploit DB Packet Storm

253103	7.5	危険	Netshine Software	-	Joomla! 用 nBill コンポーネントの netinvoice.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-7302	2012-02-9 11:01	2008-06-27	Show	GitHub Exploit DB Packet Storm

253104	7.5	危険	Sclek	-	jSite の admin/login.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-7301	2012-02-9 11:00	2011-10-5	Show	GitHub Exploit DB Packet Storm

253105	8.5	危険	サン・マイクロシステムズ	-	Sun Solaris および OpenSolaris における MAC のポリシーを回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2008-7300	2012-02-9 10:59	2011-10-5	Show	GitHub Exploit DB Packet Storm

253106	2.1	注意	Apache Software Foundation	-	Apache JServ における JDBC パスワードまたはその他の重要な情報を見つけられる脆弱性	CWE-16 環境設定	CVE-2000-1247	2012-02-9 10:58	2011-10-5	Show	GitHub Exploit DB Packet Storm

253107	4.3	警告	Apache Software Foundation	-	Apache Struts におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-1007	2012-02-8 16:35	2012-02-7	Show	GitHub Exploit DB Packet Storm

253108	4.3	警告	Apache Software Foundation	-	Apache Struts におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-1006	2012-02-8 16:34	2012-02-7	Show	GitHub Exploit DB Packet Storm

253109	10	危険	シマンテック	-	Symantec pcAnywhere 製品におけるクライアントへアクセスされる脆弱性	CWE-noinfo 情報不足	CVE-2012-0290	2012-02-8 16:33	2012-01-24	Show	GitHub Exploit DB Packet Storm

253110	7.1	危険	IBM	-	IBM AIX の TCP 実装におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2012-0194	2012-02-8 16:28	2012-02-3	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 9, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
246261	5.5	MEDIUM Local	linux redhat	linux_kernel enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server enterprise_linux_server_eus enterprise_linux_server_tus enterprise_linux_server_aus	The Linux kernel before 4.15-rc8 was found to be vulnerable to a NULL pointer dereference bug in the __netlink_ns_capable() function in the net/netlink/af_netlink.c file. A local attacker could explo…	CWE-476 NULL Pointer Dereference	CVE-2018-14646	2024-11-21 12:49	2018-11-27	Show	GitHub Exploit DB Packet Storm

246262	6.1	MEDIUM Network	redhat	keycloak	A flaw was found in JBOSS Keycloak 3.2.1.Final. The Redirect URL for both Login and Logout are not normalized in org.keycloak.protocol.oidc.utils.RedirectUtils before the redirect url is verified. Th…	CWE-601 Open Redirect	CVE-2018-14658	2024-11-21 12:49	2018-11-14	Show	GitHub Exploit DB Packet Storm

246263	8.1	HIGH Network	redhat	keycloak single_sign-on	A flaw was found in Keycloak 4.2.1.Final, 4.3.0.Final. When TOPT enabled, an improper implementation of the Brute Force detection algorithm will not enforce its protection measures.	CWE-307 mproper Restriction of Excessive Authentication Attempts	CVE-2018-14657	2024-11-21 12:49	2018-11-14	Show	GitHub Exploit DB Packet Storm

246264	5.4	MEDIUM Network	redhat	keycloak single_sign-on	A flaw was found in Keycloak 3.4.3.Final, 4.0.0.Beta2, 4.3.0.Final. When using 'response_mode=form_post' it is possible to inject arbitrary Javascript-Code via the 'state'-parameter in the authentica…	CWE-79 Cross-site Scripting	CVE-2018-14655	2024-11-21 12:49	2018-11-14	Show	GitHub Exploit DB Packet Storm

246265	5.9	MEDIUM Network	powerdns	recursor	An issue has been found in PowerDNS Recursor from 4.0.0 up to and including 4.1.4. A remote attacker sending a DNS query for a meta-type like OPT can lead to a zone being wrongly cached as failing DN…	CWE-20 Improper Input Validation	CVE-2018-14644	2024-11-21 12:49	2018-11-10	Show	GitHub Exploit DB Packet Storm

246266	9.8	CRITICAL Network	redhat	richfaces enterprise_linux	The RichFaces Framework 3.X through 3.3.4 is vulnerable to Expression Language (EL) injection via the UserResource resource. A remote, unauthenticated attacker could exploit this to execute arbitrary…	CWE-94 Code Injection	CVE-2018-14667	2024-11-21 12:49	2018-11-7	Show	GitHub Exploit DB Packet Storm

246267	6.5	MEDIUM Network	gluster redhat debian	glusterfs enterprise_linux_server virtualization_host virtualization debian_linux	A flaw was found in glusterfs server through versions 4.1.4 and 3.1.2 which allowed repeated usage of GF_META_LOCK_KEY xattr. A remote, authenticated attacker could use this flaw to create multiple l…	-	CVE-2018-14660	2024-11-21 12:49	2018-11-1	Show	GitHub Exploit DB Packet Storm

246268	8.8	HIGH Network	debian redhat gluster	debian_linux enterprise_linux glusterfs	It was found that the fix for CVE-2018-10927, CVE-2018-10928, CVE-2018-10929, CVE-2018-10930, and CVE-2018-10926 was incomplete. A remote, authenticated attacker could use one of these flaws to execu…	-	CVE-2018-14651	2024-11-21 12:49	2018-11-1	Show	GitHub Exploit DB Packet Storm

246269	6.5	MEDIUM Network	gluster debian redhat	glusterfs debian_linux virtualization virtualization_host enterprise_linux_server	It was found that usage of snprintf function in feature/locks translator of glusterfs server 3.8.4, as shipped with Red Hat Gluster Storage, was vulnerable to a format string attack. A remote, authen…	-	CVE-2018-14661	2024-11-21 12:49	2018-11-1	Show	GitHub Exploit DB Packet Storm

246270	6.5	MEDIUM Network	redhat debian	gluster_file_system debian_linux enterprise_linux_server virtualization virtualization_host	The Gluster file system through versions 4.1.4 and 3.1.2 is vulnerable to a denial of service attack via use of the 'GF_XATTR_IOSTATS_DUMP_KEY' xattr. A remote, authenticated attacker could exploit t…	-	CVE-2018-14659	2024-11-21 12:49	2018-11-1	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed