Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 22, 2026, 6:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
253181 9.3 危険 IBM - IBM IDS の oninit におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2011-1033 2012-03-27 18:43 2011-02-15 Show GitHub Exploit DB Packet Storm
253182 3.3 注意 daniel friesel - feh の feh_unique_filename 関数における任意のファイルを作成される脆弱性 CWE-59
リンク解釈の問題 		CVE-2011-1031 2012-03-27 18:43 2011-02-14 Show GitHub Exploit DB Packet Storm
253183 4.3 警告 IBM - IBM Lotus Connections の Wikis コンポーネントにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-1030 2012-03-27 18:43 2011-02-14 Show GitHub Exploit DB Packet Storm
253184 4.3 警告 IBM - IBM Rational Build Forge の UI におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-1034 2012-03-27 18:43 2010-01-14 Show GitHub Exploit DB Packet Storm
253185 6.8 警告 IBM - IBM Lotus Connections における内部ログインモジュールへのアクセスを適切に制限しない脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-1032 2012-03-27 18:43 2007-10-11 Show GitHub Exploit DB Packet Storm
253186 5 警告 Lars Hjemli - cgit の convert_query_hexchar 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-189
数値処理の問題 		CVE-2011-1027 2012-03-27 18:43 2011-03-19 Show GitHub Exploit DB Packet Storm
253187 6.8 警告 Apache Software Foundation - Apache Archiva におけるクロスサイトフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2011-1026 2012-03-27 18:43 2011-06-2 Show GitHub Exploit DB Packet Storm
253188 7.2 危険 Linux - Linux kernel の ldm_frag_add 関数におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2011-1017 2012-03-27 18:43 2011-03-1 Show GitHub Exploit DB Packet Storm
253189 4.9 警告 Linux - Linux kernel の ldm_parse_vmdb 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2011-1012 2012-03-27 18:43 2011-03-1 Show GitHub Exploit DB Packet Storm
253190 4 警告 Best Practical Solutions - Best Practical Solutions RT の Scrips_Overlay.pm における重要な情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-1008 2012-03-27 18:43 2011-02-28 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 23, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
245571 9.8 CRITICAL
Network 		sharing-file easy_file_sharing_web_server An issue was discovered in Easy File Sharing (EFS) Web Server 7.2. A stack-based buffer overflow vulnerability occurs when a malicious POST request has been made to forum.ghp upon creating a new topi… CWE-787
 Out-of-bounds Write 		CVE-2018-18912 2024-11-21 12:56 2019-05-14 Show GitHub Exploit DB Packet Storm
245572 5.4 MEDIUM
Network 		kieranoshea calendar The Kieran O'Shea Calendar plugin before 1.3.11 for WordPress has Stored XSS via the event_title parameter in a wp-admin/admin.php?page=calendar add action, or the category name during category creat… CWE-79
Cross-site Scripting 		CVE-2018-18872 2024-11-21 12:56 2019-05-13 Show GitHub Exploit DB Packet Storm
245573 6.1 MEDIUM
Network 		evernote evernote Evernote 6.15 on Windows has an incorrectly repaired stored XSS vulnerability. An attacker can use this XSS issue to inject Node.js code under Present mode. After a victim opens an affected note unde… CWE-79
Cross-site Scripting 		CVE-2018-18524 2024-11-21 12:56 2019-05-13 Show GitHub Exploit DB Packet Storm
245574 6.4 MEDIUM
Physics 		espressif esp-idf An issue was discovered in Espressif ESP-IDF 2.x and 3.x before 3.0.6 and 3.1.x before 3.1.1. Insufficient validation of input data in the 2nd stage bootloader allows a physically proximate attacker … CWE-20
 Improper Input Validation  		CVE-2018-18558 2024-11-21 12:56 2019-05-13 Show GitHub Exploit DB Packet Storm
245575 7.4 HIGH
Network 		ascensia contour_diabetes An issue was discovered in the Ascensia Contour NEXT ONE application for Android before 2019-01-15. It has a statically coded encryption key. Extraction of the encryption key is necessary for deciphe… CWE-798
 Use of Hard-coded Credentials 		CVE-2018-18978 2024-11-21 12:56 2019-05-7 Show GitHub Exploit DB Packet Storm
245576 7.5 HIGH
Network 		ascensia contour_diabetes An issue was discovered in the Ascensia Contour NEXT ONE application for Android before 2019-01-15. An attacker may reverse engineer the codebase to extract sensitive data that contributes to the dis… CWE-200
Information Exposure 		CVE-2018-18977 2024-11-21 12:56 2019-05-7 Show GitHub Exploit DB Packet Storm
245577 5.3 MEDIUM
Network 		ascensia contour_diabetes An issue was discovered in the Ascensia Contour NEXT ONE application for iOS and Android before 2019-01-15. An attacker may retrieve encrypted medical information of any user of the Ascensia cloud pl… CWE-639
 Authorization Bypass Through User-Controlled Key 		CVE-2018-18976 2024-11-21 12:56 2019-05-7 Show GitHub Exploit DB Packet Storm
245578 7.5 HIGH
Network 		ascensia contour_diabetes An issue was discovered in the Ascensia Contour NEXT ONE app for iOS before 2019-01-15. An attacker may proxy communications between the app and Ascensia backend servers because of a weak certificate… CWE-200
Information Exposure 		CVE-2018-18975 2024-11-21 12:56 2019-05-7 Show GitHub Exploit DB Packet Storm
245579 7.4 HIGH
Network 		ascensia contour_diabetes An issue was discovered in the Ascensia Contour NEXT ONE application for Android before 2019-01-15. It has a statically coded initialization vector. Extraction of the initialization vector is necessa… CWE-798
 Use of Hard-coded Credentials 		CVE-2018-18979 2024-11-21 12:56 2019-05-7 Show GitHub Exploit DB Packet Storm
245580 7.5 HIGH
Network 		mozilla thunderbird A crash can occur when processing a crafted S/MIME message or an XPI package containing a crafted signature. This can be used as a denial-of-service (DOS) attack because Thunderbird reopens the last … CWE-476
 NULL Pointer Dereference 		CVE-2018-18513 2024-11-21 12:56 2019-04-27 Show GitHub Exploit DB Packet Storm