Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 20, 2026, 4 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
253221 7.5 危険 Cake Software Foundation - CakePHP の _validatePost 関数における内部 Cake キャッシュを変更される脆弱性 CWE-20
不適切な入力確認
CVE-2010-4335 2012-03-27 18:42 2011-01-14 Show GitHub Exploit DB Packet Storm
253222 4 警告 io-socket-ssl - IO::Socket::SSL モジュールにおける証明書の制限を回避される脆弱性 CWE-310
暗号の問題
CVE-2010-4334 2012-03-27 18:42 2011-01-13 Show GitHub Exploit DB Packet Storm
253223 7.5 危険 Laurent Destailleur - AWStats における任意のコマンドを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2010-4367 2012-03-27 18:42 2010-12-2 Show GitHub Exploit DB Packet Storm
253224 4.3 警告 abk-soft - Chameleon Social Networking の forum_new_topic.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-4366 2012-03-27 18:42 2010-12-1 Show GitHub Exploit DB Packet Storm
253225 7.5 危険 Joomla!
Jextensions
- Joomla! のJE Ajax Event Calendar コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-4365 2012-03-27 18:42 2010-12-1 Show GitHub Exploit DB Packet Storm
253226 4.3 警告 dadabik - DaDaBIK における保護メカニズムを回避される脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-4364 2012-03-27 18:42 2010-12-1 Show GitHub Exploit DB Packet Storm
253227 6.8 警告 mrcgiguy - MCG FreeTicket の contact.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-4363 2012-03-27 18:42 2010-12-1 Show GitHub Exploit DB Packet Storm
253228 7.5 危険 Micronetsoft - MicroNetsoft RV Dealer Website における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-4362 2012-03-27 18:42 2010-12-1 Show GitHub Exploit DB Packet Storm
253229 4.3 警告 jurpo - Jurpopage の url-gateway.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-4361 2012-03-27 18:42 2010-12-1 Show GitHub Exploit DB Packet Storm
253230 7.5 危険 jurpo - Jurpopage の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-4360 2012-03-27 18:42 2010-12-1 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 20, 2026, 4:01 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
245751 5.3 MEDIUM
Network
1234n minicms MiniCMS 1.10 allows full path disclosure via /mc-admin/post.php?state=delete&delete= with an invalid filename. CWE-22
Path Traversal
CVE-2018-18890 2024-11-21 12:56 2018-11-1 Show GitHub Exploit DB Packet Storm
245752 9.8 CRITICAL
Network
laravelcms_project laravelcms An issue was discovered in laravelCMS through 2018-04-02. \app\Http\Controllers\Backend\ProfileController.php allows upload of arbitrary PHP files because the file extension is not properly checked a… CWE-434
 Unrestricted Upload of File with Dangerous Type 
CVE-2018-18888 2024-11-21 12:56 2018-11-1 Show GitHub Exploit DB Packet Storm
245753 9.8 CRITICAL
Network
s-cms s-cms S-CMS PHP 1.0 has SQL injection in member/member_news.php via the type parameter (aka the $N_type field). CWE-89
SQL Injection
CVE-2018-18887 2024-11-21 12:56 2018-11-1 Show GitHub Exploit DB Packet Storm
245754 8.8 HIGH
Local
xen xen An issue was discovered in Xen 4.9.x through 4.11.x, on Intel x86 platforms, allowing x86 HVM and PVH guests to cause a host OS denial of service (NULL pointer dereference) or possibly have unspecifi… CWE-476
 NULL Pointer Dereference
CVE-2018-18883 2024-11-21 12:56 2018-11-1 Show GitHub Exploit DB Packet Storm
245755 9.8 CRITICAL
Network
nconsulting nc-cms nc-cms through 2017-03-10 allows remote attackers to execute arbitrary PHP code via the "Upload File or Image" feature, with a .php filename and "Content-Type: application/octet-stream" to the index.… CWE-434
 Unrestricted Upload of File with Dangerous Type 
CVE-2018-18874 2024-11-21 12:56 2018-11-1 Show GitHub Exploit DB Packet Storm
245756 5.5 MEDIUM
Local
jasper_project
canonical
debian
suse
jasper
ubuntu_linux
debian_linux
linux_enterprise_server
linux_enterprise_desktop
An issue was discovered in JasPer 2.0.14. There is a NULL pointer dereference in the function ras_putdatastd in ras/ras_enc.c. CWE-476
 NULL Pointer Dereference
CVE-2018-18873 2024-11-21 12:56 2018-11-1 Show GitHub Exploit DB Packet Storm
245757 9.8 CRITICAL
Network
phome empirecms EmpireCMS V7.5 allows remote attackers to upload and execute arbitrary code via ..%2F directory traversal in a .php filename in the upload/e/admin/ecmscom.php path parameter. CWE-22
Path Traversal
CVE-2018-18869 2024-11-21 12:56 2018-10-31 Show GitHub Exploit DB Packet Storm
245758 6.1 MEDIUM
Network
no-cms_project no-cms No-CMS 1.1.3 is prone to Persistent XSS via a contact_us name parameter, as demonstrated by the VG48Z5PqVWname parameter. CWE-79
Cross-site Scripting
CVE-2018-18868 2024-11-21 12:56 2018-10-31 Show GitHub Exploit DB Packet Storm
245759 8.6 HIGH
Network
tecrail responsive_filemanager An SSRF issue was discovered in tecrail Responsive FileManager 9.13.4 via the upload.php url parameter. NOTE: this issue exists because of an incomplete fix for CVE-2018-15495. CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2018-18867 2024-11-21 12:56 2018-10-31 Show GitHub Exploit DB Packet Storm
245760 7.5 HIGH
Network
lightbend spray-json Lightbend Spray spray-json through 1.3.4 allows remote attackers to cause a denial of service (resource consumption) because of Algorithmic Complexity during the parsing of many JSON object fields (w… CWE-400
 Uncontrolled Resource Consumption
CVE-2018-18854 2024-11-21 12:56 2018-10-31 Show GitHub Exploit DB Packet Storm