Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":July 1, 2026, 4:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
253491 9 危険 VMware - 複数の VMware 製品におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2012-2449 2012-05-8 16:36 2012-05-3 Show GitHub Exploit DB Packet Storm
253492 7.5 危険 VMware - VMware ESXi および ESX における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2012-2448 2012-05-8 16:18 2012-05-3 Show GitHub Exploit DB Packet Storm
253493 9 危険 VMware - VMware ESXi および ESX の VMX プロセスにおけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2012-1517 2012-05-8 15:42 2012-05-3 Show GitHub Exploit DB Packet Storm
253494 9 危険 VMware - VMware ESXi および ESX の VMX プロセスにおけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2012-1516 2012-05-8 15:41 2012-05-3 Show GitHub Exploit DB Packet Storm
253495 7.2 危険 IBM - IBM AIX および VIOS における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-0745 2012-05-8 15:23 2012-04-5 Show GitHub Exploit DB Packet Storm
253496 10 危険 IBM - IBM Cognos TM1 の Admin Server 内の tm1admsd.exe におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2012-0202 2012-05-8 15:14 2012-05-4 Show GitHub Exploit DB Packet Storm
253497 4.6 警告 シスコシステムズ - Cisco Unified IP Phones 9900 シリーズのファームウェアにおける権限を取得される脆弱性 CWE-94
コード・インジェクション 		CVE-2012-1328 2012-05-8 13:59 2012-05-3 Show GitHub Exploit DB Packet Storm
253498 6.1 警告 シスコシステムズ - Cisco IOS の dot11t/t_if_dot11_hal_ath.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-16
環境設定 		CVE-2012-1327 2012-05-8 13:58 2012-05-3 Show GitHub Exploit DB Packet Storm
253499 7.1 危険 シスコシステムズ - Cisco IOS の Zone-Based Firewall におけるサービス運用妨害 (デバイスクラッシュ) の脆弱性 CWE-362
競合状態 		CVE-2012-1324 2012-05-8 13:56 2012-05-3 Show GitHub Exploit DB Packet Storm
253500 4.3 警告 シスコシステムズ - Cisco CiscoWorks Common Services の autologin.jsp における CRLF インジェクションの脆弱性 CWE-94
コード・インジェクション 		CVE-2011-4237 2012-05-8 13:49 2012-05-3 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:July 1, 2026, 4:27 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
246121 9.8 CRITICAL
Network 		sahipro sahi_pro An issue was discovered in Tyto Sahi Pro through 7.x.x and 8.0.0. A parameter in the web reports module is vulnerable to h2 SQL injection. This can be exploited to inject SQL queries and run standard… CWE-89
SQL Injection 		CVE-2018-20469 2024-11-21 13:01 2019-06-17 Show GitHub Exploit DB Packet Storm
246122 8.8 HIGH
Network 		sahipro sahi_pro An issue was discovered in Tyto Sahi Pro through 7.x.x and 8.0.0. A web reports module has "export to excel features" that are vulnerable to CSV injection. An attacker can embed Excel formulas inside… CWE-1236
 Improper Neutralization of Formula Elements in a CSV File 		CVE-2018-20468 2024-11-21 13:01 2019-06-17 Show GitHub Exploit DB Packet Storm
246123 9.8 CRITICAL
Network 		whatsapp whatsapp When receiving calls using WhatsApp for iOS, a missing size check when parsing a sender-provided packet allowed for a stack-based overflow. This issue affects WhatsApp for iOS prior to v2.18.90.24 an… CWE-787
 Out-of-bounds Write 		CVE-2018-20655 2024-11-21 13:01 2019-06-15 Show GitHub Exploit DB Packet Storm
246124 9.8 CRITICAL
Network 		cesanta mongoose An invalid read of 8 bytes due to a use-after-free vulnerability in the mg_http_free_proto_data_cgi function call in mongoose.c in Cesanta Mongoose Embedded Web Server Library 6.13 and earlier allows… CWE-416
 Use After Free 		CVE-2018-20356 2024-11-21 13:01 2019-06-11 Show GitHub Exploit DB Packet Storm
246125 9.8 CRITICAL
Network 		cesanta mongoose An invalid write of 8 bytes due to a use-after-free vulnerability in the mg_http_free_proto_data_cgi function call in mongoose.c in Cesanta Mongoose Embedded Web Server Library 6.13 and earlier allow… CWE-416
 Use After Free 		CVE-2018-20355 2024-11-21 13:01 2019-06-11 Show GitHub Exploit DB Packet Storm
246126 9.8 CRITICAL
Network 		cesanta mongoose An invalid read of 8 bytes due to a use-after-free vulnerability during a "return" in the mg_http_get_proto_data function in mongoose.c in Cesanta Mongoose Embedded Web Server Library 6.13 and earlie… CWE-416
 Use After Free 		CVE-2018-20354 2024-11-21 13:01 2019-06-11 Show GitHub Exploit DB Packet Storm
246127 9.8 CRITICAL
Network 		cesanta mongoose An invalid read of 8 bytes due to a use-after-free vulnerability during a "NULL test" in the mg_http_get_proto_data function in mongoose.c in Cesanta Mongoose Embedded Web Server Library 6.13 and ear… CWE-416
 Use After Free 		CVE-2018-20353 2024-11-21 13:01 2019-06-11 Show GitHub Exploit DB Packet Storm
246128 8.8 HIGH
Network 		cesanta mongoose_embedded_web_server_library Use-after-free vulnerability in the mg_cgi_ev_handler function in mongoose.c in Cesanta Mongoose Embedded Web Server Library 6.13 and earlier allows a denial of service (application crash) or remote … CWE-416
 Use After Free 		CVE-2018-20352 2024-11-21 13:01 2019-06-11 Show GitHub Exploit DB Packet Storm
246129 5.3 MEDIUM
Network 		mi stock_browser
redmi_7_firmware
redmi_note_7_firmware
redmi_note_6_pro_firmware
redmi_6_firmware
redmi_6a_firmware
redmi_s2_firmware
redmi_note_5_pro_firmware
redmi_k20_pro_fir… 		Xiaomi Stock Browser 10.2.4.g on Xiaomi Redmi Note 5 Pro devices and other Redmi Android phones allows content provider injection. In other words, a third-party application can read the user's cleart… CWE-77
Command Injection 		CVE-2018-20523 2024-11-21 13:01 2019-06-8 Show GitHub Exploit DB Packet Storm
246130 7.5 HIGH
Network 		gitlab gitlab An insecure permissions issue was discovered in GitLab Community and Enterprise Edition 9.4 and later but before 11.4.13, 11.5.x before 11.5.6, and 11.6.x before 11.6.1. The runner registration token… CWE-732
 Incorrect Permission Assignment for Critical Resource 		CVE-2018-20500 2024-11-21 13:01 2019-05-18 Show GitHub Exploit DB Packet Storm