Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 13, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
253651 10 危険 Goforandroid - Android 用 GO Email Widget アプリケーションにおける詳細不明な脆弱性 CWE-noinfo
情報不足
CVE-2012-1394 2012-03-9 11:08 2012-03-7 Show GitHub Exploit DB Packet Storm
253652 10 危険 Goforandroid - Android 用 GO SMS Pro アプリケーションにおける詳細不明な脆弱性 CWE-noinfo
情報不足
CVE-2012-1393 2012-03-9 11:06 2012-03-7 Show GitHub Exploit DB Packet Storm
253653 10 危険 MoboTap - Android 用 Dolphin Browser Mini アプリケーションにおける詳細不明な脆弱性 CWE-noinfo
情報不足
CVE-2012-1404 2012-03-8 16:30 2012-03-7 Show GitHub Exploit DB Packet Storm
253654 10 危険 MoboTap - Android 用 Dolphin Browser CN アプリケーションにおける詳細不明な脆弱性 CWE-noinfo
情報不足
CVE-2012-1403 2012-03-8 16:29 2012-03-7 Show GitHub Exploit DB Packet Storm
253655 10 危険 MoboTap - Android 用 Dolphin Browser HD アプリケーションにおける詳細不明な脆弱性 CWE-noinfo
情報不足
CVE-2012-1392 2012-03-8 16:29 2012-03-7 Show GitHub Exploit DB Packet Storm
253656 10 危険 Shanghai Truecolor Multimedia - Android 用 QianXun YingShi アプリケーションにおける詳細不明な脆弱性 CWE-noinfo
情報不足
CVE-2012-1402 2012-03-8 16:18 2011-03-7 Show GitHub Exploit DB Packet Storm
253657 10 危険 IntSig Information - Android 用 CamScanner アプリケーションにおける詳細不明な脆弱性 CWE-noinfo
情報不足
CVE-2012-1401 2012-03-8 16:16 2012-03-7 Show GitHub Exploit DB Packet Storm
253658 10 危険 uplusbox - Android 用 U+Box 2.0 Pad アプリケーションにおける詳細不明な脆弱性 CWE-noinfo
情報不足
CVE-2012-1400 2012-03-8 16:14 2012-03-7 Show GitHub Exploit DB Packet Storm
253659 10 危険 uplusbox - Android 用 U+Box 2.0 アプリケーションにおける詳細不明な脆弱性 CWE-noinfo
情報不足
CVE-2012-1399 2012-03-8 16:13 2012-03-7 Show GitHub Exploit DB Packet Storm
253660 10 危険 Innovation Technology - Android 用 mOffice - Outlook sync アプリケーションにおける詳細不明な脆弱性 CWE-noinfo
情報不足
CVE-2012-1391 2012-03-8 16:10 2012-03-7 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 13, 2026, 4:20 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
246161 3.1 LOW
Network
citrix sharefile_storagezones_controller Citrix ShareFile StorageZones Controller before 5.4.2 allows Directory Traversal. CWE-22
Path Traversal
CVE-2018-16968 2024-11-21 12:53 2018-09-27 Show GitHub Exploit DB Packet Storm
246162 6.5 MEDIUM
Network
circontrol circarlife_scada An issue was discovered in CIRCONTROL CirCarLife before 4.3. Due to the storage of multiple sensitive information elements in a JSON format at /services/system/setup.json, an authenticated but unpriv… CWE-200
Information Exposure
CVE-2018-16672 2024-11-21 12:53 2018-09-27 Show GitHub Exploit DB Packet Storm
246163 9.8 CRITICAL
Network
tgstation13 tgstation-server In Tgstation tgstation-server 3.2.4.0 through 3.2.1.0 (fixed in 3.2.5.0), active logins would be cached, allowing subsequent logins to succeed with any username or password. NVD-CWE-noinfo
CVE-2018-17107 2024-11-21 12:53 2018-09-25 Show GitHub Exploit DB Packet Storm
246164 9.8 CRITICAL
Network
debian
hylafax
debian_linux
hylafax\+
hylafax
HylaFAX 6.0.6 and HylaFAX+ 5.6.0 allow remote attackers to execute arbitrary code via a dial-in session that provides a FAX page with the JPEG bit enabled, which is mishandled in FaxModem::writeECMDa… CWE-824
CWE-787
 Access of Uninitialized Pointer
 Out-of-bounds Write
CVE-2018-17141 2024-11-21 12:53 2018-09-22 Show GitHub Exploit DB Packet Storm
246165 7.5 HIGH
Network
polyai_project polyai The mintToken function of a smart contract implementation for PolyAi (AI), an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to … CWE-190
 Integer Overflow or Wraparound
CVE-2018-17050 2024-11-21 12:53 2018-09-22 Show GitHub Exploit DB Packet Storm
246166 6.1 MEDIUM
Network
limesurvey limesurvey In LimeSurvey 3.14.7, HTML Injection and Stored XSS have been discovered in the appendix via the surveyls_title parameter to /index.php?r=admin/survey/sa/insert. CWE-79
Cross-site Scripting
CVE-2018-17003 2024-11-21 12:53 2018-09-22 Show GitHub Exploit DB Packet Storm
246167 6.1 MEDIUM
Network
ricoh mp_2001sp_firmware On the RICOH MP 2001 printer, HTML Injection and Stored XSS vulnerabilities have been discovered in the area of adding addresses via the entryNameIn parameter to /web/entry/en/address/adrsSetUserWiza… CWE-79
Cross-site Scripting
CVE-2018-17002 2024-11-21 12:53 2018-09-22 Show GitHub Exploit DB Packet Storm
246168 6.1 MEDIUM
Network
ricoh sp_4510sf_firmware On the RICOH SP 4510SF printer, HTML Injection and Stored XSS vulnerabilities have been discovered in the area of adding addresses via the entryNameIn parameter to /web/entry/en/address/adrsSetUserWi… CWE-79
Cross-site Scripting
CVE-2018-17001 2024-11-21 12:53 2018-09-22 Show GitHub Exploit DB Packet Storm
246169 6.1 MEDIUM
Network
zohocorp manageengine_supportcenter_plus In Zoho ManageEngine SupportCenter Plus before 8.1 Build 8109, there is HTML Injection and Stored XSS via the /ServiceContractDef.do contractName parameter. CWE-79
Cross-site Scripting
CVE-2018-16965 2024-11-21 12:53 2018-09-22 Show GitHub Exploit DB Packet Storm
246170 6.1 MEDIUM
Network
zohocorp manageengine_desktop_central Zoho ManageEngine Desktop Central 10.0.271 has XSS via the "Features & Articles" search field to the /advsearch.do?SUBREQUEST=XMLHTTP URI. CWE-79
Cross-site Scripting
CVE-2018-16833 2024-11-21 12:53 2018-09-22 Show GitHub Exploit DB Packet Storm